Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


AllenG

441 posts

Ultimate Geek
+1 received by user: 1


#90692 27-Sep-2011 22:14
Send private message

Hi.

I have bought a secondhand Linksys WRT54G wireless router with DD-WRT mini V24 build 14929 firmware installed. I would like to use this for access control/filtering of wired and wireless clients to the internet connected via my existing ADSL Router.

My practical WAN knowledge is somewhat limited and I would like some advice please.

I have an existing ADSL Router address 192.168.1.1 Subnet Mask 255.255.255.0. Xnet DNS are 58.28.4.2, 58.28.6.2.
I have connected the WAN port of the WRT54G to the existing router and a PC to one of the LAN ports on the WRT54G for testing

I have configured the WRT54 Wan:
Static IP 192.168.1.57
Subnet 255.255.255.0
Gateway 192.168.1.1
Static DNS 1 58.28.4.2
Static DNS 2 58.28.6.2

Router IP
Local IP Address 192.168.2.1
Subnet Mask 255.255.255.0
Gateway 192.168.2.1                <------ Is this correct? Also tried 192.168.1.1
Local DNS 192.168.2.1               <-------Is this correct?"      "     "      "     "
DHCP Server Enabled

If I set the Operating Mode on the Advanced routing tab to "Gateway" I can get to the internet, however the access restrictions do not work.

If I set the Operating mode to "Router" as I believe it should be, I cannot get to the internet. I get DNS lookup failed or connection timeout.
Trying to ping the xnet DNS server 58.28.4.2 gives a destination net unreachable from 192.168.2.1

Ipconfig /all on the PC gives:

IP address 192.168.2.129
Subnet 255.255.255.0
Gateway 192.168.2.1
DNS 192.168.2.1
 
I am hoping I have missed something obvious to someone else. Do I need to make changes to the default VLAN settings to get the router firewall to filter WAN to LAN traffic?

I look forward to any advice.

Screen dumps of the DD-WRT below





 

Create new topic
sbiddle
30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #526581 28-Sep-2011 06:25
Send private message

You've instantly got a double NAT setup with this type of setup. You should be using the WRT54 as your primary router and configuring your modem as a bridge (if it supports it).




AllenG

441 posts

Ultimate Geek
+1 received by user: 1


  #526639 28-Sep-2011 10:08
Send private message

sbiddle: You've instantly got a double NAT setup with this type of setup. You should be using the WRT54 as your primary router and configuring your modem as a bridge (if it supports it).



Thanks. I'm trying to configure and test this for my sister without interfering with my existing network. Is there any way to use this as a switch on the same (or different) subnet as my existing network and use the access restrictions/filtering?

Regards Allen 

shrub
790 posts

Ultimate Geek
+1 received by user: 272

ID Verified

  #526669 28-Sep-2011 10:53
Send private message

what model is the modem?



AllenG

441 posts

Ultimate Geek
+1 received by user: 1


  #526672 28-Sep-2011 11:04
Send private message

shrub: what model is the modem?


The existing modem/router is a Linksys WAG54G2P2. The router with DD-WRT is Linksys WRT54G V6.
I am wanting to use the enhanced access control features etc on the WRT. 

With the DD-WRT set to "Router" mode it should be able to operate on my existing network. In Router mode NAT is disabled and it should just be acting as a router.

What I'm not sure of is whether the default settings are sufficient to route the LAN ports to the WAN port via the firewall or whether I need to add configuration items. 

Regards Allen. 

shrub
790 posts

Ultimate Geek
+1 received by user: 272

ID Verified

  #527082 29-Sep-2011 09:39
Send private message

na that modem can not do half bridge so you have a double NAT. DD-wrt will not be able to work the way you want it to.
Get a draytek 120 for the modem and do a full bridge. - very simple




Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.