How to route from a network to another

Toggle sidebar Toggle sidebar
J

jpxavier

Honorable
Dec 11, 2013
2
0
10,510
I have two routers connected to each other to extend range in my house. Everything works fine. But I wish I could have a few extra features. Here is my setup:
Router 1:[Safe zone]
Connected to Modem
LAN IP: 192.168.1.1
Subnet: 255.255.255.0
DHCP: 192.168.1.200 - 192.168.1.250
all clients connected via static ip to the free ports or dhcp ports.
wireless enabled.
Basically all clients can see each other.

Router 2: [Wired clients: safe zone, Wireless: guest zone]
WAN port connected to Router 1's free port
WAN IP: 192.168.1.2
WAN subnet: 255.255.255.0
DNS: 192.168.1.1 and (8.8.8.8 google dns -
LAN IP: 10.0.0.1
LAN Subnet: 255.255.255.0
DHCP : 10.0.0.50 - 10.0.0.60
Wireless enabled for guest access.
All other devices connected via static ip to free ports

Works just fine. Clients on Router 2 can access internet. Guests cannot access local clients.
Issues/Features:
1. Wireless guest clients cannot access local wired clients: perfect. But they can access clients on Router 1 by absolute IP address if they know it. Is it possible to stop clients with ip in the range (DHCP of second router) 10.0.0.50 - 60 from accessing any clients of router 1 ? they should still be able to access internet. I cannot stop them from accessing 192.168.1.x because then they cannot access the gateway to reach internet. but can i stop them from accessing 192.168.1.3 - 250?
2. How can I make clients on router 1 see wired clients of router 2? I tried adding a rule to the router table. address range of 10.0.0.1 - 10.0.0.49 to use gateway 192.168.1.2 (IP of second router) But not working
3. Wired clients of second router can access clients of main router by IP address. Is it possible for them to access clients by name by some kind of DNS mechanism?
 
Solution
B
Get a real router is the answer. The devices you are using are actually more properly called gateways. They pretty much can translate a lan subnet to a single wan ip and that is pretty much it.

There really is no way to tell a wireless connection from a wired one via IP address alone. These are all on the same subnet and you have to assume they can all communicate. You of course can do things like manually assign IP but that is not a security option since the users can change them. You can of course put in a rule that says they can reach only the 192.168.1.1 address and no others but to say only wireless uses can do this but wired have more access it likely not possible.

The clients on router1 will never be able to see the...
Sort by date Sort by votes
B

bill001g

Titan
Aug 9, 2012
28,363
2,766
125,640
Get a real router is the answer. The devices you are using are actually more properly called gateways. They pretty much can translate a lan subnet to a single wan ip and that is pretty much it.

There really is no way to tell a wireless connection from a wired one via IP address alone. These are all on the same subnet and you have to assume they can all communicate. You of course can do things like manually assign IP but that is not a security option since the users can change them. You can of course put in a rule that says they can reach only the 192.168.1.1 address and no others but to say only wireless uses can do this but wired have more access it likely not possible.

The clients on router1 will never be able to see the clients on router2...especially by IP address. All the machine are sharing the wan address and all network behind and invisible. This is the standard port forwarding issue on the internet.

You can use a host table entries if you really want to use a name resolution or you will have to setup your own dns server.

Your only hope is to get a real router. You can load dd-wrt and get most the features but you may end up having to have it on both routers it depends if router1 can really function with multiple different lan subnets. Many times the routing will work but it refused to nat the other subnets to allow internet access.
 
Upvote 0 Downvote
Solution
J

jpxavier

Honorable
Dec 11, 2013
2
0
10,510
Thanks Bill.. I will see if I can flash the router(s) with DD-WRT. It looks like only one is supported. Netgear WND3400. the other one is DLink DIR-651 which is not supported.. thanks again.
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom