Tech or Treat! Write an article about your scariest tech disaster to win gadgets!Learn more


Port Forwarding from modem/router to another router

Posted on 2006-06-18
Medium Priority
Last Modified: 2010-05-18

I am in a situation where I have 2 routers installated for my network. The first router is also a modem and was issued by the ISP and is locked on the LAN side to the 10.X.X.X address range. The second device is a router/wireless/firewall which its LAN portion addess has been set to the 192.168.0.X network range.  The first router/modem is connect via cat5 from its LAN port to the second routers WAN port and internet is coming through fine to the 192.168.0.x network. The problem I am having is enabling remote access (RDP 3389) to forward through from the first router, to the second and onto the desired workstation (

Currently in both routers I have enabled port forwarding for TCP port 3389 to forward to the workstation. When I test this connection from a client outside on the internet it does not make a connection. Can anyone please tell me if I am doing something wrong in this scenario?


Question by:amerretz
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 13

Expert Comment

ID: 16932812
On the ISP supplied router, you will need to forward port 3389 to the WAN port IP address of your second router (this will be a 10.x.x.x address) and then on the second router forward the port to your internal machine.

Author Comment

ID: 16933198
So let me get this straight.  If the ISP's router address is then how can I find out the address that is being issued to the WAN port of the second router in the 10.x.x.x  newtwork. Wouldnt the second router have 2 addresses assigned to the WAN port, one side for the 10.x.x.x network and the other for the 192.168.0.x network? Is this right?

LVL 13

Expert Comment

ID: 16933232
bigpond ?

The second router should have some admin interface that will tell you what it's WAN address is. It will have gotten one from your ISP router using DHCP. It's WAN address will be 10.0.0.x and it's LAN address will be 192.168.0.x.

The most basic fundamental theory of routers says that it's interfaces need to have IP address on different subnets for it to work.
Supports up to 4K resolution!

The VS192 2-Port 4K DisplayPort Splitter is perfect for anyone who needs to send one source of DisplayPort high definition video to two or four DisplayPort displays. The VS192 can split and also expand DisplayPort audio/video signal on two or four DisplayPort monitors.


Author Comment

ID: 16933429
Yeah bigpond, speedtouch modem. Ok so I will check through the second routers status pages. Then will forward 3389 to this address in the first router, then forward from the second router to the LAN client.

In this case will I need to create two port forwarding rules in the first router. The first rule forwarding 3389 from any host (internet to then another forward rule from to 10.0.0.x (once I find the issued address on the second router). And, just a single rule on the second router of 10.0.0.x to 192.168.0.x. I maybe wrong in asking this but my other thought is maybe the double forward is not necessary because the router will handle the translation.


LVL 13

Accepted Solution

td_miles earned 2000 total points
ID: 16933693
No, you don't need to initially forward to the IP address of your Speedtouch router (

On the speedtouch, forward port 3389 to the IP address that you find out is the WAN IP address on your second router. On the second router forward port 3389 to your internal IP address. Thus traffic will flow as follows:

Internet user connects to WAN IP address of speedtouch router (dynamically supplied by ISP on connect).
Speedtouch router maps/forwards the packet to 10.0.0.x (WAN IP of 2nd ruoter)
Second router receives the packet on its WAN IP 10.0.0.x
Second router translates/forwards the packet to
Host receives packet from the Internet after it has been translated/forwarded by both devices.

Are you sure the speedtouch is locked ? Have you tried the default admin passwords for it (google search will find them for you) ? If you have your own router, you could put the speedtouch into bridged mode and just use your own router (if it doesn't have ADSL modem built in), this would make things easier.

Author Comment

ID: 16934313
Ok I understand now.

1st Ext--- x.x.x.x Dynamic ISP
1st Int --- Static
|                                          <  Forward to 10.0.0.x
2nd Ext --- 10.0.0.x Static
2nd Int ---
|                                       < Forward to
Client ---

I tried to change the LAN Ip on the speedtouch and I couldnt figure out how, I could only add an additional LAN IP.  The second router doesnt have a modem built in.

Thanks for all your help, really appreciate it!


Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It happens many times that access list (ACL) have to be applied to outgoing router interface in order to limit some traffic.This article is about how to test ACL from the router which is not very intuitive for everyone. Below scenario shows simple s…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

647 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question