Wireless router behind switch...

[a15995]

Hello!

Does anyone know how to setup a wireless router behind a switch?

I know this not adviseable but I need to have a computer exposed to the internet through the switch and the DMZ option in the router is not sufficient. Some application simply cannot communicate through the router even in the DM Zone (e.g. Steam, C&C Generals).

The problem is that if I set it up by connecting the switch to the internet through the WAN port and the router's WAN to a port on the switch's LAN data from the switch to the router will be blocked because this data goes through from the WAN side. E.g. LAN data from the exposed computer to computers behind the router will be blocked because the router sees this as intrusion attempts. I have tried to connect the router through the LAN ports but then the router does not connect to the internet.

The router is a D-Link 624+. I read somewhere that the router can be set up to work behind the switch while still capable of sorting out "bad" data.

Any ideas? The main idea is to have one computer exposed (hardware wise) and the others safe behind the firewall...

Internet (ADSL)
|
Switch
|___|
|___Exposed computer
|
Wireless router
|_________|
Laptops___Media Center

Thanks, :confused:
SL

[M/Q]

First what are the other devices vendor/model? You are confusing me with mention of a WAN port on a switch? To the best of my knowledge, all switches just have LAN ports.

The way you have it diagramed will work. the problem you are fighting is that the DSL device is most likely an active DHCP server and then so is your DI-624.

The problem seems to be a configuration one. But the I need to understand what that switch is. If it is a normal switch then the exposed computer will be getting the DHCP info from DSL modem. That part should work OK. Next the DI-624 can also be setup as a DHCP server for the clients downstream from it. But is has to have the WAN port or external interface set to receive its address and DHCP information automatically from the DSL modem. With that in place then every one should get to the Internet. The problem will be seeing the exposed computer from the ones downstream of the DI-624. First test will be to ping that computer and se what the response is. Then we can go from there.

[a15995]

Thanks for the answer.

The switch is a no name cheap device (read: non-intelligent/no routing) with five ports - 4 LAN ports and a dedicated port for the internet connection which I (maybe wrongfully) describe as WAN. The switch is directly connected to a Siemens ADSL modem (provided by the local telco).

I will try to ping the router from the the computer connected to the switch but my first attempts has been blocked by the router. This is logical because the exposed computer ís seen as a computer on the internet trying to get access. However, it must be possible to configure the exposed computer as a safe zone as seen from the router (via IP, MAC-filtering or whatever)...? Come to think of it the DI-624+ (router) has an option of remote management (by configuring the IP address) but this does not give full access to the ressources behind the router...

My first thought was to connect the router and switch via the LAN-ports but it seems that the DI-624+ cannot get an internet connection then. So my thought was to configure the router as a secondary device getting an internet connection via LAN and not through the traditionel WAN port. This does not work though.

I will try to configure the exposed computer as a safe zone as seen from the router unless there are other suggestions?

Thanks,
SL :confused:

[M/Q]

OK first of that is not a switch if it has a WAN port it is another router. So first you need to make sure the DSL and exposed computer are plugged into the 4 port network switch section of the router. Turn off the DHCP server and just use it as a switch as you suggest. I am confused a bit as to how the exposed computer is being seen by the Internet. What is its IP addr? I should say is its IP addr a public IP addr? As that is unusual in that a DSL modem normally uses private IP addrs on its internal interface.

Then the wireless router's WAN/Internet interface should be set to receive its IP addr automatically. That same router should have DHCP setup and the clients downstream of it get their information from it.

[Bobbyboy]

Hi guys. I am experiencing the same problem as described here and would appreciate any help.

Part 1) Here's my setup - I have 2 Windows XP Pro PC's connected to a SURECOM EP-805X-R 5 port NWay Mini Switch Hub. The last port on the switch is marked as an uplink port and I have my NETCOMM 1300B ADSL modem/router plugged into this. The ADSL modem is also my DHCP server and is distributing IP leases to both PC without issue. Everything working fine there.

Part 2) I recently purchased a HP IPAQ Pocket PC whilst overseas and my local computer parts supplier suggested a D-Link WIFI Access Point (DWL-G700AP) to complete the wifi magic ...which I bought also. I have connected the Access Point to the switch via a CAT5 cable (as instructed in manual and supplier) and cannot get a connection to the internet using my IPAQ. (in the ipaq, it appears as a DNS issue - ie, page not found type of msg)

I have noticed the following, which don't make a lot of sense to me - but I include here to help problem solve...


Neither of the PC's can ping the IP address of the Access Point (which is in the same range as both PC's - 192.168.3.x/255.255.255.0)
I have tried to create a DMZ in my ADSL modem/router supplying the IP address of my Access Point ...made no difference
I have set my Access Point to recieve it's IP from the DHCP server, but an IP lease wasn't issued to the Access Point(?) ..either way it didn't help
I would like my Access Point to perform as a DHCP server to all connections over wifi ...the access point appears to be issuing IP leases fine, only when my gateway IP (set in Access Point) is set to 0.0.0.0. [man, can it get any screwier?]

Here's a network diagram to help (http://bobbyclark.customer.netspace.net.au/images/Bobby_Network.jpg)

Any help would be greatly appreciated ...thanks in advance guys.

Cheers,
Bobby