Oftentimes, the "modem" provided by the ISP will do NAT.
How do you know it's doing NAT? the IP that comes out of its tail end, the LAN side, will have a private IP, oftentimes 192.x.x.x. Assuming this is true, why am I telling you to configure WIFI router for Access Point? because a WIFI router will also do NAT by default and you don't want to do NAT twice, that makes things unnecessary complex.
While we are at it, a LAN also wants a single DHCP server, if the ARRIS does that, am OK with it too, so if WIFI, now Access Point offers you to do DHCP server, just disable it.