Virgin Media Hub 5x Modem Mode workaround

A quick guide on how to work around the lack of modem mode on the Virgin Hub 5x, this guide makes some assumptions you will not be using the Hub for Wifi or any of the other ethernet ports

  • Login
  • Configure the DMZ IP

navigate to (Advanced Setting > Security > DMZ) and set the IP to, this will now pass through all traffic from the internet to this IP un-firewalled

  • Disable firewalls

navigate to (Advanced Setting > Security > Firewall) and uncheck Firewall Protection on both IPv4 and IPv6, this step is possibly not needed but I prefer to allow my router/firewall to handle all the traffic.

  • Disable DHCP

navigate to (Advanced Setting > DHCP) and select Disabled, again this is not needed but will help eliminate confusion later if the ethernet ports are used in error.

  • Disable the Hub’s in-built Wifi

navigate to (Advanced Setting > Wireless > Wireless Signal) and disable both 2.4GHz and 5GHz

  • Configure the 3rd Party router

As there are various routers/firewalls out there the below details are just provided for reference.

Connect your own Routers WAN/Internet port to the 10Gbe on the Hub leaving all the other ethernet ports empty.

WAN IP – (this is the IP you put in the DMZ)

Subnet –

Default Gateway –

DNS (this can either be a public free DNS such as Cloudflare \ or Google \ or even the Hub own IP the Virgin Media Hub does appear to intercept DNS queries so if your hardware support DoH or DoT it highly recommended.





38 responses to “Virgin Media Hub 5x Modem Mode workaround”

  1. john avatar

    hey bud – i tried this with my TP Link router, which I have setup as an internal IP of

    Following this guide, the router itself gets internet access, but that access isn’t then passed on to my devices. Could this be due to my IP address structure, and the differences between the hub vs what I’ve got?


    1. Aaron avatar

      Possibly what is the Subnet your using on the LAN side? You would need to be using something like also make sure your computers default gateway address is pointing to the router IP and also your DNS on the computer is either the router IP or a public DNS service, also make sure your WAN interface is set to NAT/Masqurade on the TPLink

      1. John avatar

        I think it was all set up properly. The LAN subnet was, but the one the router was using to get internet ws

        I’m about to change to a Pfsense router, could you describe the steps for that?

        1. Aaron avatar

          your internal IP can stay the standard pfsense ones it just the WAN address which need to match what i put in the blog post, also you will probably need to disables these too option which block rfc1918 as your router will fall in to these

          You’ll need to uncheck both boxes under the reserved network section

          1. John avatar

            No worries. I do have a TrueNAS box setup and have a bunch of machines SMB’d into the IP address I had (10.1.1.X), so would really like to retain that internal LAN IP if possible so that I don’t have to spend ages changing things over.

          2. Aaron avatar

            that should be fine, just match the pfsense LAN IP setup to your current one, i cant image there would be much else to change

  2. Michael Younge avatar
    Michael Younge

    Hi great job.Followed the instruction worked perfectly. Only had the VM fibre installed on the 18th January.The only issue i have at the moment is that i am only receiving 92mbs download against 373 on the VM router.have i done something wrong. (To be honest is not a problem at the moment as i was only getting 20mbs from sky broadband)
    I would like kno know were i may have gone wrong, any ideas?

    1. Aaron avatar

      Are you testing Wired and not wireless? also what router are you using?

      1. Michael Younge avatar
        Michael Younge

        Thanks for replying.

        Router is Pfsense wired receiving maximum 380mbps wireless 80+. Sorry i was only testing on my iphone. This seems good ??

        1. Aaron avatar

          Yeah that seem good wireless is always going to get less or all depends on your wireless equipment, which package are you with with VM? your pfsense could be throttled if the cpu is maxing out best to check this during a heavy download

  3. John avatar

    Hey bud

    Have you managed to set up port forwarding via this method yet?

    1. Aaron avatar

      You don’t need to with the IP in the DMZ you will just need to configure your router for port forwarding

  4. Charles avatar

    Hi having a but of a problem setting this with the Deco XE75Pro
    Not convinced I got the setting static right and still getting some double NAT issues. Any advice please?
    Specifically should I set
    1. Operation mode as wifi router / access point?
    2. Where do I set the static WAN IP, I set it but get2 shown in virgin .9/42 Nit sure if it’s referred to as Internet connection?

    1. Aaron avatar

      this is double nat so you cant get around this, operation mode should be router and if dhcp is enable on the WAN Interface you should disable it and just set the IP to .9

      1. Charles avatar

        Thanks Aaron. Didn’t have DHCP disabled.

        So the above process doesn’t stop double NAT?
        Websites like nod vpn / bbc via https and stettings error complaining of hops.

  5. Tom avatar

    Hi, thanks for this. I’m in a house very recently cabled for Virgin Media and have been on the fence about becoming a customer until I read this guide. Can you confirm that the 10gbps speed would work on the Hub? I note that in your Reddit post about this workaround you said to connect to one of the 1gbps rj45 ports.

    1. Aaron avatar

      if you following this guide the 10Gb will work, the 1Gb port only work when your doing the modem mode hack around which i dont recommend

  6. Charles avatar

    I have wifi 2.5/5 and 6 on same sid.

    I don’t seem to get nat issues on wired or WiFi except when my phone jumps to WiFi 6e and then some sites fail to load complaining of double nat

    1. Aaron avatar

      Is it the next which will only allow you to change the last digit of the IP or do you mean the Hub5x? You need to plug the wan port of the next in to the Hub and treat that as if it was the internet connection and then DMZ the IP of the nest

  7. RG avatar

    Hats off man! Saved my life (after I wasted 2 days) trying to connect this stupid VM Hub to my Omada setup.
    Lessons for future – don’t have default LAN network with .0.1 – ER605 router wants this IP and hence we cant modify VM Hub I had to move LAN to 100.1 network, reconfigure whatever was on static IP’s on this network and moslty its working.
    Still have problems with VLAN’s – seems they don’t communicate clearly with other networks :/

    1. Aaron avatar

      I should have probably mentioned you can have the same subnet on both sides

    2. RAli avatar


      I’m having issues with getting this work-around to work with my TPlink Ommada setup too. Can you please advise of the settings you used sucessfully get it all working please? Also hoe stable has the setup been since using this workaround any issues I should be weary of?


      1. Aaron avatar

        Hi There,

        Sorry i cant really offer any addtional advice do you have any specific question? i havent used this my self for any duration as it only works with the 1Gb port and i want to use the 10Gb to get the full 1.2Gb out of the connection.

        1. RAli avatar


          I tried the the instructions you posted on Reddit too titled: Hub 5x WORKING modem mode


          Couple of issues I’m encountering.

          Firstly the IP addresses of both the TP link Ommada router and VM Hub5x are both So I cannot access the VMHub via my own router as it directs me to the TPlink router when using the IP address

          Secondly after configuring the VMHUb to modem only mode in step 4 I can no longer access the VMhub after it reboots even with it’s newly allocated IP address of

          and connecting the VMHub to my TP link router using the Wan port on my Router and port 1 on the VMHUb the hub does not issue a public IP address to the router.

          Any assistance would be appreciated.

          1. Aaron avatar

            You need to change the TP links internal subnet first and then go through the instructions also the router never flips to and just stays on so that why you can’t access it as you have a conflict.

  8. Lem avatar

    Great stuff

    Kinda unrelated question, can I ask what ping/latency you’re seeing on XGS-PON? I was expecting single figures but seems worse than ADSL

    1. Aaron avatar

      Normally 4-10ms also it been a lot more stable since I got the upgrade to 1Gb upload

      1. Lem avatar

        Damn I’m nowhere near that, BQM saying around 20ms

        Did you have any issues adding 1Gb upload? I’m hearing a lot of people having problems with customer service, trying to change people to 2Gb, trying to charge people £17pm extra and such rather than the £6

  9. Barry avatar

    I’ve just managed to set up my 3x Google Nest WiFi Pro routers using this set up. (FYI there is a typo in the initial instructions. Subnet read instead of Thanks for your help though. 👍

    1. Aaron avatar

      Your welcome and thanks for pointing out the typo

  10. Ra avatar


    Is there any reason this method with affect speed?

    Got this setup running and I’m getting approx 1.1/1.2Gb to the Virgin Hub5x however a max speed of around 650Mb to hard wired device connected via my own switch. Previously had 900 – 1Gb to this hardwired device when connected directly to Virgin Hub with default settings.

    1. Aaron avatar

      it depends on your router, you now have to factoring the max capable preformance of your device also with being limited to the 1Gb port there are overhead which will reduce you less than the 1Gb so normally around 940Mb.

  11. mike Younge avatar

    Hi i have been using your work around since january 2024 now i am have a problems with pfsense not receiving a IP address from DMZ ip

    I have check the setting all as your instruction.

  12. Barry Rose avatar
    Barry Rose

    Will going through the DMZ allow VPN connection and proper gaming?

    1. Aaron avatar

      I have not had any issues but I don’t play A lot of games the only online game I played recently is valorant

      1. Barry Rose avatar
        Barry Rose

        Will the DMZ allow incoming VPN to own router?

        1. Aaron avatar

          yes, in most cases it will, i host a wiregaurd VPN on my router

Leave a Reply

Your email address will not be published. Required fields are marked *