Ask Leo! by Leo A. Notenboom

How do I know if I'm behind a NAT router?

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Networking » Small Business and Home Networking

Summary: NAT routers are a fundamental way to share an internet connection while protecting you at the same time. You may already have one. It's easy to check.

I've seen you talk about NAT routers as firewalls, and so on. How do I know if I have one?

The answer's not as obvious as a lot of people are thinking. Yes, much of the time a NAT router is an additional box ... a device that you plug your computer into that, in turn, plugs into your internet connection. And that box will typically say "router" on it.

But that's not the only way you can end up behind a router.

As it turns out, many broadband modems also act as a router - and they won't say it on the outside. Knowing whether they're acting as a NAT router is important - you might be able to avoid buying an extra router you don't actually need, or you might be able to avoid installing firewall software you don't actually need.

Finding out is fairly simple.

My favorite way is to open a Command Prompt - that's usually done this way:

  • Click on Start

  • Click on All Programs

  • Click on Accessories

  • Click on Command Prompt

You'll probably get window similar to this one:

Empty Command Prompt Window

"...many broadband modems also act as a router ..."

In that Window type "ipconfig" followed by the enter key, and you should get something like this:

ipconfig results

Now, like me, you may have more than one network adapter. The one you probably want to pay attention to is the one labeled Local Area Connection, for wired connections, or Wireless Network Connection if you're running via a WiFi or other wireless connection.

The line you care about is this one:

IP Address. . . . . . . . . . . . : 192.168.1.2

That's your computer's IP address. If it begins with "192.168", as mine does, then you are almost certainly behind a NAT router. IP addresses that begin with "192.168" are actually invalid on the internet as they are specifically intended for non-internet, local networks. The router performs what's called "Network Address Translation", or NAT, to translate from your local IP address to your internet IP address as assigned by your ISP.

You may also see an IP address beginning with "10.", or some addresses beginning with "172." - these, too, may mean that you are behind a router of some sort, but these are typically NOT used by modems and consumer-grade routers. They're typically used for larger installations such as corporations, hotels or some ISPs.

So if your computer is connected directly to your broadband modem, and you have a "192.168." address, then your modem is acting as a NAT router. If you have some other address, then it's not, and you probably want to investigate installing a NAT router or firewall.

Related:

Helpful? Get new articles weekly by email in my FREE newsletter!

Your Name:
Your Email:


Why Subscribe?

Article C2888 - January 4, 2007

Was this article helpful? «Yes» «No»

Recent Comments
13 Comments

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I don't have an answer for you.

It sounds like your internet IP address is changing (that's
the address your router uses to connect to the internet).
It's not uncommon for that to change. It's not a security
thing, per se, it just happens.

The problem is that it shouldn't matter. Your router should
just handle it and keep things working properly.

I suppose you could try another router, but it's hard for me
to definitively point a finger at it - could be a
configuration thing too, I suppose, but I can't say for
certain which one without seeing the router.

Sorry I don't have more for you.

Leo


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHimUACMEe9B/8oqERAv5mAJ4tCEBuIaKxq2qORoA0Jq5oNt3ZywCfdP8M
62VlV3Kc708vnd6IHpLPQ0Q=
=RPji
-----END PGP SIGNATURE-----

Posted by: Leo A. Notenboom at January 13, 2008 11:22 AM

hello, i have a router siemens SL2-141.

i did configure all the ports and stuff, but its a pain in my butt realy, nat makes the network 3 times slower ! i have a static ip adress configured, i have 2 pc's.


one: (static)

10.0.0.2 ip

10.0.0.138 gateway

255.0.0.0 netmask

second (wireless)

10.0.0.1 ip

10.0.0.138 gateway (of course its same ^_^)

255.0.0.0

now i tried the option to remove nat, which blocks all ports.

i did connect to internet, but i didnt actually was, but the router kept recieving, but i didnt recieve it.... i was constantly on my static ip that time, if you could help and tell me how to disable it and making the router work, even if i have to change the router gateway, i must turn it off ! its a pain in my behind O_O

Posted by: ofir at June 20, 2008 10:31 PM

I would suggest to use a service like http://www.amibehindnat.com/ that let you know easily through a browser your local and public IP.
You just need a browser with Java capabilities and this can be used also by non technical people.

Posted by: Lorenzo at August 7, 2008 12:20 PM

hello, i treid what u wrote up i become a ip 192.168. but as i search for my ip in internet i become a defferent one and the problem i got ip in usa and i can“t open most of sites that i used to open before please help me what shall i do to return my ip

Posted by: Ihab Zeineddine at December 20, 2008 4:02 PM

@Ihab Zeineddine
Just use DHCP. It will make your and my life easier.

Posted by: Eric at December 28, 2009 1:44 AM

Post a comment on "How do I know if I'm behind a NAT router?":






(Email Address will not be published.)

Remember Me?

By popular demand...
my tip jar
Cuppa Joe
Buy Leo a Latte!

(you may use HTML tags for style)

RSS feed Subscribe to the RSS Feed specifically for comments on this article.

Before commenting, please...

  • Read the article at the top of this page. If your comment shows you didn't, it'll be deleted and ignored.

  • Comment only on this article. Use the Google search box at the top of the page if you have a question about something else.

  • Don't include personal information in the comment. No email addresses. No phone numbers. No physical addresses.

  • Don't spam. Excessive links to unrelated sites within a comment or across multiple comments will cause all such comments to be removed.

  • Don't ask me to recover lost passwords or hacked accounts. I can't, and those comments will be deleted.

  • I can't respond to every comment. And I can't vouch for the accuracy of others who do.

Please wait. Your comment is being processed ...


Question? Ask Leo!