How do you set up a dmz for a double router connection?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › How do you set up a dmz for a double router connection?

gogokr431

77 posts

Master Geek

Topic # 86181 2-Jul-2011 11:33

so, here we go..

i tried ringing my isp, AND cisco but they are both clueless....................

it looks something like this,
wall -> router -> router -> pc

the 2nd router has better wifi connection and thatis the reason why it is there, and my pc and 2nd router are connected via ethernet cable.

i tried finding the internal ip of router 1, and setting dmz to that ip on router 2 but no luck.

im out of ideas and have no idea how this works.. ffs......

i even thought of having my second router as a pure hub, but also dont knw how ,and i figured it might screw up my wifi altogether...

any help?

webwat

1984 posts

Uber Geek
+1 received by user: 133

Trusted

Reply # 488685 2-Jul-2011 21:29

So you set the DMZ to the external (WAN) IP of the 2nd router? I presume the 2nd router has an Ethernet WAN connection, so have you got the 2nd router picking up its WAN IP by DHCP? you would need to allocate a static IP to it, perhaps set its MAC address to a fixed allocation in the first router.

If thats not successful then setup the first router to half-bridge mode. The WAN or connections menu should have an option for that, although its not always called "half bridge", but allows the PPP username functions to continue while the actual WAN external IP address is allocated to the 2nd router. In this case the 2nd router needs to pickup the external IP automatically by DHCP. The first router would then just convert normal traffic from Ethernet to PPP/ADSL, so not doing actual routing anymore.

Qualified in business, certified in fibre, stuck in copper, have to keep going ^_^

cyril7

6299 posts

Uber Geek
+1 received by user: 288

Trusted

Subscriber

Reply # 488750 3-Jul-2011 10:08

I recommend that the 2nd router with the better wifi is simply run as a layer2 switch and AP, to do this turn its DHCP server off and connect it to the first router via one of its lan ports, ie nothing connected to the 2nd routers WAN port, you are probably advised to alter the lan web admin port of the 2nd router to an address in the subnet of the 1st routers LAN subnet (but out of its DHCP pool) so that you can access it for easy admin.

Once that is done all the lan ports of both routers will be simply a layer2 switch config with the WiFi included so all ports can be used to access the network and internet at large. you then only need to deal with the DMZ of router 1.

Cyril

zapf

11 posts

Geek

Reply # 499208 29-Jul-2011 04:35

You can consider getting a "SET" of WiFi devices that will either work in a WDS mode or as bridge. Then all the WiFi devices will work as one network and save you all then trouble.

Ragnor

8027 posts

Uber Geek
+1 received by user: 387

Trusted

Subscriber

Reply # 499441 29-Jul-2011 14:33

Q: What are the make and model of the two devices involved?

There are a number of ways you can connect two routers to avoid double NAT, the best method depends on the capabilities of the devices.

tonyhughes

Hawkes Bay
8477 posts

Uber Geek
+1 received by user: 4

Mod Emeritus

Trusted

Lifetime subscriber

Reply # 499444 29-Jul-2011 14:41

cyril7: I recommend that the 2nd router with the better wifi is simply run as a layer2 switch and AP, to do this turn its DHCP server off and connect it to the first router via one of its lan ports, ie nothing connected to the 2nd routers WAN port, you are probably advised to alter the lan web admin port of the 2nd router to an address in the subnet of the 1st routers LAN subnet (but out of its DHCP pool) so that you can access it for easy admin.

Once that is done all the lan ports of both routers will be simply a layer2 switch config with the WiFi included so all ports can be used to access the network and internet at large. you then only need to deal with the DMZ of router 1.

Cyril

+1

This is by far the best way of doing it, with close to zero pain to set up.

It will leave you with no weirdness, and everything will work great.