Double NAT in a hotel room - missing the point here

Hi there,


I've read through many discussions on the topic, and I really do seem to be missing the point of the answers given in those discussions so maybe you can help me.


I travel with a travel router so that I can take 1 hotel room WIRED connection and turn it into multiple wireless connections. I obviously just want my router to be the only device on the hotel room network.


I use NAT mode in a hotel I am in with my Airport Express and I see Double NAT. This has the appearance of working OK, except:

-Mail on any iOS device will not fetch mail (connection to server failed)

-Intermittent DNS issues

-Dropbox connections on Mac or iOS will not work: Dropbox believes the connection is not secure

-Many more issues that do not make Double NAT error mode a viable connection


Well, OK. So many people seem to suggest (I don't know why) that some router on the hotel's network may be preventing other routers. This sounds absurd, but OK. I tried the same hotel room connection with a $20 router from China, an Asus WL-530g. The ASUS in its NAT mode takes up 1 IP on the hotel WIRED network and provides multiple wireless IPs. And:

-There are zero connectivity issues


What exactly is the Airport express missing?


I am able to get NAT working with a Linksys router, a Cisco router, and a second Linksys router - all brought by my coworkers.


"Distribute a range of IP addresses" options just seems to pull all the wireless devices to the hotel network directly - this means every device will now get charged.


Bridge mode has nothing to do with NAT and just puts all devices on the hotel network again.


Am I missing something? This is a $99 travel router, and it can't seem to perform the most used function one would have in a travel router - routing IP addresses while travelling. Is there a reason the alternate suggestions I have listed are offered as viable solutions?

Airport Express-OTHER, Mac OS X (10.6.7)

Posted on May 15, 2011 9:39 AM

Reply
5 replies

May 15, 2011 10:18 AM in response to idrinkdeodorant

What exactly is the problem here that NAT mode doesn't work for Airport Express but does for what looks like 4 other routers I have tried so far in the same hotel room connection?

Don't have an answer for you because I have never experienced the type of problems that you have encountered. Have you considered that your Express may not be performing correctly?


I've had no problems configuring the Express with the Double NAT ( I click "ignore" to the message and the light turns to green) when I want mutliple wireless devices to connect to the AirPort Express in my hotel room. Internet, email, etc all work just fine on all devices.


Maybe once or twice a year, I do run into a hotel network that just won't accept the connection of the Express when it is performing DHCP and NAT....nothing connects to the Internet.


In those cases, I change the Express to Bridge Mode and try to only use my laptop for wireless. If I do need wireless for the iPhone, the hotel will almost always waive the extra charge for the second connection.

Sep 9, 2015 9:19 AM in response to Sam Katz1

You need to get your hotel's DHCP settings (IP address and dns servers) from the hotel's router

No you don't, if the hotel charges for each separate device....some do, or try to.....or the sign on for each device makes you go through the "agreement" for every device that you want to use.


When you use Bridge, you will see other users on the hotel network under the Shared heading in the Finder on your Mac. And those other users can "see" you and your devices as well. Not exactly a secure setup if you care about privacy.


Give me Double NAT every time. The hotel router only "sees" one device this way.....your AirPort....and your own devices are always on a different private subnet......so you won't "see" all the devices from other users on the hotel network....and they will not "see" you. The bottom line.....Double NAT is a much more secure way to connect to the hotel network.

Oct 28, 2015 12:31 PM in response to Bob Timmons

I just have to say that being connected to the Internet and not is the option here. I would expect double NAT to only block some services, but speaking as a techie here but not a networking specialist, it may block proxy servers, in which case the login won't appear.


If you are really concerned about privacy, do two things:


1. call the tech support number. they loosely administer the network, and will they tell you if they have VLANed (basically the same as having a separate guest network) for each connection or not. I won't advise you to do that as you can adjust your mac so it doesn't share anything, in fact that's how it is by default. But most hotels use this VLAN technology as it comes in most switches that are past the most basic models.


2. Use VPN. That is a much more secure, although more expensive option that you should use if traveling frequently so I hear.

3. Hotels have an incentive to respect user's privacy. If you are file sharing in your hotel room you shouldn't though for many legal and other reasons like hogging network bandwidth, which brings me to my last point. Although extremely rare, using your airport express could break their network. There are travel routers available also*.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Double NAT in a hotel room - missing the point here

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.