Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


timmmay

16536 posts

Uber Geek

Trusted
Subscriber

#237756 16-Jun-2018 21:32
Send private message

I have my main home network with a Fritzbox on 192.168.1.0/24 using ISP supplied DNS with a subnet mask 255.255.255.0. I would like to add a D-Link DIR615 which gives out IP addresses on the 192.168.0.0/24 network using a different internet based DNS server (eg CloudFlare's 1.1.1.1 or Google's 8.8.4.4) but routes via the Fritzbox as the gateway. I also have a Linksys 54GL which can run DD-WRT or similar, which tends to be pretty flexible.


When I set up the D-Link as 192.168.0.1 and told it to use the Fritzbox gateway 192.168.1.1 it told me I couldn't use a gateway on another network.


Any suggestions?



Update: all I really want is devices connected to this new WAP to use a different DNS server.

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
michaelmurfy
/dev/null
9636 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #2038875 16-Jun-2018 21:43
Send private message

You will need to double-NAT it.

 

I recommend however getting something along the lines of an Edgerouter or a Mikrotik. I've got this exact thing running on my network (One network without IPv6, using a local DNS server and one with IPv6 using Cloudflare's IPv4/v6 DNS).





yitz
1491 posts

Uber Geek


  #2038877 16-Jun-2018 21:43
Send private message

Are you using the WAN or LAN port of the DIR615?

 

 

For double NAT just configure Ethernet WAN with Static IP on the Fritzbox range. You should be able to use the wizard to set this up.

 
 
 
 


timmmay

16536 posts

Uber Geek

Trusted
Subscriber

  #2038883 16-Jun-2018 22:01
Send private message

I'm not going to buy anything, this is just something to play with.

Using LAN port on DLink. I used it as a wireless access point with no problems but that was on same subnet.

I really just want wireless clients on that WAP to use different DNS servers, I just thought having a second subnet would be an easy way to do that.

I get the general idea of double NAT but not sure how to set it up.

richms
23683 posts

Uber Geek

Trusted
Subscriber

  #2038889 16-Jun-2018 22:19
Send private message

Just plug the wan of the dlink into the lan of the fritz and away you go.

 

 





Richard rich.ms

timmmay

16536 posts

Uber Geek

Trusted
Subscriber

  #2038918 17-Jun-2018 07:30
Send private message

richms:

 

Just plug the wan of the dlink into the lan of the fritz and away you go.

 

 

That's a trivial way to extend the WAP. The problem is the DLink router doesn't make it easy to assign different DNS servers.

 

It occurs to me it might be easier to restrict the Fritzbox to a smaller DHCP range, say .50 - 200, and have the DLink use .201 to .250 or so. That way they're on the subnet, separate ranges, and DHCP on the DLink can give out different DNS servers.


freakngeek
350 posts

Ultimate Geek


  #2038921 17-Jun-2018 08:09
Send private message

2x routers dishing out DHCP on same subnet probably will turn ugly

 

I had a DIR615 many many many years ago, was a great router back then

 

Setup the DIR615 as normal with different Subnet as FB
Disable WAN
Plug LAN on DIR615 into LAN on FB
You should be away with Double NAT

 

You could setup the DIR615 WAN port with dedicated IP and grab your ISP IP and gateway details from FB
Plug DIR615 WAN into LAN of FB
Double NAT with 4 LAN ports spare
Only works with static IP from ISP of course

 

Grab your self a ERL3, should be getting cheap as chips with ER4 out now
Then you can play with subnets, DNS till the cows come home in one device
Learning curve is steep at the beginning though


timmmay

16536 posts

Uber Geek

Trusted
Subscriber

  #2038958 17-Jun-2018 08:48
Send private message

I appreciate the explanations so far, but they're just beyond my networking knowledge. I can do networking and routing in AWS fine, but that's enterprise grade, nice user interface, well documented, and trying to do standard stuff.

 

I've had the DLink as a WAP, but that's single NAT. I don't know how to set up double NAT. I don't have a dedicated IP from my ISP. It's not worth spending money on this, it's just something I'm playing with. 

 

Would this be easier with the Linksys on DD-WRT?

 

The only problem with the DIR615 on a different subnet (192.168.0.0/24) is it doesn't want to route to 192.168.1.1 as the internet gateway.


