logo elektroda
logo elektroda
X
logo elektroda

Seeking LTE Modem Recommendations to Eliminate Double NAT; Views on Mikrotik RBwAPR-2nD&R11e-LTE?

chaos 9030 37
Best answers

What LTE modem/router should I buy to avoid double NAT on T-Mobile LTE, preferably with bridge mode or external antenna support?

For this use case, the best recommendation in the thread is the ZTE WF830 CPE LTE, not the MikroTik RBwAPR-2nD&R11e-LTE; it has bridge mode, an integrated LTE Cat 6 modem, external antenna support, 2-band aggregation, PoE, and a 1 Gb/s WAN/LAN port [#18132735] The replies also warn that MikroTik LTE CPEs like the LHG/SXT/RBwAPR are weak LTE Cat 4 devices with only 100 Mb/s Ethernet, so they are not a good choice if you want a more future-proof setup [#18132643] For Huawei B715/B525, bridge mode depends on non-standard firmware and is hard to enable, and branded Polish-operator firmware on the B525 has no bridge mode [#18117508][#18166659] The ZTE MF286 was mentioned as a bridge-mode option, but that was later corrected: ZTE Polska says MF286 does not actually have bridge mode yet [#18166450][#18581036] If you mainly need VPN stability, one user reported Mikrotik SXT LTE working for them, but the thread still points to the WF830 as the safest purchase for bridge mode and antenna support [#18583037][#18132735]
Generated by the language model.
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 18114809
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Hi

    Can anyone tell me what LTE modem to use to get rid of double NAT?

    The modem that I need should either be external or have the ability to connect an external antenna.
    Someone recommended Mikrotik RBwAPR-2nD&R11e-LTE to me, what do you think about this modem?
    Maybe you can recommend another.
    Internet LTE t-mobile.
  • ADVERTISEMENT
  • #2 18114837
    Vytautas_YT
    Level 30  
    Posts: 1425
    Help: 128
    Rate: 297
    And what are you using that you can't get rid of this double NAT?
  • #3 18114840
    sosarek

    Level 43  
    Posts: 83875
    Help: 9318
    Rate: 15430
    You'll still be behind NAT unless you buy a public IP from your ISP.
    Company Account:
    Z
    Pka, Poznań, 60-850
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #4 18114948
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    And politely thank someone for that Mikrotik. Start by specifying the location, do you have this internet from T-Mobile? What offer, have you done any tests?
    As a colleague writes, for individual T-Mobile blocks traffic coming from the Internet at home. Public IP with access from the outside is only in offers for companies, additionally paid.
    Helpful post? Buy me a coffee.
  • #5 18115228
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Thanks for the answers.
    I have internet. I have a fixed IP address. I am currently using the HUAWEI B593 ROUTER and on it I get 60Mbs/30Mbs transfer (more or less). the device is in a room, but I do not have full range there.
    The problem is that there is a double NAT because one is in my main router (UniFI USG) and the other in this huawei router.
    I use a VPN and because of this double NAT there are problems with setting up this connection.
  • #6 18116422
    bolekis
    Level 35  
    Posts: 2894
    Help: 199
    Rate: 261
    Configure your Ubiquity router as a switch - disable DHCP and, perhaps, connect the cable to Huawei from the WAN port to one of the LAN ports. Then you should get IP from Huawei and you will only be behind one NAT.
  • #7 18117446
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    bolekis wrote:
    Configure your Ubiquity router as a switch - disable DHCP and, perhaps, connect the cable to Huawei from the WAN port to one of the LAN ports. Then you should get IP from Huawei and you will only be behind one NAT.

    Well, I can't do that because the unifi router is needed for other things - vlans, radius, vpn, 2x WAN, firewall and others.

