Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[zero7404]

i'm trying to configure port forwarding for FTP but in my case it isn't as simple as i assumed ... i have an actiontec router/modem that serves as incoming internet from my provider (FIOS), which i connected to my own router (dir-825). i mainly configure my network on the dlink and leave the actiontec alone.

i opened a port on the dir-825, port 21, and assigned it the ip address of my NAS drive (192.168.0.100), enabled and saved the rule.

i then went into the actiontec router and enabled port forwarding (FTP/port 21), and i chose the IP address that was assigned to the dlink router by the actiontec router (192.168.1.2), enabled and saved.

i tried to test this connection using filezilla client on one of my machines (this would be at home, within the network). it established a connection ok, but could not provide me with a directory list of the remote device.

in my case i want to be able to ftp to the NAS only, not any other device on the network. i also tried changing the target ip in the actiontec router to the NAS IP, but that failed to connect.

can anyone help with this ? there must be some setting on either router that is prohibiting me from viewing the contents of the NAS. i created a user on the NAS with password.... in filezilla am using those credentials along with my internet ip to test the FTP connection.

[FurryNutz]

I'll try and help you out on FIOS however I don't have any experiences with it:
What HW version is your router?
What FW version is currently loaded?

If this modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems. Can you bridge the Actiontec by chance?

Some other things to try:
Ensure DNS IP addresses are being filled in under Setup/Internet/Manual? You can find these under Status/Device Info/Wan section.
Turn off ALL QoS (DIR only) GameFuel (DGL only and if ON.) options.
Turn off Advanced DNS Services if you have this option under Setup/Internet/Manual.
Turn on DNS Relay under Setup/Networking.
Setup DHCP reserved IP addresses for all devices on the router.
Ensure devices are set to auto obtain an IP address.
Set Firewall settings to Endpoint Independent for TCP and UDP.

[Hard Harry]

Your dealing with a Double NAT. Your best bet is either put the Verizon router in Bridge mode (which may not be possible if you have FIOS cable) or connect the NAS drive to the Actiontec router. You could even set the Verizon router with a separate SSID on a different band when you want computers on your LAN to access the drive. Or you could file share it off the PC that is going to be on the most. In this set up, you just have to port forward 21 to the IP address of the NAS and set a DHCP reservation for it.

[zero7404]

i read an iomega whitepaper online that described how to configure a double-NAT setup, i think it involved allowing ports 443 as well as 21 on both devices.

i also saw something about setting the same subnet mask for the dlink, and allowing the fios router to assign ip addresses ...

in the fios router it has my dlink listed as a bridge. the fios router model is MI424WR-GEN2. would it not be possible to just set up the fios router as a modem and let me administer everything via my dlink ?

[FurryNutz]

I would call the ISP and ask if the ISP Modem can be bridged and made into a modem only device. If not, does the modem/router have a DMZ? You could try putting the 825 address it gets from the modem into the modems DMZ. This should allow the 825 to get everything and by pass the 1st NAT issue.

Who is your ISP provider if we may ask? Verizon?

[zero7404]

in the fios router i set the dlink router to be in the DMZ (the fios router assigns the dlink 192.168.1.2). when i also set port forward in the fios router i am setting it for the dlink ip. can i input the NAS ip instead ? i am not sure how ip addresses are handled here because the fios router is 192.168.1.xxx while the dlink is 192.168.0.xxx

in the fios router it lists my dlink as a bridge device. i shot an email over to verizon to see if they know how i can set it as a bridge device. one question, setting up a DMZ doesn't necessarily change the ip addressing that the router has already done ? can i go into the fios router and set the ip address of the dlink to 192.168.0.1 ?

[FurryNutz]

I believe that if you set up the 825 in DMZ correctly, that now you'll need to port forward the needed ports to get to the NAS using the IP address string on the 825, you shouldn't need to do anything in the ISP modem. Should all be done now on the 825. However there still could be a possible double NAT issue here.

The 825 is getting the IP address from the modems pool for the WAN side 192.168.1.# and should be different from the 825's IP address pool 192.168.0.#. You could probably assign a reserved Ip address from the ISP modem for the 825 and make the last octet number anything you wish, however the 3rd octet number should differ from the ISP modem.

