WIFI Connected Devices

Topic

New Reply

Just installed new Comcast system. When I displayed the Gateway modem it showed right off 6 “Connected Devices” but I only am using one desktop. I called Comcast twice and no one knows what these devices are. They only suggested ‘Pausing’ them. Although the display says I can unPause if the Pause caused a problem, the one I paused disappeared from the display so I cannot unPause although so far not seeing any effect. I searched Google for the devices with no results. Does any one know what these are and if I can safely pause them? Here are just 3.

Actionte-5310

Asustekc-C6D5

IntelCor-60A8

I would really appreciate any help as I should delete these if dangerous or not if not dangerous. Thanks in advance.

Reply | Quote

Replies

Is your WIFi open? Or do you have a good password on your WiFi network? If no password, you need to create one.

Some ISPs allow open networks for public use (hotspots) on their customer’s connections.
Does Comcast offer free connections (hotspots) everywhere to their customers?
If that is the case, the public is using your bandwidth.
You can block it by logging in to the Router and turning it off (if they allow access to their router).

Look on the device and see if there is an ID and password on a tag. You can see the IP address segment by looking on your PC. Use your browser to log in to the device. Create a good WiFi password if there is not one, and block hotspot connections if they exist..

1 user thanked author for this post.

J9438

Reply | Quote

PKCano wrote:

Some ISPs allow open networks for public use (hotspots) on their customer’s connections.
Does Comcast offer free connections (hotspots) everywhere to their customers?
If that is the case, the public is using your bandwidth.
You can block it by logging in to the Router and turning it off (if they allow access to their router).

Comcast’s “Xfinity WiFi Home Hotspot” can be disabled via app or website, but not on the router:

How to Turn Xfinity WiFi Home Hotspot On or Off Using Xfinity xFi or My Account

Xfinity WiFi Home Hotspots FAQs

3 users thanked author for this post.

Michael432, J9438, PKCano

Reply | Quote

? says:

iot stuff? stove, refridge, wifi signal throwers, garage doors ring db, on and on…

1 user thanked author for this post.

J9438

Reply | Quote

The strings match company names who manufactured or branded the myriad kinds of devices mentioned in post 2384927.

Actionte = Actiontec Electronics produce adapters, networking adapters, routers, etc.
Asustekc = AsusTek Computer Inc. produce routers
IntelCor = Intel Corporate make or brand Wi-Fi & ethernet adapters

(Codes after the names may be the beginning of a Media Access Control address assigned to those devices.)

If these things are still present after a reboot or two you may have to call Comcast.

1 user thanked author for this post.

J9438

Reply | Quote

PKCano wrote:

Is your WIFi open? Or do you have a good password on your WiFi network?

First thing I did was change default password to a long one. Also turned off SSID broadcast.

PKCano wrote:

Does Comcast offer free connections (hotspots) everywhere to their customers?

Yes. I found a bunch of info on that yesterday but today cannot find how to turn that off.

PKCano wrote:

You can block it by logging in to the Router and turning it off

I asks the Comcast rep what the http://192. etc address was and he did not know or just would not tell me. With my former Att that was on a label on the modem and I was able to go in and even turn off WIFI  since I have a simple wired set up and only need WIFI to update my cell phone (another story-why can’t I use cell date to update). With Comcast I can use their web site to do a lot like change WIFI password and see connected devices.

b wrote:

Comcast’s “Xfinity WiFi Home Hotspot” can be disabled via app or website

Thanks for the link. I will go back and disable the Hotspot.

anonymous wrote:

iot stuff? stove,

Nope, old school.

anonymous wrote:

If these things are still present after a reboot

Did a reboot and now seem to be gone with my subrouter correctly showing.  If that still holds after a few days you would think they would clean up their modems before installing them!!

anonymous wrote:

you may have to call Comcast.

Called twice and both reps had no idea.

Maybe it would easier if I just was like a lot of people and did not dig into this stuff, but we WOODY people want to know how stuff works and if it is right!!! Thanks to all for your input!!!

Reply | Quote

Well as it turns out the 6 devices did not go away, and the WIFI hotspot is enabled by default. It seems what you see is determined by the path you take on their website. If you go to account/settings and scroll down to “internet” … and then the Connect tab and more scroll down you see the 6 devices, one of which has an icon showing paused where I paused it the other day. If you go through WIFI password/gateway/devices it only shows my subrouter. Same with the link instructions for disabling the hotspot given above which says you can go to advanced but that does not work. If I take a different path then I find a box for disabling hotspot which then takes 24 hours to occur.

This is the most confusing mess I have ever seen. No wonder the reps had no idea. Also my cell phone does not detect either their public hotspot or the secure private hotspot, but there was something I have not figured out yet about registering the device for the hotspot.

Reply | Quote

? says:

you can always go to your favorite electronics dealer and buy some networking equiptment that allows you to be in charge. there are many folks here that are glad to help you know what to get and how to set it up to your liking…

1 user thanked author for this post.

J9438

Reply | Quote

Well, I went to Xfinity Community and searched “connected devices” and seems a LOT of people have the same concern and the Xfinity reps that answer do not seem to know much. Some poor lady complained that everyone in her condo was on her WIFI. Another guy complained that even though he “paused” his son’s gaming console the kid still was logging in and playing.

However, with more Google research I have some answers. First my connected devices were all showing ‘last connected” over a month before I got the service so that sounds like uncleared  residue from a reused modem. Then I found out the way to delete a connected device is by changing the WIFI password (I know that sounds strange but it worked). I connected my cell phone to my WIFI (which incidently the cell shows as insecure – so I guess I need to use their secure WIFI (another task)) so my cell showed up as a connected device. I disconnected the cell but could not delete it. So I changed the WIFI password and finally at the bottom of all the scroll downs there was a button for “Forget this device”, which deleted the cell as a connected device. To get to that button, though, is a nightmare. In general it is through account settings/internet(bottom left)/WIFI details/Edit wXfi(at top right)/change WIFI name/Connect(tab at top)/Devices Section(right arrow)/your device(right arrow)/Device Details(at bottom right arrow)/Forget device button. Whew!!

Also the Pause did seem to work but perhaps the guy missed the scroll down option(pause until I remove) as default is for 30 minutes.

Reply | Quote

J9438 wrote:

Also turned off SSID broadcast.

That doesn’t do anything except confuse legitimate connections. Leave it on and set a long and complex WiFi passphrase.

cheers, Paul

1 user thanked author for this post.

J9438

Reply | Quote

Debunking Myths: Is Hiding Your Wireless SSID Really More Secure?

5 Wi-Fi security myths you must abandon now

2 users thanked author for this post.

doriel, J9438

Reply | Quote

Paul T wrote:

That doesn’t do anything

Thanks to Paul and Rick for the info. I read both articles!

Last night I noticed both my 2.4 and 5.0 WIFI lights blinking. Since I had nothing connected and was concerned about unknown connected devices using my WIFI I did not sleep much. This morning when reviewing my WIFI stuff I noticed I had left on the Broadcast SSID. I turned it off and, walaa, the WIFI lights stopped blinking.  So I guess that might be one advantage of having the Broadcast off (to see if your WIFI is being used??) as I guess the Broadcast must transmit every few seconds and consequently lights the WIFI in use leds.

I see from your articles the Broadcast off just hides it from curious neighbors next door. I do use a long password, but interestingly when I try connecting from my cell, the cell says the connection is not secure even though the Xfinity highest security option is WPA/WPA2.

I guess that is where the Xfinity Secure encrypted app comes into play, which I have not set up yet.