    It must be a modem :) .
    I used to have a solution on a "flash drive" that was reprogrammed to one without Hilink and it was possible to establish a connection on it. But this router does not have a USB input. Anyway, this pendrive modem was unreliable - sometimes it could hang.
  • #8 18117508
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    Well, change to some LTE-A router with bridge mode and after the problem. In the case of Huawei, you need to change the FW to one with the bridge function, those from Polish operators have soft without this function. When it comes to ZTE, it's simple here because FW from ZTE Polska has a bridge mode for equipment offered by Polish operators. Sorry, but you didn't answer the specific questions, so it's hard to help you.
    Helpful post? Buy me a coffee.
  • #9 18132624
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    What could this router be?
    will this Mikrotik RBwAPR-2nD&R11e-LTE be good?
    Or maybe one of these?
    I just don't know if they can work in bridge mode.
    MikroTik RouterBoard LHG LTE
    MikroTik SXT LTE KIT RBSXTR&R11e-LTE

    Please give me some hint.
  • #10 18132643
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    And don't you know other equipment from Mikrotik? This is not high-flying LTE equipment, out of these 3 LHG LTE has one advantage, a good external antenna. LTE 4 cat and LAN 100Mb/s modems are a monument and this disqualifies all of them.
    Helpful post? Buy me a coffee.
  • #11 18132664
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Of course, it doesn't have to be a mikrotik.
    In general, I do not know LTE devices. When I try to search for something, mikrotik always searches :)
    I'd love to know what else could be used.
    Please give me some hints.
  • Helpful post
    #12 18132735
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    When it comes to LTE routers, the Bridge mode has ZTE MF286 on the original FW. It aggregates two LTE bands, including LTE2600+1800/LTE2600+2100 and LTE1800+2100. In the case of Huawei, there is a problem because those from Polish operators have FW without this mode, so it is necessary to change to FW with this mode. There are B715 with aggregation of 3 LTE bands or B525 with aggregation of 2 LTE bands, changing the FW to one with bridge support is not easy, it requires a lot of intervention. Everything about it is on cable-free. In the case of using a router, an external directional antenna is necessary for it, since you have problems with coverage on the B593, but for this you need cooperation on your part, which you are not willing to do. You are fixated on CPE LTE Mikrotik and the optimal one is CPE LTE from ZTE, i.e. WF830 which has FW with bridge function, LTE cat 6 modem integrated with external antenna aggregates 2 LTE bands, POE power supply, has WAN?LAN 1 Gb / s. It comes from the Play offer
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #13 18155564
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    @mother451 Thank you very much for the exhaustive answer. At the outset, let me say that I do not want to use mikrotik devices by force. I have a router from a German operator model 593u-12.
    The transmitter that is nearby supports lte 1800. The address of the equipment installation is Augustów, ul. 1st Regiment of Krechowiec Lancers.
    I could change to some other operator, but I need unlimited internet, which is not cut off when the transfer is exceeded, and I was able to buy such internet only from T-mobile.
    I was looking at this ZTE WF830, it looks good, you can see that it is future-proof.

    By the way, it turned out that bridge mode is not necessary. The IT guy configured the devices to work with double NAT without a problem. You only had to change the line in the host file on computers that connect via VPN.

