Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Suzukithunder]

Hi Guys,

Been fighting with this for an week and is about to give in. I have the 323 and I want it to back up external FTP sites (which it can). My router from my ISP is sending everything to the DIR 635 (Dlink router) which is my fortress (Cant get rid of the ISP router). When i fysically place the NAS just behind ISP Router, it can backup the FTP sites (using a switch). When I place the NAS behind the DIR 635, the test goes ok, but it won't donload anything. It just aborts.

I've even tried to put the NAS in the DMZ zone, but that did not help. Do any of you clever brains have an idea ??

I've also opened for the the ports recommended to open. Al firmware are the newest.

Please help the frustrated Dane about to turn alcoholic:D

Niels

[fordem]

Wait a minute - you have TWO routers daisy chained?

That creates what we call "double NAT" and will give you no ends of grief when you try to port forward.

Your options in order of preference are ...

1 - Get rid of one router (doesn't matter which one)
2 - Assuming the first router is a modem/router - put it in "bridged mode", so that it acts as a modem or bridge only.
3 - Configure the first router so the second router is in it's DMZ.

[gunrunnerjohn]

Another option is to configure the secondary router as a WAP and eliminate it's NAT layer.

[JocastaWindu]

Amazing. I have the exact same problem. Switched ISP and got a new router/modem from them. The new router doesn't pick up the DNS-323 when I plug it in so I thought I'd keep my "old" LAN on the DIR 635. And I can't bridge the new router (Thomson, Telia for you Swedes) since I use TV and PHONE over the "internet".

It really worked well until I tried to get FTP working, so I have the same problem. Just thought it was to direct port 21 to the old router and then do the same from that one to the DNS, but no. Will try to eliminate the NAT layer, don't really know how I do that but I trust Google is my friend, then and let you know.

BTW, putting the second router in DMZ, is that such a good idea, security wise?

Feels like i'm way out of what should be posted in this forum, as for the subject, but we're one big happy family, right?

[fordem]

BTW, putting the second router in DMZ, is that such a good idea, security wise?

Putting the second router in the DMZ of the first router is no more or less dangerous than connecting it in directly to the internet in place of the first router, which is what you would be doing if you could bridge the first modem/router.

[gunrunnerjohn]

My solution for that particular issue is indeed to configure the primary router to put the secondary router in the DMZ, then you can do any/all port forwarding in the secondary router.

[JocastaWindu]

Ok, here's what I did, which was not what I'd planned from the beginning.

Looking around in the DIR 635 last night I discovered the PPTP connection method. And since I have and pay for a VPN connection I though it'd be a good idea to try it. Tracing the host name from my VPN provider I entered it and the credentials and as it looks now I have a VPN tunnel from my second router. And this was more than I'd expected since this means that the connection from the DNS also is secured, which I've really missed... 

So, doing this gave me the opportunity to use the Dynamic DNS from the second router and it seems like tunnelling the ftp-connection means that I don't have to involve my primary router/modem. So the connection is established directly to the second router which then forwards it to the DNS.

So, not at all what I'd planned, but it works for now, and no decrease in speed. 

Btw, the Thomson router does not identify the DIR 635 as a unit that can be put in the DMZ. It says that it can't find any compatible units to put there...

Thanks for your help!

/ j

[gunrunnerjohn]

You simply configure the DMZ on the primary router for a fixed address, then configure the WAN section of the secondary router for dynamic addressing to that static IP address.  The primary router doesn't have to recognize anything.

[Suzukithunder]

Hi Guys,

None of all your ideas are good. I've got an expert as my friend and he finally got time to look at it. If you want it to work wothout disabling a lot of NAT or put it in DMZ, then just make room in your first router (make it assign from lets say 10.0.04, of you want to static devices in between). When you have done this, then give your DIR 635 a static ip and give it, lets say 10.0.0.2. You should use a google DNS or likewise as DNS 1 or 2. Now go to your DNS. Set it up as static too. Give it, lets 10.0.0.3 and again,  use google DNS or likewise as DNS 1 and 2. DO NOT USE DIR 635 as DNS 1 OR 2. This will f*** it up.

Now everything will be working. If you want it more easy, then reserve the static IP address for the DNS in the DIR.

Good evening everybody.

[gunrunnerjohn]

Well, that's pretty presumptuous, since I know the idea that both fordem and I advanced works just fine, I've done it here.  It's also pretty easy to do, and solves any port forwarding for any and all applications.

[Buhric]

an other solution would be,
in router 1, redirect the port to the IP of the 2nd router
and on the 2nd router, redirect that same port to the IP of the DNS...

[gunrunnerjohn]

an other solution would be,
in router 1, redirect the port to the IP of the 2nd router
and on the 2nd router, redirect that same port to the IP of the DNS...

Well, that works for one port, but it's pretty tedious to do that for a number of ports.  Since the DMZ does it for all ports, it seems to be the preferred solution for a vast majority of folks.