I will add being old school and using wired ethernet for almost everything, having Broadcast off and cell phone WIFI off is more of a convenience for me (hide from neighbors, no WIFI blinking lights) and simple enough to go to Xfinity web to turn back on so my cell sees it and connects if I need it. Does not seem to matter to hackers as they can get it either way (I think Justice will eventually make hackers lament for their wrong doing). Perhaps the best security for me is to get into the modem itself and disable WIFI, which I was able to do with my Att as the modem address was on the label, but not on the Xfinity modem.

Thank you so much for articles and advise. All of this is quite complex and hope this discussion helps others reading it.

Reply | Quote

When you say “subrouter” what are you referring to. Never heard that term before.

There is a lot to be said for getting your own modem and router rather than using hardware from Comcast.

Showing recently connected devices is a good thing in that it can tell you when someone does get onto your network, even if was a couple days ago.

As for the security of your WiFi network, WPA is not secure. WPA2 is secure, but only with a long password (over 15 characters give or take). Mixed mode of WPA or WPA2 is therefore not secure. I find it hard to believe that there is no option for WPA2 only, without the WPA.

Get up to speed on router security at RouterSecurity.org and Defensive Computing at DefensiveComputingChecklist.com

1 user thanked author for this post.

J9438

Reply | Quote

Do not hide the SSID, it wont make your wifi more secure, as you already found in linked article Best way to get rid of unknown devices is to change the password as you already did.
You can also try to read MAC addresses of those connected devices and see, what type of device it is. You can check MAC address vendor HERE.
You can also try to reach those devices via its IP addresses – ping, or enter IP into browser, maybe youll be lucky and identify them.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

1 user thanked author for this post.

J9438

Reply | Quote

Michael432 wrote:

When you say “subrouter”

My term. I daisy chain a second router/modem to the Comcast modem and connected to a power supply I can cut off. Since the Comcast modem has to be on all the time for the landline I connect the PC to the one I can cut off. Probably stupid but just an extra precaution that my PC is fully disconnected from the world when I am not using it. (Are there not some functions that can auto start a PC at 2am?) Originally did this years ago because I could not find the main modem address to get into and had to get the ISP to disable WIFI and used the “subrouter” that I could get into to enable/disable WIFI at my convenience. Lately too I have seen an article on Woody about daisy chaining routers for other purposes (but cannot remember where I saw that).

Michael432 wrote:

getting your own modem and router

Many years ago when I previously had Comcast I could not find a retail modem compatible with Comcast plus they did not allow direct purchase at the time. . Maybe that has changed

Michael432 wrote:

I find it hard to believe that there is no option for WPA2 only, without the WPA.

Me too, but on the Comcast WIFI set up the highest option is “WPA/WPA2”. Maybe that is their way of forcing you to the Xfinity Secure App.

Michael432 wrote:

Get up to speed on router security at RouterSecurity.org and Defensive Computing at DefensiveComputingChecklist.com

Thanks for the tip.

doriel wrote:

Best way to get rid of unknown devices is to change the password as you already did.

They did not go away after changing the SSID or password, and that brings up another thought. Where does Comcast store that list of connected devices? Is it on the modem itself and if so why don’t they clean the modem before giving it to another customer? Is it on their Servers and if so why don’t they erase that list before adding to a new account?

doriel wrote:

You can check MAC address

Good idea. Thanks.

Reply | Quote

Where does Comcast store that list of connected devices?

I thought, you see those connected devices, when you login into your modem via IP and browser. Eg. 127.0. etc.
Is my assumption correct?

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

1 user thanked author for this post.

J9438

Reply | Quote

J9438 wrote:

Many years ago when I previously had Comcast I could not find a retail modem compatible with Comcast plus they did not allow direct purchase at the time. . Maybe that has changed

It has:

Find out more about buying and using your own Internet equipment (cable modem/gateway) instead of renting an Xfinity Wireless Gateway.
…
Can I bring my own equipment to Comcast?
You can purchase your own retail modem for use with your Xfinity Internet and/or Voice service, as long as the equipment is certified to work on our network. Before buying from the retailer of your choice, please go to mydeviceinfo.xfinity.com to find certified retail equipment that supports your Internet speed tier.

