Double router port forwarding help

[jbsmith]

I need help setting up port forwarding for a double router config. I can't figure out what I'm doing wrong.

Router 1
Connected to WAN
IP of 10.0.1.1
Wireless tuned off
No device but router 2 and WAN connected to this.
LAN port connected to WAN port of Router 2
Tomato v1.28
Ports forwarded to 10.0.1.108


Router 2
Cisco e4200
Connected to router 1 via its WAN port
WAN IP of 10.0.1.108 (static)
IP of 192.168.1.1
Ports forwarded to correct machine IP of 192.168.1.100 (static)

Port forwarding worked fine on router 2 when that was connected to the WAN. But now that I introduced the new router 1 I can't seem to get traffic to pass between the two routers. Every device on router 2 can access the internet.


Help is appreciated.

 

[stevech]

This is called double-NAT.
I strongly urge you to not do do double-NAT (cascaded routers).
Instead, make the add on router be an access point (AP), or buy a purposed AP such as the $45 ASUS http://www.asus.com/Networking/RTN12_D1/
This is the usual way to improve coverage.

To do double-port-forwarding is messy and error prone, over a long time as things change.

 

[jbsmith]

Thanks. So is port forwarding not going to work with my configuration?

The reason for the additional router (router 1) was for tomato's bandwidth meter not coverage.

Could I leverage a DMZ to make it work?

Sent from my SCH-I535 using Tapatalk

 

[CaptainSTX]

I need help setting up port forwarding for a double router config. I can't figure out what I'm doing wrong.

Router 1
Connected to WAN
IP of 10.0.1.1
Wireless tuned off
No device but router 2 and WAN connected to this.
LAN port connected to WAN port of Router 2
Tomato v1.28
Ports forwarded to 10.0.1.108


Router 2
Cisco e4200
Connected to router 1 via its WAN port
WAN IP of 10.0.1.108 (static)
IP of 192.168.1.1
Ports forwarded to correct machine IP of 192.168.1.100 (static)

Port forwarding worked fine on router 2 when that was connected to the WAN. But now that I introduced the new router 1 I can't seem to get traffic to pass between the two routers. Every device on router 2 can access the internet.


Help is appreciated.

Double NATed routers can work just fine. I have two routers behind my primary router and all functions work fine with the exception that I have been unable to get a VPN server set up on my N66U running Merlin.

The brute force approach is to set router 2's WAN IP 10.0.1.108 in router 1's DMZ. Depending on what you are trying to do you may have to set up port forwarding on router 2 to the IP of the device connected to router 2.

If this solves the problem then try this approach if you want a solution with more finesse.

On router 1 forward the port to the WAN IP of router 2. Then on router 2 forward the port to the LAN IP of the device you want to connect to the service.

You shouldn't have any problems.

 

[jbsmith]

Double NATed routers can work just fine. I have two routers behind my primary router and all functions work fine with the exception that I have been unable to get a VPN server set up on my N66U running Merlin.

The brute force approach is to set router 2's WAN IP 10.0.1.108 in router 1's DMZ. Depending on what you are trying to do you may have to set up port forwarding on router 2 to the IP of the device connected to router 2.

If this solves the problem then try this approach if you want a solution with more finesse.

On router 1 forward the port to the WAN IP of router 2. Then on router 2 forward the port to the LAN IP of the device you want to connect to the service.

You shouldn't have any problems.

I think I've done both of these and neither worked... I'll try again but if no joy any other ideas?

Sent from my SCH-I535 using Tapatalk

 

[jlake]

On the linksys firewall settings, try unchecking the box "block anonymous internet requests".


Edit: if that doesn't work, sometimes you just have to reset to defaults and start completely over. You didn't say what ports you're trying to forward. Sometimes you have to use alternate port numbers. Try a random port like 49163 to see if that works.

 

[jbsmith]

Ports are 80, 5000, 5001

Sent from my SCH-I535 using Tapatalk

 

[jbsmith]

So i see something interesting here on router 2 (the cisco) logs. Incoming log shows my WAN IP from Router 1 and the correct destination port/ip. However the browser says it can't load the page.

 

[stevech]

Thanks. So is port forwarding not going to work with my configuration?

The reason for the additional router (router 1) was for tomato's bandwidth meter not coverage.

Could I leverage a DMZ to make it work?

Sent from my SCH-I535 using Tapatalk

If you use an AP as suggested, double port forwarding isn't needed.

 

[jlake]

If you use an AP as suggested, double port forwarding isn't needed.

The E4200v1 already has an AP mode (aka bridge mode). No need to go out and buy an AP when you already have one in the E4200v1.

Bridge mode/AP mode instructions are in link below.

http://kb.linksys.com/Linksys/GetAr...tting_up_the_Linksys_E4200_in_bridge_mode.xml