Using Firewall Portion of Router only With Another Router

office_equipment_center
office_equipment_center used Ask the Experts™
on
I currently have a WNDR4500 for a router and I wanted to keep using it for one reason specifically in the GUI there is an option to have certain wireless devices on your network and guest devices be separated from the rest of the network and I figured with that option in there that is a lot simpler to enable then setting up different networks.

I also was able to trade for a low cost to get a netgear UTM50 firewall/router. Now before I had the wndr4500 router inplace as a router instead of just an AP I had a rvs4000 router but with the security features it offers and the actual power the router was capable of it just didn't cut it in terms of throughput. So I looked for a firewall that provided those features and found it with the netgear one. Others do but they have more of a user max limit on their hardware and netgear does not so that is what attracted me to it.

Now I just want to use the UTM50 as a firewall and not a router so heres my idea for the network setup please correct any shortsightedness.

Modem>WNDR4500(firewall options disabled)>then from a LAN port on the WNDR4500 to a LAN port on the UTM50 I would connect those two that way>Then connect a switch to a LAN port on the UTM50 and have any subsequent switches come off of the one connected one.

How does that sound?

I was also thinking I might need the UTM50 after the modem and then just use it as a firewall into the router so that way everything on the network is covered correct?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
slinkygnPresident
Commented:
I'd do it the second way if I were you -- I'd want the firewall ahead of the router, not behind it.  So modem -> UTM50 -> router.  Make sure to kill off the firewalling features of the WNDR4500 if you're using the UTM50 for that purpose, or at least test carefully if you don't; especially if you're NATting this stuff (which it sounds like you are) you could run into some weird problems.
office_equipment_centerDirector of Technology

Author

Commented:
Ok so Ill kill off any of the wndr4500 firewall features. Now as for the wireless feature that I wanted to use where it seperates the guest networks from the local network resources does that count as a firewall thing that I'd need to disable or no?

So it will go modem>utm50>wndr4500(setup for dhcp relay to utm50?)>switches?

I would wanna connect the utm50 device from a lan port to a lan port and not to the wndr4500 correct? with a straight through cable and not a crossover?
slinkygnPresident
Commented:
You should be able to keep the guest network stuff enabled.  That's probably implemented through a VLAN.  Should be fine.

Straight-thru cable; not sure I follow the "LAN port" question.  It'd be from the modem's Ethernet connection to a WAN port on the UTM50, and then a LAN port on the UTM50 to a LAN port on WNDR's WAN port (since you're using it effectively as just an AP, not a router).  Specified on the WNDR that the local gateway/DHCP/DNS is the UTM50.  Does that answer that question?
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

office_equipment_centerDirector of Technology

Author

Commented:
Ok so I would want to setup the wndr4500 as a dhcp relay and have static routing enabled and pointed at the utm50?
President
Commented:
Static routing won't matter if you're connecting to a LAN port.  You can probably have routing disabled; the UTM50 will be doing your routing, and the WNDR will basically operate as a smart switch/VLAN for your wired and wireless connections.

Any solutions like this can be a little quirky, since we're using products for something a little different than what they were intended for, so if that doesn't work we can try some variations.  But the setup above has a good chance of working well; I've used it on some customer retail areas with low availability requirements and it's been fairly trouble-free.
office_equipment_centerDirector of Technology

Author

Commented:
Unfortunately the guest network feature does not work properly on the wndr4500 so all that was of no use. I appreciate all of your help thank you.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial