OT : Help an ADSL Newbie with Port Forwarding

[deccan]

Some of you may remember me asking for advice on software to use with my new always on connection. Well, it's finally up and running now but I'm trying to get port forwarding to work right.

Right off the bat, I'll say that I can get it to work fine if it's just:

Internet - ADSL Modem / Router - Me

But right now, it's:

Internet - ADSL Modem / Router - Wireless Router - Me

And the same trick doesn't work anymore? What do I do in this case? I tried forwarding the ports I needed from the modem / router to the IP of the Wireless Router (that I got by looking at the modem / router's configuration page to see what is connected to it, in this case, just the one wireless router), and then forwarded the same ports on the wireless router to my internal static ip, but it didn't work. Is there something else I should know about?

Thanks.

[rdouglass]

You may have to build an intermediate network between the two. DISCLAIMER: I'm just stating what I would try; there may be easier ways with your specific hardware like being able to turn off the router portion of the modem, etc. This is just one way I'd attempt it.

Looking at this from a left-to-right, outside-to-in configuration, I'd build an intermedaiate network like so:

Port:-----IP Address-----Def Gateway
Modem
Ouside:---PER ISP doc's
Inside:---192.168.0.1----(outside gateway)

Wireless
Outside:---192,168.0.2---192.168.0.1
Inside:----192.168.1.1---192.168.0.1

PC:
Outside:---192.168.1.2---192.168.1.1

Assuming all subnets are Class C (255.255.255.0) and "Outside" signifies the port furthest away from the PC.

At least that's the direction I'd go. Then let the DSL modem do the firewall stuff. If it has no options for that, let the wireless do the firewall. I'd suggest not doing both.

That any help?

[Suicide Junkie]

You don't really need two routers.
Try changing the settings on the "inside" router to disable the dhcp server, and turn it into a hub.

Then your old settings should work fine.

[rdouglass]

I think SJ, that with most wireless routers, that to disable the routing functions also will disable the bridging and wireless access.

I don't believe they'll function as a bridge and you'll need at least "bridge" functionality to get from one media type to another.

A. least it was when I studied the OSI model...

[Suicide Junkie]

Well, that's what I did with mine, and it works fine.
The wireless laptops show up in the non-wireless router's DHCP list.

[rdouglass]

Cool. Lear somethin' new every day. Thanks for clarifying.

[Thermodyne]

Why not dump the wired router and just use the wireless one?

[deccan]

Thermodyne said:
Why not dump the wired router and just use the wireless one?

'Cos the wired router is also the ADSL modem and the wireless one doesn't have modem capability. I'll try SJ's solution and see it if it works. Thanks!

[Thermodyne]

Then do it like this


Wan--x.x.x.x--Modem/Router
Modem/router-192.168.0.1/24 to wired LAN
Asign WAN port of Wireless router 192.168.0.2/24
Asign 192.168.0.x/24 addys to all wired systems no/dhcp
Assign 192.168.1.x/24 subnet to wireless side of wireless router and turn on dhcp

Wan routes to 192.168.0.x/24
Set DMZ for 192.168.0.2/24 on wired router
Wireless router set to 192.168.0.2 on WAN port
Wireless router LAN side set to 102.168.1.x/24 dhcp/on

Forward ports as needed from WAN to LAN
DMZ forwards all ports to Wireless router.
Forward ports from 192.168.0.x to 1.x as needed.

Set wireless access security to what ever you can live with.
WEP is no longer a safe level

[deccan]

SJ's idea didn't work for me. It seems that the internal wireless LAN insists on an ip assigned by the wireless router.

Thermodyne's solution seems awfully complex. If I disable DCHP on the external wired router, how do I get the wireless router to get an IP from it?