Using Approved Third-Party Equipment for Xfinity Internet and Xfinity Voice

2 users thanked author for this post.

Michael432, J9438

Reply | Quote

Terminology: let me suggest “inner” and “outer” boxes. I say boxes because you can not connect a second router/modem to whatever box Comcast gave you. The modem talks to Comcast and there can be only one. You have connected a second/inner router to the Comcast box. This, to me, is a good thing.

Some routers can power on/off on a schedule, as can some NAS boxes. Also, some routers can schedule WiFi on/off times. As for a PC, I have seen BIOS options to power it on at a set time of day.

Get up to speed on router security at RouterSecurity.org and Defensive Computing at DefensiveComputingChecklist.com

1 user thanked author for this post.

J9438

Reply | Quote

doriel wrote:

when you login into your modem via IP

Nope. I cannot find the IP address of the modem. I see the connected devices when I log into the Comcast account and display the Gateway modem on their website.

b wrote:

It has:

Thanks for the links. Funny that many years ago when I had comcast I went to a similar list at the time and saw dozens of compatible modems. Then I went to common electronics sellers in my area and not one sold one of those modems. Sneaky wasn’t it? Anyway I will look at this again.

Reply | Quote

J9438 wrote:

Nope. I cannot find the IP address of the modem. I see the connected devices when I log into the Comcast account and display the Gateway modem on their website.

Control Panel\Network & Sharing Center
Upper left, click on “Change adapter settings.
Right click on the network adapter in use. Choose “Status.”
Click on “Details.” See Default gateway.

In an elevated Command Prompt, type ipconfig /all
Information available here too.

1 user thanked author for this post.

J9438

Reply | Quote

PKCano wrote:

In an elevated Command Prompt, type ipconfig /all

You don’t need an elevated prompt.

The modem IP is usually the “DHCP Server” IP. e.g. 192.168.0.1

cheers, Paul

1 user thanked author for this post.

J9438

Reply | Quote

Not to nitpick, but that will never the IP address of a modem. It may well be the IP address of the router or the gateway box (combination modem/router).

Get up to speed on router security at RouterSecurity.org and Defensive Computing at DefensiveComputingChecklist.com

2 users thanked author for this post.

J9438, Paul T

Reply | Quote

Michael432 wrote:

There is a lot to be said for getting your own modem and router rather than using hardware from Comcast.

There is one big caveat with using your own router/modem.
Zero help from ISP in case of network, connection… problems.
The ISP will always blame your device.

1 user thanked author for this post.

J9438

Reply | Quote

True. The lights on the modem are the dividing line. If they are in their normal status, the problem is in your home. If they are not normal, the problem is with the ISP. And, as with so many devices, re-booting the modem should be the first reaction.

Get up to speed on router security at RouterSecurity.org and Defensive Computing at DefensiveComputingChecklist.com

1 user thanked author for this post.

J9438

Reply | Quote

J9438 wrote:

I asks the Comcast rep what the http://192. etc address was and he did not know or just would not tell me.

Most (if not all) Comcast modem/routers use http://10.0.0.1 as the default gateway IP (mine does):

Change Your WiFi Network Name and Password with the Admin Tool [Xfinity Internet Support]

1 user thanked author for this post.

J9438

Reply | Quote

Many thanks to PKCano, Paut T, Michael432, and Alex5723 for all the modem info.

b wrote:

Most (if not all) Comcast modem/routers use http://10.0.0.1 as the default gateway IP

Well I did manage to get into the modem at http://10 …. and 2 interesting things.

1) Comcast constantly reminds us of how advanced their security is yet the modem had the default password still on it. (I of course changed it). There was a changed set of ID/Pswd on the modem label but that was for the WIFI SSID. They should have had a label also for a changed modem Pswd.