 
 
 
 


Aredwood
3885 posts

Uber Geek


  #2038965 17-Jun-2018 09:12

Double NAT simply means that the data is going through 2 layers of NAT between your devices and the internet. Plugging the Dlink Wan into the FB Lan means that data goes from device - Dlink - FB - Internet. Since both the Dlink and FB have NAT routers, You have double NAT.

Assuming that the Dlink has a option to use a set DNS server for all connected devices. Then you are sorted.

Assuming that the reason for running different DNS servers is for bypassing geoblocks, you might still need the Edgerouter. As some devices will try to access hard coded DNS servers as a way of detecting people who are using global mode service's. The Edgerouter can be configured to intercept and redirect those DNS queries to a different DNS server.





psychnurse
325 posts

Ultimate Geek

Trusted

  #2038979 17-Jun-2018 09:35
Send private message

This is what I did, follow this guide.

 

 

 

Router


yitz
1491 posts

Uber Geek


  #2039062 17-Jun-2018 13:03
Send private message

In the double NAT setup, you should easily be able to configure the DIR-615's LAN DHCP server to hand out specified DNS addresses:

 

 

Click to see full size

timmmay

16536 posts

Uber Geek

Trusted
Subscriber

  #2039095 17-Jun-2018 13:16
Send private message

I've been using single NAT when it was just an access point into the LAN port. I'll try double NAT via the WAN port, and a different subnet. That Linksys guide is good, thanks @psychnurse

 

 

 

Aredwood: Assuming that the Dlink has a option to use a set DNS server for all connected devices. Then you are sorted.

Assuming that the reason for running different DNS servers is for bypassing geoblocks, you might still need the Edgerouter. As some devices will try to access hard coded DNS servers as a way of detecting people who are using global mode service's. The Edgerouter can be configured to intercept and redirect those DNS queries to a different DNS server.

 

Yeah, it can set a DNS server as part of the DHCP config, but only doing double NAT. If it's on the same subnet then it uses DHCP passthrough. I learn this week that DHCP is a broadcast protocol, so they definitely need to be on two subnets if you're giving out IPs via DHCP.

 

Bypassing geoblocks using dns4me is the main aim. I would like my main routers back onto ISP DNS, and I need better signal strength at the Roku, which has pretty poor WiFi.


yitz
1491 posts

Uber Geek


  #2039098 17-Jun-2018 13:25
Send private message

Yeah that's not possible unless you are able to do some fancy filtering.

timmmay

16536 posts

Uber Geek

Trusted
Subscriber

  #2039100 17-Jun-2018 13:27
Send private message

yitz: Yeah that's not possible unless you are able to do some fancy filtering.

 

What's not possible? Based on what I've read it seems like it should work on a different subnet, internet via the WAN port, the second subnet with DHCP providing DNS4ME DNS names.


yitz
1491 posts

Uber Geek


  #2039102 17-Jun-2018 13:28
Send private message

timmmay:

What's not possible? Based on what I've read it seems like it should work on a different subnet, internet via the WAN port, the second subnet with DHCP providing DNS4ME DNS names.

 

 

Oh I mean where you bridge the two LANs but need to filter out certain broadcast traffic.

timmmay

16536 posts

Uber Geek

Trusted
Subscriber

  #2039175 17-Jun-2018 17:46
Send private message

Ok, I got it working. With the information from this thread and linked articles it was pretty easy.

 

1. Reset the second router, plug it directly into the PC using a router LAN port, PC using DHCP.

 

2. Set the router IP address (192.168.0.1 for me) , WiFi settings and password, router admin password. Disable SPI, firewall, QOS, uPNP, etc.

 

3. Setup, manual internet setup, DHCP and put your DNS servers in there.

 

4. Plug second router WAN port into main router LAN port (main router range is 192.168.1.0/24). Test it over WiFi.

 

 

 

It's working well. The only thing that would be useful is being able to access the secondary router from my PC, which is directly connected to the first router.  Could something be done with static routes on the Fritzbox?


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic





News »

Huawei launches IdeaHub Pro in New Zealand
Posted 27-Oct-2020 16:41


Southland-based IT specialist providing virtual services worldwide
Posted 27-Oct-2020 15:55


NASA discovers water on sunlit surface of Moon
Posted 27-Oct-2020 08:30


Huawei introduces new features to Petal Search, Maps and Docs
Posted 26-Oct-2020 18:05


Nokia selected by NASA to build first ever cellular network on the Moon
Posted 21-Oct-2020 08:34


Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.