Port Forwarding from modem/router to another router

Posted on 2006-06-18
Last Modified: 2010-05-18

I am in a situation where I have 2 routers installated for my network. The first router is also a modem and was issued by the ISP and is locked on the LAN side to the 10.X.X.X address range. The second device is a router/wireless/firewall which its LAN portion addess has been set to the 192.168.0.X network range.  The first router/modem is connect via cat5 from its LAN port to the second routers WAN port and internet is coming through fine to the 192.168.0.x network. The problem I am having is enabling remote access (RDP 3389) to forward through from the first router, to the second and onto the desired workstation (

Currently in both routers I have enabled port forwarding for TCP port 3389 to forward to the workstation. When I test this connection from a client outside on the internet it does not make a connection. Can anyone please tell me if I am doing something wrong in this scenario?


Question by:amerretz
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 13

Expert Comment

ID: 16932812
On the ISP supplied router, you will need to forward port 3389 to the WAN port IP address of your second router (this will be a 10.x.x.x address) and then on the second router forward the port to your internal machine.

Author Comment

ID: 16933198
So let me get this straight.  If the ISP's router address is then how can I find out the address that is being issued to the WAN port of the second router in the 10.x.x.x  newtwork. Wouldnt the second router have 2 addresses assigned to the WAN port, one side for the 10.x.x.x network and the other for the 192.168.0.x network? Is this right?

LVL 13

Expert Comment

ID: 16933232
bigpond ?

The second router should have some admin interface that will tell you what it's WAN address is. It will have gotten one from your ISP router using DHCP. It's WAN address will be 10.0.0.x and it's LAN address will be 192.168.0.x.

The most basic fundamental theory of routers says that it's interfaces need to have IP address on different subnets for it to work.
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.


Author Comment

ID: 16933429
Yeah bigpond, speedtouch modem. Ok so I will check through the second routers status pages. Then will forward 3389 to this address in the first router, then forward from the second router to the LAN client.

In this case will I need to create two port forwarding rules in the first router. The first rule forwarding 3389 from any host (internet to then another forward rule from to 10.0.0.x (once I find the issued address on the second router). And, just a single rule on the second router of 10.0.0.x to 192.168.0.x. I maybe wrong in asking this but my other thought is maybe the double forward is not necessary because the router will handle the translation.


LVL 13

Accepted Solution

td_miles earned 500 total points
ID: 16933693
No, you don't need to initially forward to the IP address of your Speedtouch router (

On the speedtouch, forward port 3389 to the IP address that you find out is the WAN IP address on your second router. On the second router forward port 3389 to your internal IP address. Thus traffic will flow as follows:

Internet user connects to WAN IP address of speedtouch router (dynamically supplied by ISP on connect).
Speedtouch router maps/forwards the packet to 10.0.0.x (WAN IP of 2nd ruoter)
Second router receives the packet on its WAN IP 10.0.0.x
Second router translates/forwards the packet to
Host receives packet from the Internet after it has been translated/forwarded by both devices.

Are you sure the speedtouch is locked ? Have you tried the default admin passwords for it (google search will find them for you) ? If you have your own router, you could put the speedtouch into bridged mode and just use your own router (if it doesn't have ADSL modem built in), this would make things easier.

Author Comment

ID: 16934313
Ok I understand now.

1st Ext--- x.x.x.x Dynamic ISP
1st Int --- Static
|                                          <  Forward to 10.0.0.x
2nd Ext --- 10.0.0.x Static
2nd Int ---
|                                       < Forward to
Client ---

I tried to change the LAN Ip on the speedtouch and I couldnt figure out how, I could only add an additional LAN IP.  The second router doesnt have a modem built in.

Thanks for all your help, really appreciate it!


Featured Post

Don't Miss ATEN at InfoComm 2017!

Visit booth #2167 to see the  new ATEN VM3200 32 x 32 Modular Matrix Switch. Other highlights include the VE8950 4K HDMI Over IP Extender, VS1912 12-Port DP Video Wall Media Player  and VK2100 ATEN Control System. Register now with Free Pass Code ATEN288!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question