• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 648
  • Last Modified:

Router pass-through

I have a Netgear modem/router. DGN1000. ip address 192.168.11.1

I want to connect it to another router (Draytek Vigor 2920 - no modem) on a different network 192.168.12.n so that some PCs can connect to the main Netgear and others connect to the router. I have set the LAN address of the Vigor to 192.168.12.1

We want to work on two separate networks (whilst we set up the 2nd one) but use the common broadband/Internet.

I want the broadband/internet to pass through from the Netgear into the Vigor passing the cable output from the Netgear Lan socket to the WAN interface on the Vigor. I think I need to "tell" the Netgear where to send it? How do I do this, is it somethign to do with the DMZ?

Any pointers would be helpful.
0
gerlis
Asked:
gerlis
  • 7
  • 3
2 Solutions
 
gerlisAuthor Commented:
Even if someone can give me an answer in principle i.e. not necessarily relating the these two devices, would help.

Thanks
0
 
Fred MarshallPrincipalCommented:
I want the broadband/internet to pass through from the Netgear into the Vigor passing the cable output from the Netgear Lan socket to the WAN interface on the Vigor.
 Like this, eh?:

<internet> Netgear <> 192.168.11.0/24<> Draytek <> 192.168.12.0/24.

Isn't this the idea?  Well, it would work fine.  I've attached a diagram of such things.
It's a very common thing to do.

By having the Draytek WAN port with an address in 192.168.11.0, you have already "told it" everything it needs to know.  You can see it in the routing table of the Draytek.
It doesn't matter if the Draytek gets the WAN port configuration via DHCP from the Netgear or if you enter the addresses manually.  In some sense, it's a lot easier and perhaps more reliable to use DHCP for this port.
Multiple-Subnets.pdf
0
 
gerlisAuthor Commented:
Thanks, yes I think this is exactly what I am trying to achieve. The trouble is that (in your example) I cannot find any way of telling the Draytek that the WAN port is 192.168.11.0 (or 192.168.12.1 in my real example). The router has no option that I can see, for this.
Capture-draytek.JPG
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
gerlisAuthor Commented:
I attached a screen snap of the WAN interface bit
0
 
Fred MarshallPrincipalCommented:
The page you captured is for the physical attributes of the WAN.

Here is the control page you want to access .. from the Vigor 2920 manual:

Select:
Static IP
or
DHCP
whichever you prefer as I mentioned above.
Draytek-Vigor-2920-WAN.jpg
0
 
gerlisAuthor Commented:
Ah the "read the manual scenario", thanks for your patience.

I had tried this, but what am I missing or not doing right?  See this screen grab. Also it doesn't save this.

(I tried static IP)

It's under WAN > Internet access on the Vigor menu
Capture-2.JPG
0
 
gerlisAuthor Commented:
Draytek support responded with a somewhat complicated answer. See below. We did not have a chance to try it as we used the same ip range on both networks thus obviating the need to separate them. Now the new server is in, we are using the Draytek as a normal router.

-------------- Draytek's answer ----------------

Thank you for the details. What I would suggest would be slightly different than what you had in mind. First of all what you suggested would be to leave the current connections on the Netgear as they are, connect the 2920 on the LAN side of the Netgear and then setup a second network on the 2920. The clients on the 2920 though will be behind a dual NAT configuration meaning that you will have firewall and NAT rules applied on both the Netgear and the 2920. This will however create 2 subnets that will not have access to each other. You may want to consider though the following.

Connect the Netgear in bridge mode on one of the 2 WAN ports of the 2920 and have the 2920 dial the PPPoE username and password details for your broadband connection. You can then setup 2 VLANs on the 2920 on 2 different subnets (192.168.11.1/24 and 192.168.12.1/24). The subnets will be related to the ports/ssids on the router. For instance you can associate LAN ports 1 and 2 with the first subnet along with SSID1, and ports 3 and 4 plus SSID2 for the second network. The 2 networks are independent and the 2920 will handle the traffic for both. You avoid the dual NAT for the second subnet that you have in your original configuration and the 2920 gives you more options on managing the network, in terms of NAT, Firewall or VPN.
-----------------------------------
0
 
Fred MarshallPrincipalCommented:
You didn't enter a Gateway address or a DNS address or two...  

In this case, you want the Netgear as the Gateway and probably as the first DNS address.

Maybe you'd be better off using DHCP as in "Obtain an IP address automatically" and then let the Netgear provide everything necessary for that "upper" LAN into the Draytek WAN interface settings.  At least then you should be able to see what works.

In some sense DHCP is better because if a DNS address changes then it will be updated automatically.  But, if it's always going to be the Netgear anyway then this won't matter.
0
 
gerlisAuthor Commented:
Draytek have more or less resolved it, although I did not necessarily understand it all!

However, I'd like to thank fmarshall for his assistance and earlier efforts.
0
 
gerlisAuthor Commented:
Mainly resolved by the router manufacturer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

  • 7
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now