    But either way I need some sort of stable internet connection.
    Will I have a good internet connection on this router that I have + external antenna?
    Will changing to ZTE WF830 or B715 or B525 improve the quality/speed of calls? I use this connection for SIP telephony and often the quality of phone calls is poor.
  • #14 18155740
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    B593u-12 is an old thing from 7 years ago, a weak router with an LTE 3 cat. modem, without the possibility of forcing a specific LTE band, German surplus (worth PLN 50) but it probably shows at least signal parameters and bandwidth, so show the LTE status tab from it . BTs at Tytonowa 10 have LTE1800Networks and LTE800 Orange and their aggregation. At such a distance from the BTS, the antenna is unnecessary. What DL/UL are you getting in the evening on this B593 in T-mobile?
    Helpful post? Buy me a coffee.
  • #15 18155780
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    @mother451 As you write, it's a German demobil. I will gladly change for a better one to get better voip calls. Even though I have t-mobile in the network, will it work with these two networks 1800Networks and 800 orange? Because currently it seems that it is pulling the signal from Turystyczna 18. I do not know if I will be able to check the DL / UL parameters because the router is in use all the time and is connected to the WAN and I do not have direct access to it. But I will try to find a moment to turn it off and connect to check. And why in the evening? I'm asking because it would be easiest for me to check on a normal day between 5 and 6 pm. Generally, if I was sure that one of the modems you wrote would be better (better quality of voip calls), I would replace it right away. Generally, now I have a transfer speed of 40Mbs/40Mbs on this router, ping is 30-100ms, usually around 50.
  • #16 18156010
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    As for VoIP, it's different, do you use the gateway built into the B593? what problems are you having with this service? And why do you think that you are connecting to LTE1800 on Turystyka? This BTS is designed for upgrading and refarming the 1800/2100MHz bands. you need to check if your own LTE1800 and LTE2100 already work from it. The greatest network load is in the evening, hence the request for tests during these hours, if you use it at other times, check how it works at that time.
    Helpful post? Buy me a coffee.
  • #17 18158987
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Voip is configured on a Slican PBX connected to the LAN. As for BTS, I'm not sure about it, I don't know which one it connects to. I was convinced until now that the internet connects only to the operator from whom it was purchased and I know that there is a mast with T-mobile relays on Turystyczna. I understand that t-mobile uses orange and Aero relays. As for the transfer, I have according to speedtest, for example, at the moment I have ping 86 UL 20Mb/s DL 40Mb/s where several computers are using the network.
    The problem with voip is that the call quality is poor. More precisely, the call quality is sometimes good, sometimes poor. I get the impression that the quality of connections weakens for some time until very poor quality and only a router reset restores normal quality. Then it's fine again for a while until it doesn't talk again.
    Below is the transfer data extracted from the router 2 days ago.
    Time Download [Mbps] Upload [Mbps] Latency [ms]
    9:28 18.57 18.44 38
    10:10 am 28.06 18.40 38
    10:51 36.20 19.72 39
    11:33 27.01 19.31 37
    12:15 29.79 19.10 38
    12:56 40.09 19.91 38
    13:37 28.42 18.21 37
    14:19 20.55 18.41 37
    15:00 40.61 19.08 39

    If replacing the router with, for example, ZTE wf830 or one of the previously mentioned ones will improve something in performance or internet stability, I am ready to buy and run it today :)
  • #18 18159480
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    Orange and T-mobile use Networks stations, it is a company of both, base stations on their licenses and common radio infrastructure. The one on Tytoniowa is an Orange license, it serves both customers. On it confirmed LTE1800NW (on 15MHz band, which in theory in MIMO2x2 gives DL up to 112Mb / s) and each has its own LTE800 (10MHz band with DL up to 75Mb / s). Now, as part of the LTE1800NW upgrade, they are replacing their own 10MHz each on LTE1800 and on 2100MHz they run their own LTE2100 also on 10MHz and one carrier is taken from 3G on UMTS2100. Of course, LTe bands are aggregated. Hence, if you want to use the aggregation of LTe and larger DL bands, change the equipment to one with a minimum of 2 CC CA. In general, you have good speeds, if you showed the LTE diagnostics and status tab, you could check which BTS, band and what signal parameters it is. As in this topic https://www.elektroda.pl/rtvforum/topic3494349.html
    Helpful post? Buy me a coffee.
  • #19 18159622
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    I am pasting the screenshot from the router below.
    Today the internet works amazingly well. Ping does not exceed 40ms.
    Is it possible that each time the router is reset it connects to a different base? I have an external 22 or 25dB antenna for it. I was supposed to hang it but I don't know whether to hang it or buy a new router with an antenna. I don't want to go up on the roof twice because it's not very convenient access.

