How to manage bridge on WAN side of LAN router?

[chicow]

Hi - I have a LAN (192.168.10.XX) behind a Linksys router running Tomato firmware. I use an old Tranzeo transparent WIFI bridge to connect to my ISP:


To configure and manage the Tranzeo bridge I've been connecting my PC to the Tranzeo's ethernet port (first giving my PC a fixed IP address in the 192.168.10.xx range). That works but it's a hassle.

Is there any way I can access the interface of the Tranzeo bridge from the LAN or WAN sides? I don't mind changing the Tranzeo IP to a different domain and doing some static routes in the Tomato router, but I don't know how that would work. Also, the Tomato runs a PPTP VPN server so I can connect to the LAN from the outside, so from the WAN I could access the bridge even if it only has LAN-side access. It's just a hassle to fiddle with cables to access the bridge interface, which is located on the WAN side of the router (and which can't be assigned a static or dynamic IP address from the ISP).

Advice? Thanks...
*

 

[Elixer]

You could write a custom IPTABLE rule to do that...but, access control would be a interesting challenge, at least on the WAN side.

 

[chicow]

You could write a custom IPTABLE rule to do that...but, access control would be a interesting challenge, at least on the WAN side.

I figured it would take something like that. How would I do that...or what might an example look like? LAN side access would be sufficient...

 

[drebo]

Set the tranzeo's ip address to something other than your LAN subnet and your NAT router will NAT you to be able to hit the Tranzeo's management interface.

 

[chicow]

Set the tranzeo's ip address to something other than your LAN subnet and your NAT router will NAT you to be able to hit the Tranzeo's management interface.

Do you mean a non-routing (private) address (such as 192.168... or 10.0....)? Then it won't get through to my router's WAN interface...unless I do a custom IPTABLE rule (?) as suggested previously, which I don't know how to do and am requesting help for...

Or do you mean a non-private routing address? How would I do that and not risk a conflict with somebody who's been assigned that address?

Sorry to be so ignorant about this...