Port Forwarding from modem/router to another router

Posted on 2006-06-18
Last Modified: 2010-05-18

I am in a situation where I have 2 routers installated for my network. The first router is also a modem and was issued by the ISP and is locked on the LAN side to the 10.X.X.X address range. The second device is a router/wireless/firewall which its LAN portion addess has been set to the 192.168.0.X network range.  The first router/modem is connect via cat5 from its LAN port to the second routers WAN port and internet is coming through fine to the 192.168.0.x network. The problem I am having is enabling remote access (RDP 3389) to forward through from the first router, to the second and onto the desired workstation (

Currently in both routers I have enabled port forwarding for TCP port 3389 to forward to the workstation. When I test this connection from a client outside on the internet it does not make a connection. Can anyone please tell me if I am doing something wrong in this scenario?


Question by:amerretz
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 13

Expert Comment

ID: 16932812
On the ISP supplied router, you will need to forward port 3389 to the WAN port IP address of your second router (this will be a 10.x.x.x address) and then on the second router forward the port to your internal machine.

Author Comment

ID: 16933198
So let me get this straight.  If the ISP's router address is then how can I find out the address that is being issued to the WAN port of the second router in the 10.x.x.x  newtwork. Wouldnt the second router have 2 addresses assigned to the WAN port, one side for the 10.x.x.x network and the other for the 192.168.0.x network? Is this right?

LVL 13

Expert Comment

ID: 16933232
bigpond ?

The second router should have some admin interface that will tell you what it's WAN address is. It will have gotten one from your ISP router using DHCP. It's WAN address will be 10.0.0.x and it's LAN address will be 192.168.0.x.

The most basic fundamental theory of routers says that it's interfaces need to have IP address on different subnets for it to work.
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 16933429
Yeah bigpond, speedtouch modem. Ok so I will check through the second routers status pages. Then will forward 3389 to this address in the first router, then forward from the second router to the LAN client.

In this case will I need to create two port forwarding rules in the first router. The first rule forwarding 3389 from any host (internet to then another forward rule from to 10.0.0.x (once I find the issued address on the second router). And, just a single rule on the second router of 10.0.0.x to 192.168.0.x. I maybe wrong in asking this but my other thought is maybe the double forward is not necessary because the router will handle the translation.


LVL 13

Accepted Solution

td_miles earned 500 total points
ID: 16933693
No, you don't need to initially forward to the IP address of your Speedtouch router (

On the speedtouch, forward port 3389 to the IP address that you find out is the WAN IP address on your second router. On the second router forward port 3389 to your internal IP address. Thus traffic will flow as follows:

Internet user connects to WAN IP address of speedtouch router (dynamically supplied by ISP on connect).
Speedtouch router maps/forwards the packet to 10.0.0.x (WAN IP of 2nd ruoter)
Second router receives the packet on its WAN IP 10.0.0.x
Second router translates/forwards the packet to
Host receives packet from the Internet after it has been translated/forwarded by both devices.

Are you sure the speedtouch is locked ? Have you tried the default admin passwords for it (google search will find them for you) ? If you have your own router, you could put the speedtouch into bridged mode and just use your own router (if it doesn't have ADSL modem built in), this would make things easier.

Author Comment

ID: 16934313
Ok I understand now.

1st Ext--- x.x.x.x Dynamic ISP
1st Int --- Static
|                                          <  Forward to 10.0.0.x
2nd Ext --- 10.0.0.x Static
2nd Int ---
|                                       < Forward to
Client ---

I tried to change the LAN Ip on the speedtouch and I couldnt figure out how, I could only add an additional LAN IP.  The second router doesnt have a modem built in.

Thanks for all your help, really appreciate it!


Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question