BTRY B 529th FA BN
Lifer
I am curious if it's possible to run 2 routers from 1 cable modem with the second router from the modem fire-walled. I know about DMZ and what it does but I am curious how to do this.
Thanks
Thanks
You want a network you can expose, like a DMZ, and another that is better protected?
You can do that.
Install the primary router connected to the modem. connect a second router to that one as a client. Now the computers on that second router are double NAT'ed. They can get to the internet, but the primary network can't get to the secondary unless you forward ports from the first network to the second one.
You need to make sure the two LANs are on different class C networks.
For example, set the primary router LAN address as 10.0.0.1, and the second router as 10.0.1.1
Being "double NATed" does have its drawbacks. Some protocols don't make the jump across the two devices and you need to do a little more port work and tweaking.
For the consumer/hobbyist, it is an inexpensive way to run a guest wireless network that is walled off from the home LAN.
I'm not sure i understand why either network is considered "exposed" at this point and why you can't do this with class A ip's. Could you explain please?You want a network you can expose, like a DMZ, and another that is better protected?
You can do that.
Install the primary router connected to the modem. connect a second router to that one as a client. Now the computers on that second router are double NAT'ed. They can get to the internet, but the primary network can't get to the secondary unless you forward ports from the first network to the second one.
You need to make sure the two LANs are on different class C networks.
For example, set the primary router LAN address as 10.0.0.1, and the second router as 10.0.1.1
Being "double NATed" does have its drawbacks. Some protocols don't make the jump across the two devices and you need to do a little more port work and tweaking.
For the consumer/hobbyist, it is an inexpensive way to run a guest wireless network that is walled off from the home LAN.
I'm not sure i understand why either network is considered "exposed" at this point and why you can't do this with class A ip's. Could you explain please?
The first network is not "exposed", but the second one is isolated from the first by virtue of NAT. This allows you to give wireless to guests while keeping the home lan isolated from the guests.I'm not sure i understand why either network is considered "exposed" at this point and why you can't do this with class A ip's. Could you explain please?