Double NAT on Virgin Media routers / alternative to 'Modem Mode'

Soldato
Joined
30 Jun 2019
Posts
8,091
There is a guide here, which explains how to run a Virgin Hub5X router alongside another router. Link:

The Virgin router forwards all traffic to the 2nd router, without being affected by the Hub5X's firewall.

This is accomplished by enabling a DMZ, and pointing it towards the IP address of the 2nd router, which has it's own firewall.

Firewall options on the Virgin router can also be disabled. Presumably UPNP also.

Disabling WIFI and DHCP on the Hub seems like it would be a good idea.

I want a reliable network configuration, and the stories I've read about modem mode on Virgin's hub routers leave a lot to be desired. Running a 2nd router in the network, would allow more advanced features to be used, like SQM /bandwidth control for the WAN connection.

Questions:
  • Looking at the guide, it looks like there is probably no way to (easily) access the web interface of the Hub5X again (it recommends to only use the 10GBE port for the WAN IP, but no others). Is that correct?
  • Are there any strong reasons to avoid running a double NAT?
  • Would the IP address on the 2nd router have to be changed to meet the format: 192.168.0.x, in order to configure the DMZ?
 
Last edited:
There is a guide here, which explains how to run a Virgin Hub5X router alongside another router. Link:

The Virgin router forwards all traffic to the 2nd router, without being affected by the Hub5X's firewall.

This is accomplished by enabling a DMZ, and pointing it towards the IP address of the 2nd router, which has it's own firewall.

Firewall options on the Virgin router can also be disabled. Presumably UPNP also.

Disabling WIFI and DHCP on the Hub seems like it would be a good idea.

I want a reliable network configuration, and the stories I've read about modem mode on Virgin's hub routers leave a lot to be desired. Running a 2nd router in the network, would allow more advanced features to be used, like SQM /bandwidth control for the WAN connection.

Questions:
  • Looking at the guide, it looks like there is probably no way to (easily) access the web interface of the Hub5X again (it recommends to only use the 10GBE port for the WAN IP, but no others). Is that correct?
  • Are there any strong reasons to avoid running a double NAT?
  • Would the IP address on the 2nd router have to be changed to meet the format: 192.168.0.x, in order to configure the DMZ?
1. You can normally access the SH via a certain ip when in bridge mode. You may have to access it locally from the other port in this case.
2. Generally not recommended but if you have no choice…
3. Yes, the Hub needs to have a different ip and subnet completely. Then offers dhcp to your router on the wan interface. Then you are free to use your own subnet.

Silly how the Hub5x does support bridge mode.
 
Last edited:
There’s also this:


Which ditches the 5x completely. But would need a router with a SFP+ port and no guarantee that’ll it’ll keep working.
 
Back
Top Bottom