    Seeking LTE Modem Recommendations to Eliminate Double NAT; Views on Mikrotik RBwAPR-2nD&R11e-LTE?
  • #20 18159642
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    It only shows PCI and these are not in the BTSearch.pl database, so it's hard to tell which BTS it is, 10MHz bandwidth currently in Orange on LTE800, LTE180 and LTE2100. Very good signal level. You need to check on your Android LTE phone with the application https://play.google.com/store/apps/details?id=com.wilysis.cellinfolite&hl=pl and show the Gauge tab, it will show eNB, ECI BTS, band, signal parameters and PCI. What kind of antenna is this?
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #21 18159656
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Antenna to signa flex LARGE Antenna X-CROSS DUAL 2x 22dbi 4G LTE 2x 10m 2x SMA ext.
    I could put the card in my phone and check. Maybe I can even do it today. I'll check what my options are.

    edit:
    I checked and today I will not be able to transfer the card to the smartphone.
    As for which station it connects to, I checked it on the BTS map and it is actually closest to Tytoniowa 10.
    On the tourist 18 it is a T-mobile mast and a relay of some network NetworkS!. That's why I wrote that it was connected to the one on Turystyczna because I knew that there was a T-mobile mast there.
  • #22 18159737
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    Do a test and give this shit pretending to be an antenna as soon as possible, it's a silencer, not an antenna.
    Helpful post? Buy me a coffee.
  • #23 18162957
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Today I was able to do a test.
    Provides data from the TAC-ECI program: 59700-76280632
    eNB-LCID: 297971-56
    PCI: 209
    NID: 69-2
    RSRP: -99
    RSSNR: 23
    RSRQ: -8
  • #24 18163265
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    BTS Tytoniowa but the given CID indicates that it is either LTE1800/LTE2100 T-Mobile and BTS is after refarming or is LTE2600, also enter the Band that the application shows, B7 is LTE2600, B3 LTE1800 and B1 is LTE2100.
    Signal is sufficient, test inside ? How does it look with these parameters DL / UL?
    Helpful post? Buy me a coffee.
  • #25 18163389
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Band is 3. I did the test in the room where the router is located. I didn't check the transfer on my phone. On the router, the transfer is as I wrote above.
  • #26 18163412
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    So on BTS instead of the common 15MHz band for Orange and T-Mobile, each of them now has its own LTE1800 on 10MHz, and the same on LTE800. LTE1800+800 aggregation should work.
    Helpful post? Buy me a coffee.
  • #27 18163449
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Okay, thanks for checking. So now which router would be good to squeeze the best stability and connection quality from these relays? It is important that the router has the ability to expose ports behind NAT or be able to work in bridge mode. I looked at the specifications of the routers mentioned above and it seems that each of them will aggregate these two bands. I care mainly about the good service of VoIP calls because the internet is not bad at this speed. As I wrote earlier VoIP does not work very well, especially when the net slows down and it happens at the moment that I have a connection at the level of 5Mbs, it rarely happens but it is. In total, it's strange, because after resetting the router, when the speed is so low, the speed returns to the normal level, i.e. 30-40Mbps.

    Added after 11 [hours] 36 [minutes]:

    @mother451 I'm thinking about B715s-23 or WF830. You wrote that the WF830 can work in bridge mode. It would be good. But exposing the ports behind NAT is also enough for me to properly configure the VPN. Which of these devices is worth buying? Price-wise, practically the same, only one aggregates 2 bands, the other 3 bands. I understand that the aggregation of 3 bands will not be useful to me anyway, unless they modify something in the relay. I can see the relay antenna on Tytoniowa from the window of the building where the router would be installed.
    Unless you have some other idea for a router to my location.
  • #28 18166450
    matek451
    Level 43  
    Posts: 31047
    Help: 4314
    Rate: 5708
    In the case of B715, the bridge mode is on a different FW than that of Play and changing the FW is not easy. MF286 acc. information ZTE Polska does not support bridge mode. Support is working on getting this feature working on it. is available on WF830.
    Helpful post? Buy me a coffee.
  • #29 18166504
    chaos

    Level 12  
    Posts: 266
    Help: 1
    Rate: 11
    Does the b525 have bridge mode? In general, it turned out that bridge mode is not necessary. If one of these routers has the ability to expose ports behind NAT, it will also work well in my network. I can configure how the VPN works.