One thing you can try while yoru waiting, connect the NAS or other PCs to the ISP modem and try FTPg.
I bet you'll get connected. 

Keep us posted on what the ISP says.

[zero7404]

i spoke with verizon and they told me the request to bridge the fios router is common but it cannot be done with the device they supply. the actiontec router is also serving my set top boxes (TV), so the only semi-alternative would be to connect the dlink directly to the box that is set up outside of the house (incoming service), doing that I lose some capabilities of my set top boxes.

so i tried to connect the NAS to the actiontec router and an IP was assigned to it (192.168.1.3), peculiar though that i could not find a way to change this IP address. i was able to log into the NAS via this IP, but when i tried to map it in windows it was not visible in the list of network devices.

i guess then the other alternative is to bridge the dlink router, use it as a switch and bypass it's firewall ? or will this work if i simply change the IP address of the NAS to one that is similar to the fios router (192.168.1.x) ?

I tried DMZ on the fios router, as well as opening port 21, then i also opened port 21 on the dlink ... when i allow FTP in the fios router to the IP address of my dlink (192.168.1.2), filezilla client works all the way up to the point where a connection is established, but cannot display the drive's directory.

[FurryNutz]

Im wondering if maybe using an external network switch and a DAP would be more of what you need. If the main host ISP Modem isn't flexible enough to accommodate external routers. I would recommend instead of using a router, why not a switch, say 8-16 port and then tie on a DAP for wireless AP?

The main problem your going to have is the double NAT issue with both routers trying to manage the traffic between your devices and getting correct connections between everything and the outside world. Your ISP modem is going to impact this. So since it has a router built in and you are in need of this to service your TVs and such, I honestly thing that swapping the 825 for a switch would suit you better.

[zero7404]

i read some more online and stumbled on an article that describes how to do this, the actiontec router has a wan port, can be connected by ethernet directly to the optical network terminal outside of the house:

http://www.dslreports.com/faq/15990

running one cat5e cable is pretty easy for my configuration, but i want to call verizon again and ask additional questions about this.

since i am behind 2 firewalls now, i've had no issues with any intrusions or problems so far with the internet. but if i ditch one of the routers, i am not sure how easy it is these days for someone to find a way to sneak into my LAN from the internet ...

i prefer using the dlink because firmware updates are more frequent and i know the router interface better than the actiontec. the actiontec router really hasn't had any firmware updates since it was installed over a year ago, so that's a bit worrisome.

[FurryNutz]

You'll be fine with one firewall man. Either one. FW updates wont necessarily help the routers block or protect. That all handled well on both sides and realistically, thinking about hackers, there mainly after big companies or some smaller ones now that have critical customer data. Going after mom and pop with movies on servers is probably not a high priority for them. However anything is still possible. Keep us posted on what you find out. Hope there is a good solution out there for you.

[Hard Harry]

Here is a question. If the ActionTec can be connected directly to the Optical Network Terminal (ONT) outside, why can't another router? Does it use some proprietary protocol? Then just run the coaxial to the Actiontec for the MoCA network. The only downside of that is you wouldn't be able to offer the Computer to TV feature they offer in some areas. But it would make port forwarding and NAT a breeeze. Have you asked them?

[zero7404]

i would just have to release the Actiontec IP before undergoing the ethernet cable connection switchup, but i still have to ask verizon to enable data over ethernet for my ONT. they also have to come out and open the box for me because it requires a special key.

in the long run, i really don't need FTP that badly for the NAS. i wanted to set it up so that friends/family can have access to the media i put on it. but they don't mind being handed a usb hdd so they can watch/listen to what they want. i would have opted for a USB drive to connect to my router instead, but i was on the 655 and that router didn't support usb drives over the network.

it serves it's purpose for now, and if i had a real need to FTP to it, i would go and connect it directly to the fios router and configure a port forward on the router to accomplish what i need.

thanks for all the input. learned a lot from this and going forward if i switch providers or rearrange my services i'll keep it in mind so that i can put my own equipment in charge rather than remain limited by the ISP's.

[FurryNutz]

Keep us posted on how it goes.