Help with shield router

30 Jan 2009 12:12 AM

Bob W

Running a peer network.
Presently router 1 configured
lan 192.168.254.x
wan 192.168.1.x
isp gateway 192.168.1.254 (the dsl modem)
primary dns 192.168.1.254 (also the modem)

I want to add a second router, the first router to become the shield router.
the second router will connect to the modem, and a wireless access point
This will shield the original network from anyone accessing the WAP.
What settings do I want on router 2 (are the modem and wap on lan ports)?
On router 1 wan
IP router 2 or modem or just on that net 192.168.1.x
isp gateway router 1 or modem or other
primary dns modem or other
The modem is dynamic ip

30 Jan 2009 1:03 AM

Richard G. Harper

Your plan adds nothing but complexity and a new point of failure to your
network. A proper router will provide all the isolation you need from the
Internet. If you don't trust the firewall or isolation that your current
router provides, ditch it and get a new one.

Show quoteHide quote

"Bob W" <mmpdal***@sbcglobal.net> wrote in message
news:#R3s49mgJHA.3708@TK2MSFTNGP04.phx.gbl...
> Running a peer network.
> Presently router 1 configured
> lan 192.168.254.x
> wan 192.168.1.x
> isp gateway 192.168.1.254 (the dsl modem)
> primary dns 192.168.1.254 (also the modem)
>
> I want to add a second router, the first router to become the shield
> router.
> the second router will connect to the modem, and a wireless access point
> This will shield the original network from anyone accessing the WAP.
> What settings do I want on router 2 (are the modem and wap on lan ports)?
> On router 1 wan
> IP router 2 or modem or just on that net 192.168.1.x
> isp gateway router 1 or modem or other
> primary dns modem or other
> The modem is dynamic ip

30 Jan 2009 2:06 AM

Jack (MVP-Networking).

Hi
The principle is described on this page, Network Segregation -
http://www.ezlan.net/shield.html
However giving that you mentioned that your ISP gateway (DSL Modem) is
192.168.254 I am suspicious that your Modem is a Modem/Router, and you not
want system with triple Routing.
If your Modem is a Modem/Router you have to configure one Wireless Router to
functions as a Switch with an Access Point (like this,
http://www.ezlan.net/router_AP.html ) and then plug the output of the
Modem/Router and a second Router through its WAN port to the switch of the
Router that functions as an Access Point.
Jack (MS, MVP-Networking)

Show quoteHide quote

"Bob W" <mmpdal***@sbcglobal.net> wrote in message
news:%23R3s49mgJHA.3708@TK2MSFTNGP04.phx.gbl...
> Running a peer network.
> Presently router 1 configured
> lan 192.168.254.x
> wan 192.168.1.x
> isp gateway 192.168.1.254 (the dsl modem)
> primary dns 192.168.1.254 (also the modem)
>
> I want to add a second router, the first router to become the shield
> router.
> the second router will connect to the modem, and a wireless access point
> This will shield the original network from anyone accessing the WAP.
> What settings do I want on router 2 (are the modem and wap on lan ports)?
> On router 1 wan
> IP router 2 or modem or just on that net 192.168.1.x
> isp gateway router 1 or modem or other
> primary dns modem or other
> The modem is dynamic ip

30 Jan 2009 4:41 PM

Bob W

Thanks Jack
The 192.168.254.1 is the #1 Router
The Modem is at 192.168.1.254, modem only. Motorola unit.
I had this setup working previously with a prior modem.
I replaced the modem with a new one, same model, because the old one
died. In the process of proving to AT&T that our problem was the modem I
reset both routers, tried bridge mode, etc. Now I don't recall original
settings. Dumb, I know. So the current setting are with the wan port of
router 1 connected directly to the modem.
I am trying to set up using the ideas at exlan.net, but am missing
something on the setup, either at my networked computer tcp/ip or on one
or both of the routers.

Bob

Jack (MVP-Networking). wrote:
Show quoteHide quote

> Hi
> The principle is described on this page, Network Segregation -
> http://www.ezlan.net/shield.html
> However giving that you mentioned that your ISP gateway (DSL Modem) is
> 192.168.254 I am suspicious that your Modem is a Modem/Router, and you
> not want system with triple Routing.
> If your Modem is a Modem/Router you have to configure one Wireless
> Router to functions as a Switch with an Access Point (like this,
> http://www.ezlan.net/router_AP.html ) and then plug the output of the
> Modem/Router and a second Router through its WAN port to the switch of
> the Router that functions as an Access Point.
> Jack (MS, MVP-Networking)
>
> "Bob W" <mmpdal***@sbcglobal.net> wrote in message
> news:%23R3s49mgJHA.3708@TK2MSFTNGP04.phx.gbl...
>> Running a peer network.
>> Presently router 1 configured
>> lan 192.168.254.x
>> wan 192.168.1.x
>> isp gateway 192.168.1.254 (the dsl modem)
>> primary dns 192.168.1.254 (also the modem)
>>
>> I want to add a second router, the first router to become the shield
>> router.
>> the second router will connect to the modem, and a wireless access point
>> This will shield the original network from anyone accessing the WAP.
>> What settings do I want on router 2 (are the modem and wap on lan ports)?
>> On router 1 wan
>> IP router 2 or modem or just on that net 192.168.1.x
>> isp gateway router 1 or modem or other
>> primary dns modem or other
>> The modem is dynamic ip
>

1 Feb 2009 9:31 PM

Bob W

Finally up and running. Just a network plodder, for sure.
1. Computer gateway is the shield router
2. Shield router uses WAN gateway of the DSL modem
3. Router 2 connected to modem, WAN IP is the modem.

Bob W wrote:
Show quoteHide quote

> Thanks Jack
> The 192.168.254.1 is the #1 Router
> The Modem is at 192.168.1.254, modem only. Motorola unit.
> I had this setup working previously with a prior modem.
> I replaced the modem with a new one, same model, because the old one
> died. In the process of proving to AT&T that our problem was the modem I
> reset both routers, tried bridge mode, etc. Now I don't recall original
> settings. Dumb, I know. So the current setting are with the wan port of
> router 1 connected directly to the modem.
> I am trying to set up using the ideas at exlan.net, but am missing
> something on the setup, either at my networked computer tcp/ip or on one
> or both of the routers.
>
> Bob
>
> Jack (MVP-Networking). wrote:
>> Hi
>> The principle is described on this page, Network Segregation -
>> http://www.ezlan.net/shield.html
>> However giving that you mentioned that your ISP gateway (DSL Modem) is
>> 192.168.254 I am suspicious that your Modem is a Modem/Router, and you
>> not want system with triple Routing.
>> If your Modem is a Modem/Router you have to configure one Wireless
>> Router to functions as a Switch with an Access Point (like this,
>> http://www.ezlan.net/router_AP.html ) and then plug the output of the
>> Modem/Router and a second Router through its WAN port to the switch of
>> the Router that functions as an Access Point.
>> Jack (MS, MVP-Networking)
>>
>> "Bob W" <mmpdal***@sbcglobal.net> wrote in message
>> news:%23R3s49mgJHA.3708@TK2MSFTNGP04.phx.gbl...
>>> Running a peer network.
>>> Presently router 1 configured
>>> lan 192.168.254.x
>>> wan 192.168.1.x
>>> isp gateway 192.168.1.254 (the dsl modem)
>>> primary dns 192.168.1.254 (also the modem)
>>>
>>> I want to add a second router, the first router to become the shield
>>> router.
>>> the second router will connect to the modem, and a wireless access point
>>> This will shield the original network from anyone accessing the WAP.
>>> What settings do I want on router 2 (are the modem and wap on lan
>>> ports)?
>>> On router 1 wan
>>> IP router 2 or modem or just on that net 192.168.1.x
>>> isp gateway router 1 or modem or other
>>> primary dns modem or other
>>> The modem is dynamic ip
>>

30 Jan 2009 2:24 PM

smlunatick

On Jan 30, 12:12 am, Bob W <mmpdal***@sbcglobal.net> wrote:
Show quoteHide quote

> Running a peer network.
> Presently router 1 configured
> lan 192.168.254.x
> wan 192.168.1.x
> isp gateway 192.168.1.254 (the dsl modem)
> primary dns 192.168.1.254 (also the modem)
>
> I want to add a second router, the first router to become the shield router.
> the second router will connect to the modem, and a wireless access point
> This will shield the original network from anyone accessing the WAP.
> What settings do I want on router 2 (are the modem and wap on lan ports)?
> On router 1 wan
> IP router 2 or modem or just on that net 192.168.1.x
> isp gateway router 1 or modem or other
> primary dns modem or other
> The modem is dynamic ip

You need to replace the low-end broadband router with a higher quality
router which would create two different networks: one for the wireless
network and the other for the wired network. These type of units are
more expensive but will do what you want in one unit.

Look at Sonicwall TZ models.