port 5060, was Re: [OT] router ports & DMZ

[Karl Auer]

On Tue, 2015-02-17 at 17:29 +0000, thufir wrote:
> The only way for me to connect to the internet is with wi-fi.  There are 
> three levels of NAT:

OK, the clue was the doco for that Iomega adapter. It's not a router in
the usual sense. It provides a bridge between an ethernet-only device
and a wifi network. It has a static IP address 192.168.1.252. Now I
understand why you wanted your Netgear to obtain an address via DHCP. 'm
guessing that you want one or more devices (tleilax and doge) to connect
vire WIRE to the Netgear.

If so, try this (no promises):
- configure the Iomega to connect to your wifi
   - you've probably already done this
- on the Netgear
   - set the LAN subnet to 192.168.1.0/24
   - set the LAN IP to 192.168.1.253
   - set the DHCP range to 192.168.254-254
- on the upstream router
   - set the LAN subnet to 192.168.1.0/24
   - set the LAN IP to 192.168.1.1
   - set the DHCP range to 192.168.2-251
- connect the Netgear to the Iomega
   - LAN port to LAN port!

The above will give you management access to the Netgear and the Iomega,
and wired access to the Internet via the spare Netgear LAN ports. You
can have wifi access to the Internet via the upstream router, or by
associating to the Netgear. All wifi and LAN-port connected devices will
be in the same subnet, 192.168.1.0/24. You will have only a single level
of NAT, on the outside interface of the upstream router. All devices,
however connected, can get DHCP addresses from the upstream router (or
from the Netgear, but that doesn't matter as the ranges don't overlap).
You will be able to to make any kind of connection you like within your
LAN (unless you set up firewall rules yourself, or there are default
firewall rules in the Netgear, which is highly unlikely). You should
avoid using 192.168.1.252 as the IP for any of your devices, as this
appears to be the hardcoded management address of the Iomega.

If there are lots of wifi networks around you, set the Netgear wifi band
to the same as the upstream router's wifi. Otherwise set it to a band as
far away from the upstream router's wifi as possible. If you are not
using the Netgear's wifi (i.e., if tleilax and doge are wired-only
devices), disable it so it doesn't interfere with the upstream router's
wifi.

Regards, K.


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://twitter.com/kauer389

GPG fingerprint: 3C41 82BE A9E7 99A1 B931 5AE7 7638 0147 2C3C 2AC4
Old fingerprint: EC67 61E2 C2F6 EB55 884B E129 072B 0AF0 72AA 9882