Mapping Drives both directions on 2 Router LAN

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645
Why is it I can map drives to my 192.168.1.1 PC hooked to router #1
Example; \\192.168.1.25\Share$ will map from 192.168.2.216 PC

But 192.168.1.25 PC cannot map to 192.168.2.216\Share$







 
Solution
That likely could be used for some things but I don;t think it is what you are looking for. The routing table matches a destination address....ie locations on the internet. You could for example route a traffic to netflix to the wan since netflix blocks vpn.

What you want to do is block particular machines in your house. That is a source ip address. It is done with what is called a policy route. That is what is being configured on the vpn-client screen.

Now deep down inside all it is doing is putting entries in the iptables from both menus.
You've probably the LAN cable from the 192.168.1.x router connected to the WAN port of the 192.168.2.x router. That adds a firewall which allows machines on the 192.168.2.x network to see machines on the 192.168.1.x network, but not the other way around. If it you want it to work both ways, you need to either:

  • ■assign the computer on the 192.168.2.x network a static IP address, then set up port forwarding for the ports needed for file sharing (135-139 and 445, UDP and TCP for Windows file sharing) on the 192.168.2.1 router to that computer.
    ■or you need to put everything onto a single network. Disconnect the 192.168.2.1 router, and assign it a static LAN IP address of 192.168.1.2. Disable its DHCP server, and cover its WAN port with a piece of tape. Plug a cable from one of the LAN ports on the 192.168.1.1 router to a LAN port on the 192.168.1.2 router.
If you want two-way file sharing between multiple computers on both networks, you will have to use the second method. Set up user/password access restrictions for security.
 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645


Aaah!
Will the fact the 192.168.2.216 PC is on a VPN matter and still allow those shares?
 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645
This look right to ya? :)
https://imgur.com/qII905H
qII905H
 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645



Still notta! Ideas?
https://imgur.com/41y1Ygr
 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645
Adding...
The advanced sharing is enabled for home networks and set to "Use User accounts" to manage. NOT allow windows to manage. Each pc has the correct user accounts.
I am trying to keep one PC off the VPN.
Netgear is first router and DD-WRT is second on VPN.


 
Pretty much this doesn't work for the same reason you can not access your neighbors computer. From the second routers perspective the first router is the internet. It does not allow access to internal machine from the internet.

Now if you did not have vpn on the second router you could just put a single machine in the DMZ and it would be accesible from the first. If you have 2 machines you need to access you have the same problem doing this as you do when you want to access multiple machines in your neighbors house.

Now in addition to that problem the VPN will attempt to force all traffic coming from machines on router 2 to go via the VPN. You need to configure the VPN to allow this traffic to go directly.

It will likely just be simpler to put all the machines on router 2 and configure router 2 to not send traffic from particular machine to the VPN and have them go to the internet directly. The machines will still be able to talk to each on the lan.
 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645


I have already removed the first router and using only the ASUS RT-AC88u DD-WRT with Merlin v.380.68 2.
Can you summarize how to map the specific LAN port I want to keep off of the VPN to use my ISP's info?

Where do I need to start to make this work?


 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645


PrivateInternetAccess.Com is the VPN
Router is Asus RT-AC88u w/Merlin v.380.68 2

Hoping to pass LAN Port #1 so it remains off the VPN


 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645


Got this Nice Router and cannot do what I want. Well, that sucks! hehehe
Guess using their Applet is an option. Arrg..
 

LedaOhio9

Honorable
Jul 30, 2017
75
2
10,645


QUESTION:
Would this not be where I'd specify the information to bypass the VPN?
https://imgur.com/a/ZK1h6


 
That likely could be used for some things but I don;t think it is what you are looking for. The routing table matches a destination address....ie locations on the internet. You could for example route a traffic to netflix to the wan since netflix blocks vpn.

What you want to do is block particular machines in your house. That is a source ip address. It is done with what is called a policy route. That is what is being configured on the vpn-client screen.

Now deep down inside all it is doing is putting entries in the iptables from both menus.
 
Solution