2) I logged in and “Disabled” the WIFI. The display showed Disabled. The WIFI lights on the modem went dim and I thought I was home free. BUT, then this morning I looked over and there are the WIFI lights blinking like crazy. I went back into the modem and everything still showing Disabled. Hmmm!

Oh, I also deleted one of those mysterious connected devices that started this whole topic and so far no effect so does look like undeleted garbage from the last user of this modem or account. This again looks like Comcast advanced security not cleaning up their modems/account info. Small wonder the hackers are so successful.

 

Reply | Quote

Michael432 wrote:

I say boxes because you can not connect a second router/modem to whatever box Comcast gave you. The modem talks to Comcast and there can be only one.

Just found out some interesting on that. I called Comcast again on why the WIFI lights were blinking when I had WIFI off (took 4 calls to actually get to a tech person – but she was great!!) but in the conversation we ran across something called Bridge Mode. She tried turning that off to see if that would stop my WIFI lights but it turned off my ethernet. As it turns out you can connect a second router off the Comcast modem but the Comcast has to be in Bridge Mode that causes the Comcast modem to act as a server without address translation (something about double NATs). The Comcast help articles say this also cuts off your WIFI and Advanced Security but both still seem to work for mine. (Documentation sometimes does not keep up with tech changes). My modem came with Bridge Mode as a default so I guess that works for direct ethernet plug into Comcast or “outer/sub/mesh router connection.

Alex5723 wrote:

There is one big caveat with using your own router/modem. Zero help from ISP in case of network, connection… problems. The ISP will always blame your device.

Another caveat is the Comcast documentation says their Advance Security will NOT work unless using one of their RENTED modems. Why does that not surprise me???
Any way, back to the WIFI lights issues the rep said even with WIFI turned off there is some back and forth maintenance stuff with the WIFI. She reset everything. I had to go back in and Disable the WIFI. Checked it with my cell and it is off even with blinking lights. (I know I  am one in a million that does not use WIFI but just thought if there is another like me out there this might help – regards)

Reply | Quote

J9438 wrote:

something about double NATs

Double NAT is not really a problem.
https://www.askwoody.com/forums/topic/can-firewall-have-the-same-ip-address-for-wan-and-lan/#post-2372091

You can add a second router and run all your devices from that, leaving the comcast unit to run your IoT devices on their own network.

J9438 wrote:

My modem came with Bridge Mode as a default

This would mean you don’t have a firewall. I hope this is not the case.

cheers, Paul

3 users thanked author for this post.

wavy, Michael432, J9438

Reply | Quote

Paul T wrote:

Double NAT is not really a problem

From googling Bridge Mode I got the impression, at least for the Comcast modem, that if Bridge Mode is not on the Comcast modem tries to do address translation and then the attached daisy router also tries to do address translation and confusion results. When the Comcast rep turned off bridge mode my ethernet died. However, the bridge mode allows me to directly connect my ethernet either directly to the Comcast modem or to my daisy connected router. Comcast modem->my router->ethernet cable or

Comcast modem->ethernet cable.

Paul T wrote:

This would mean you don’t have a firewall

The firewall would move from the Comcast modem to my router – I hope???

Anyway since my router is way out of date I decided to remove it and connect directly to the Comcast modem. The reason I had used the extra modem in the first place was because years ago when I got my first broadband modem the ATT model only had one ethernet port so I needed the extra router for other devices. Today it seems all the modems have 4 ethernet ports.

Also found this “When two NAT devices are connected in series (for instance a modem with built-in NAT capabilities is connected to a router which is also a NAT device), it is advisable to configure your modem in bridge mode to avoid conflicts.” at https://kb.netgear.com/000028987/When-to-put-modem-into-bridge-mode

“bridge mode is the configuration that disables the NAT feature on the modem and allows a router to function as a DHCP server without an IP Address conflict.”

Reply | Quote

I have a Comcast/Xfinity modem/router with voice phone; it is:

Arris Modem – Model: TG1682G

I do not have Bridge Mode set, I have disabled the WiFi and my lights are blinking.

I use a Netgear WiFi router connected to the Modem and an ASUS WiFi router also connected to the Modem. This gives me 2 sub networks; one for the computers and one for Cell Phones and other devices. This is a Double NAT setup times two.

It has been working flawlessly for at least 4 years now, so the advice from Comcast on requiring Bridge mode to avoid Double NAT is not correct.

1 user thanked author for this post.

J9438

Reply | Quote

JC Zorkoff wrote:

I do not have Bridge Mode set

I have the same Modem model. My only guess would be that my very old D-Link router is also a NAT device and as I quoted above “

J9438 wrote:

When two NAT devices are connected in series (for instance a modem with built-in NAT capabilities is connected to a router which is also a NAT device

” is it possible your routers do not have NAT capability. That article seems to suggest a Comcast modem with NAT would work fine with a router without NAT and bridge mode on.

I will add I never even heard of Bridge mode until I logged into the modem itself and saw an option for Bridge mode. The Comcast rep did not know either but tried disabling it (in researching the WIFI lights) and immediately my ethernet access stopped working. She re enabled it and ethernet came back on. Perhaps there were recent updates to the Comcast modem or perhaps the Comcast modem on set up recognized my router as a NAT device or maybe Comcast is now setting that as default because of past problems with NAT devices chained off their modem????

With Bridge mode set on it seems to work fine with direct connect to Comcast modem or any router with/without NAT.

Maybe if there is a modem expert seeing this they could shed some light on the question?

Reply | Quote

As Michael432 said (below) – All routers do NAT.

Both of my routers do NAT. They work flawlessly with this modem.

1 user thanked author for this post.

J9438

Reply | Quote

To clear things up: A gateway (combination modem/router) in bridge mode functions as if it were just a modem. Thus, no firewall and no WiFi.

And, to repeat what Paul said, double NAT is not a problem. The only confusion comes from people who say it is.

All routers do NAT.

One downside of having your own router is that when things go wrong, you can’t call the ISP for help. However, it sounds like, with Comcast, this is not an issue since the people you talk to don’t know much.

 

 

Get up to speed on router security at RouterSecurity.org and Defensive Computing at DefensiveComputingChecklist.com

1 user thanked author for this post.

J9438

Reply | Quote

J9438 wrote:

The firewall would move from the Comcast modem to my router

That is correct – I didn’t realise you had a router behind the modem.

You should not connect directly to the modem if it is in bridge mode. You need a router, either in the modem (non-bridge mode) or separate (as you have/had).
If your router is old and you do not trust it anymore, get a new router. They do not need to be expensive – less than $100 will get one that does everything you need. Or you may be able to update the router firmware.

What is the router model?

cheers, Paul

1 user thanked author for this post.

J9438

Reply | Quote

From the comments from JC, Michael, and Paul above  I think it is safe to say ALL routers do NAT. Also according to that quote I listed above from netgear.com there is an address conflict if the gateway and router both do NAT and the gateway is not in Bridge mode. Following from that it would make sense that Comcast always puts their gateway in Bridge mode in case some unusual customer (like me) decides to attach another router. Also since my ethernet broke when Bridge mode was turned off that is more evidence that Bridge mode is necessary with an attached router.

JC Zorkoff wrote:

Both of my routers do NAT. They work flawlessly with this modem

So sounds like your modem has Bridge enabled.

Michael432 wrote:

o clear things up: A gateway (combination modem/router) in bridge mode functions as if it were just a modem. Thus, no firewall and no WiFi.

Yes, the netgear article did say the gateway would act like a server but if the average Comcast customer just uses their gateway and as I pointed out above Bridge mode seems(??) to be their default I am not sure how the average customer would have WIFI or a firewall. Maybe the installer changes the mode if he sees a router attached but my installer said he did not do any software work only wiring. (I will note about a year ago I got a letter from ATT saying their modem was out of date but not to worry as the McAfee antivirus they provided was sufficient firewall- that should stir some comment!!)

Michael432 wrote:

And, to repeat what Paul said, double NAT is not a problem.

if according to the netgear.com Bridge mode is enabled.

Michael432 wrote:

with Comcast, this is not an issue since the people you talk to don’t know much.

lol

Paul T wrote:

You should not connect directly to the modem if it is in bridge mode.

Comcast touts how secure they are so I would hope they would not install a gateway with Bridge on and direct connection to the gateway. This does concern me because I have dropped the extra router but really do not want to go back in the gateway and disable the Bridge because it took the Comcast rep 3o minutes to get things working again after she disabled it. Comcast had no way of knowing I was using an add on router so that is why I think Bridge is their default setting.

I am about ready to go back to DOS and rotary phones!!!!

Reply | Quote

You seem to be relying on a statement from Netgear which is either flatly wrong or taken out of context and does not apply to the Comcast Xfinity Modem. This is a screen shot of my modem’s admin page which clearly shows Bridge Mode Disabled, multiple devices connected and WiFi Disabled.

My IP address is 66.30.2xx.xx  (edited for privacy)

The admin address of the Xfinity Gateway is 10.0.0.1

My ASUS router sees an IP address of 10.0.0.142 from the Gateway

My Netgear router sees an IP address of 10.0.0.125 from the Gateway

My computer sees an IP address of 192.168.1.3 from the Netgear router

This is proof of Double NAT (Network Address Translation). I don’t know how to make it more plain so you will believe what I say.

I do not use bridge mode and I do use double NAT and it works flawlessly.

My computer gets speeds of 485 Mbps download and 12.06 Mbps upload.

 

1 user thanked author for this post.

J9438

Reply | Quote

Bridge mode means the router, and NAT, is off. This is only used if you have a second router in line and want to prevent double NAT.
Note: it may be that Comcast uses the wrong term.

Go to the GRC ShieldsUp! site and test. Click Proceed, then Common Ports.
Let us know what you get.

cheers, Paul

1 user thanked author for this post.

J9438

Reply | Quote

JC Zorkoff wrote:

ou seem to be relying on a statement from Netgear which is either flatly wrong or taken out of context and does not apply to the Comcast Xfinity Modem.

(and a lot of other articles on Google that say the same thing) but I think you are absolutely correct. Here’s why.

I went back into the Comcast modem and my setup is exactly what your display above shows – Bridge disabled, Wifi off, and you know what, my D-Link router is working fine with Bridge off. I got a copy of the router manual and it does have NAT and 2 firewalls (SPI and NAT).

So in spite of so many articles saying double NAT will not work unless Bridge is on, my router attached to the Comcast modem does work with Bridge off and turning Bridge ON kills the D-Link. I don’t know why it works this way, but I am writing this through the D-link.

This is in sharp contrast to what Comcast says in their article at https://www.xfinity.com/support/articles/wireless-gateway-enable-disable-bridge-mode

“We understand, however, that there may be times when you may want to use your own router.
To do this on our network, you will have to enable the Bridge Mode feature on the Wireless Gateway, which turns off its routing capabilities while leaving the modem capabilities on. Then, you may connect and use your own router.”

I found on one Google search where a community with some people adamant that Bridge turns off NAT/Firewall/WiFi and others that it did not. So maybe this is just an issue related to the particular design of specific modems/routers??? Very confusing to say the least!!

Reply | Quote

J9438 wrote:

the Comcast modem does work with Bridge off and turning Bridge ON kills the D-Link. I don’t know why it works this way, but I am writing this through the D-link.

It may be that in Bridge mode, only Ethernet Port 1 is active. That Is why I leave Bridge Mode Disabled. I need to use 2 routers connected to the Comcast Gateway.

If you do not use port 1 and switch to bridge mode, there will be no Internet connection to your router.

 

1 user thanked author for this post.

J9438

Reply | Quote