Solved! Go to Solution.
You will need a separate modem to use it in place of the Hub. See here:-
Quick start guide here:-
Perhaps more importantly, the Orbi works fine in AP mode connected to a modem router; you do need to turn of your wifi on the modem router but apart from that just select AP mode for the Orbi. The only problem I had was that my Smarthub was unreliable so I am now using a TP Link VR900 as a modem router. That works fine but I no IPV6; I can't see any need for that so it's ok. I tried using the VR900 in modem only mode (bridge) and the Orbi in router mode but couldn't see my connection stats so reverted to the Orbi in AP mode. Bottom line, the Orbi works fine in Either mode, shame about the Smarthub which has had me banded down to 60Mbs since Jan.
I had a lot of issues with DHCP on the Smarthub some devices notgetting an IP address and even the same address issued to 2 differnet devices so I prefer to use the Orbie as the router. Another solution to the double NAT issue is to put the Orbie into the DMZ zone on the Smarthub. Obviously this will foward all unsolicited traffic that is not blocked by the firewall to the Orbi. As this will be fowarded to a Router with its own firewall ETC, is this as safe?
(According to the Smarthub info, the Orbi is still behind the firewall of the Smarthub but by passes the NAT and DHCP.
I would appreciate any comments on this configuration.
A device in the DMZ will still use the same private IP address range of the Hub e.g., within the 192.168.1.0/24 range, and as such traffic to and from it will still use the NAT function of the Hub. Not sure of the 'help' message from the latest Hubs, but it used to state:
"Only one device, with either a static or a private DHCP address, can be placed into the DMZ. The Hub will give it a private IP address and forward all appropriate traffic to this device.
Important: Placing a host in DMZ has significant implications for its security. Although it will be still located behind the Hub's firewall ALL unsolicited traffic not rejected by the firewall will be sent to this host by the Hub's Network Address Translator, increasing it's vulnerability to attack."
This specifically mentions traffic not rejected by the Hub's NAT function being sent to the device in the DMZ.
To be honest, if I'd invested several hundred pounds on the Orbi, I'd get a modem and remove the Hub. You can find second hand Openreach (Huawei HG612) modems on ebay for a reasonable price, or if you want new, then there's the option of the Netgear DM200 or the Draytek 130.