Router pass-through

Posted on 2014-02-18
Last Modified: 2014-03-24
I have a Netgear modem/router. DGN1000. ip address

I want to connect it to another router (Draytek Vigor 2920 - no modem) on a different network 192.168.12.n so that some PCs can connect to the main Netgear and others connect to the router. I have set the LAN address of the Vigor to

We want to work on two separate networks (whilst we set up the 2nd one) but use the common broadband/Internet.

I want the broadband/internet to pass through from the Netgear into the Vigor passing the cable output from the Netgear Lan socket to the WAN interface on the Vigor. I think I need to "tell" the Netgear where to send it? How do I do this, is it somethign to do with the DMZ?

Any pointers would be helpful.
Question by:gerlis
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3

Author Comment

ID: 39868979
Even if someone can give me an answer in principle i.e. not necessarily relating the these two devices, would help.

LVL 26

Expert Comment

by:Fred Marshall
ID: 39869173
I want the broadband/internet to pass through from the Netgear into the Vigor passing the cable output from the Netgear Lan socket to the WAN interface on the Vigor.
 Like this, eh?:

<internet> Netgear <><> Draytek <>

Isn't this the idea?  Well, it would work fine.  I've attached a diagram of such things.
It's a very common thing to do.

By having the Draytek WAN port with an address in, you have already "told it" everything it needs to know.  You can see it in the routing table of the Draytek.
It doesn't matter if the Draytek gets the WAN port configuration via DHCP from the Netgear or if you enter the addresses manually.  In some sense, it's a lot easier and perhaps more reliable to use DHCP for this port.

Author Comment

ID: 39869707
Thanks, yes I think this is exactly what I am trying to achieve. The trouble is that (in your example) I cannot find any way of telling the Draytek that the WAN port is (or in my real example). The router has no option that I can see, for this.
Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.


Author Comment

ID: 39869708
I attached a screen snap of the WAN interface bit
LVL 26

Expert Comment

by:Fred Marshall
ID: 39870920
The page you captured is for the physical attributes of the WAN.

Here is the control page you want to access .. from the Vigor 2920 manual:

Static IP
whichever you prefer as I mentioned above.

Author Comment

ID: 39871019
Ah the "read the manual scenario", thanks for your patience.

I had tried this, but what am I missing or not doing right?  See this screen grab. Also it doesn't save this.

(I tried static IP)

It's under WAN > Internet access on the Vigor menu

Accepted Solution

gerlis earned 0 total points
ID: 39894305
Draytek support responded with a somewhat complicated answer. See below. We did not have a chance to try it as we used the same ip range on both networks thus obviating the need to separate them. Now the new server is in, we are using the Draytek as a normal router.

-------------- Draytek's answer ----------------

Thank you for the details. What I would suggest would be slightly different than what you had in mind. First of all what you suggested would be to leave the current connections on the Netgear as they are, connect the 2920 on the LAN side of the Netgear and then setup a second network on the 2920. The clients on the 2920 though will be behind a dual NAT configuration meaning that you will have firewall and NAT rules applied on both the Netgear and the 2920. This will however create 2 subnets that will not have access to each other. You may want to consider though the following.

Connect the Netgear in bridge mode on one of the 2 WAN ports of the 2920 and have the 2920 dial the PPPoE username and password details for your broadband connection. You can then setup 2 VLANs on the 2920 on 2 different subnets ( and The subnets will be related to the ports/ssids on the router. For instance you can associate LAN ports 1 and 2 with the first subnet along with SSID1, and ports 3 and 4 plus SSID2 for the second network. The 2 networks are independent and the 2920 will handle the traffic for both. You avoid the dual NAT for the second subnet that you have in your original configuration and the 2920 gives you more options on managing the network, in terms of NAT, Firewall or VPN.
LVL 26

Assisted Solution

by:Fred Marshall
Fred Marshall earned 300 total points
ID: 39896075
You didn't enter a Gateway address or a DNS address or two...  

In this case, you want the Netgear as the Gateway and probably as the first DNS address.

Maybe you'd be better off using DHCP as in "Obtain an IP address automatically" and then let the Netgear provide everything necessary for that "upper" LAN into the Draytek WAN interface settings.  At least then you should be able to see what works.

In some sense DHCP is better because if a DNS address changes then it will be updated automatically.  But, if it's always going to be the Netgear anyway then this won't matter.

Author Comment

ID: 39939150
Draytek have more or less resolved it, although I did not necessarily understand it all!

However, I'd like to thank fmarshall for his assistance and earlier efforts.

Author Closing Comment

ID: 39949776
Mainly resolved by the router manufacturer

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SD - WAN 2 65
Cisco 2960x How to put Gigabit ports into Etherchannel / Port Channel Group 4 59
Resource timeout across a VPN 9 27
logon time 6 47
Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
Is your computer hacked? learn how to detect and delete malware in your PC
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question