Question with secondary wifi router

blindvi1

Reputable
Feb 21, 2014
7
0
4,510
Hello everyone. I have a question for the forum here and was hoping if I'm posting this in the right place, if not a Mod is free to move me to the right place. This is relating to a secondary wireless router in a home network.

Network diagram as follows

TWC Scientific Atlanta Modem provides WAN/Internet/phone >

connected to a Linksys E1200 providing primary wireless and Internet with WPA/WPA2 with strong wireless randomized password (wireless printer does not support AES, so only device that needs WPA, all others in process of being converted to 2/AES.) range of ip table is 192.168.140.25-75 subnet is Class C

secondary router is a net gear 3400 WNDR, personal owned for private secondary access and other network for testing purposes and media streaming. ip range of 172.16.100.10-20, router ip is kept outside of dchp table, subnet of class B (mirrored the same as IT classroom labs on campus to keep virtual machines all in sync and for ease of use/familiar) secured with WPA2-AES and personal password combination. Connected to Linksys by Ethernet and recieving a static .75 ip from Linksys router. Remote management port active to access from primary network and router password/management port changed from default.

Issue: any way to access the secondary (Netgear) routers admin panel from outside the home LAN over WAN. Port forwarding from Linksys to Netgear maybe? Also would like to configure the Netgear to access LAN devices on the primary network but not the other way around.

Thanks for the help and any questions feel free to ask
 
Solution
I would have to read the manual to see if there are restriction on that particular router. In general you can make them the same or different. It is very common to say use port 80,81,82,83 etc and then map them to 4 different server all on port 80 since the server prefer to listen on particular ports. In that type of case only the first server would be mapping the same port externally. This is the whole purpose of port mapping so I can't see why it does not work. The one I see the most restriction on is something like 443 since router that allow admin from the wan map it to the router itself. sslvpn routers also tend to like to restricting port 443.

Pretty much it is up to you. It should work either way.
If you can admin the netgear from a machine on the primary network now then it should just be a matter of port forwarding to allow it to be accessed from the internet. Many routers make it intentionally difficult to admin them from the wan port.

By default the users on the secondary network will be able to access the primary but not the reverse just because of how nat works.
 

blindvi1

Reputable
Feb 21, 2014
7
0
4,510
To Bill001g.

Letting you know I have picked port (anonymous for questions purpose.) 12345 for it. When I picked into the Port forwarding on the Linksys, I tried to see if I could use a different port for external (12346) but put in 12345 for internal and to forward to .75 and enabled it. Should I maybe just keep them the same. My reasons for changing it are as I'm sure you can guess, are for security reasons since the netgear will effectively "be on the web"
 
I would have to read the manual to see if there are restriction on that particular router. In general you can make them the same or different. It is very common to say use port 80,81,82,83 etc and then map them to 4 different server all on port 80 since the server prefer to listen on particular ports. In that type of case only the first server would be mapping the same port externally. This is the whole purpose of port mapping so I can't see why it does not work. The one I see the most restriction on is something like 443 since router that allow admin from the wan map it to the router itself. sslvpn routers also tend to like to restricting port 443.

Pretty much it is up to you. It should work either way.
 
Solution