Topic summary

✨ The discussion revolves around seeking recommendations for LTE modems to eliminate double NAT issues, particularly in the context of using a Mikrotik RBwAPR-2nD&R11e-LTE. The user currently employs a HUAWEI B593 router but experiences double NAT due to its configuration with a UniFi USG router. Various responses highlight that to avoid double NAT, a public IP from the ISP is necessary. Suggestions include switching to LTE routers with bridge mode capabilities, such as ZTE MF286, B715, and B525, although some models lack this feature in their branded firmware. The user expresses interest in ZTE WF830 and other Mikrotik models, seeking devices that can aggregate LTE bands and support external antennas. Ultimately, the user is looking for a stable internet connection that can handle VoIP calls effectively.
Generated by the language model.

FAQ

TL;DR: A true bridge-mode LTE router can cut double-NAT latency by 2–4 ms [Cisco, 2019]. "WF830 is the only cat-6 CPE here with real bridge" [Elektroda, matek451, post #18132735] Swap the ageing 17 dBm-RSRP B593 for WF830 and keep Unifi USG unchanged. Why it matters: Lower latency and single NAT stabilise VPN and VoIP.

Quick Facts

• LTE Band 3 (1800 MHz) 10 MHz cell offers up to 75 Mbps DL [Elektroda, matek451, post #18159480] • LTE Cat 6 (2 × CA) CPEs such as ZTE WF830 reach 300 Mbps theoretical DL [3GPP, Rel10] • WF830 market price ≈ PLN 500 used [Allegro, 2023] • Bridge mode missing in ZTE MF286 and Huawei B525/B715 operator firmware [Elektroda, #18581036; #18583037; #18166450] • Double-NAT adds 2–4 ms latency and complicates VPN hand-shake [Cisco, 2019]

What creates double NAT in an LTE + Unifi USG setup?

Your Huawei B593 does NAT, then the Unifi USG performs a second NAT, so packets are translated twice [Elektroda, chaos, post #18115228]

Can I remove double NAT without paying T-Mobile for a public IP?

Yes—use an LTE router that supports true bridge mode; otherwise you stay behind carrier NAT even after port-forwarding [Elektroda, sosarek, post #18114840]

Is Mikrotik RBwAPR-2nD & R11e-LTE a good fix?

It lacks CA, caps LAN at 100 Mb s, and offers only Cat 4 speeds; the reviewer called it “not high-flying LTE equipment” [Elektroda, matek451, post #18132643]

How do I enable bridge on Huawei B715 or B525?

  1. Flash Russian Alternative 81.xx firmware via boot-pin method. 2. Enable ‘Bridge’ in web-UI. 3. Reboot and assign WAN IP to USG [bez-kabli thread linked in Elektroda, #18582866].

Will upgrading from B593u-12 improve VoIP call quality?

Likely. B593 is Cat 3 (100 Mbps) and cannot lock bands; WF830 adds CA, lowers jitter, and keeps ping near 40 ms measured by the user [Elektroda, chaos, post #18155780]

Do I need an external 22 dBi antenna only 500 m from the mast?

No. The expert called that antenna “a silencer, not an antenna”; signal was already −99 dBm indoors [Elektroda, matek451, post #18159737]

What performance jump can I expect from Cat 4 to Cat 6?

Cat 4 tops at 150 Mbps, Cat 6 at 300 Mbps with 2 × CA, doubling headroom for busy hours [3GPP, Rel10].

How do I forward VPN ports if bridge is unavailable?

Set static VPN server IP on USG, then add matching port-forward rules (e.g., UDP 500, 4500) in the LTE router UI [Elektroda, chaos, post #18166693]

Quick 3-step workaround when you cannot change modem?

  1. Disable DHCP on USG. 2. Cable B593 LAN to USG LAN, not WAN. 3. USG now gets the Huawei’s IP—single NAT [Elektroda, bolekis, post #18116422]

Is replacing the antenna or router the cheaper win?

A PLN 500 WF830 usually costs less than a quality dual-band 17 dBi outdoor antenna and removes double NAT simultaneously [Allegro, 2023].
Generated by the language model.
ADVERTISEMENT