Re: Routing through two DD-WRT's

"aegres" <aegres.30ioml@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:aegres.30ioml@xxxxxxxxxxxxxxxxxxxxxxxxxxx

Hi All,

I am stuck and have been trying for a while. Perhaps I am missing
something simple.

I have 3 subnets (on 3 seperate sites 1km+ appart):

192.168.110.0/24
192.168.111.0/24
192.168.112.0/24

They are connected by 4 DD-WRT v23SP2 on Linksys WRT54GL boxes.

Two of the DD-WRT's are setup as routes and are located on the central
site .111. The wireless interfaces on these two talk to the other two
DD's that are accesspoints on the other two sites providing wireless
access to .110 and .112.

I can happily route packets from hosts on .111 to .110 and .112, but I
can't route packets from .110 to .112 and vice versa - which is what i
really want to achieve.

I have spent quite some time trying to analyse what is happening
(thinking the routing table may be incorrect). I have stripped all
rules from IP tables (ip_forwarding is on). I have added accounting
rules to the routers to see if packets are being forwarded.

The results:
if i try to ping a host on .110 from .112 the .111/.112 router's
accounting rules (iptables) counters increment but the .111/.110
router's accounting rules do not... I can ping the same .110 address
from the .111/.112 router though... so the route table on that router
seems to be correctly pointing at the .110 subnet. It just seems that
anything coming from the .112 doesn't come out the other side of the
router, even though the counters are incrementing in its iptables.

sounds like the 2 routers do not have routes to the subnet on each other
across the .111 subnet.

if the boxes support a routing protocol, then turn it on.
otherwise configure a static route on each with next hop on the other
router, for the remote subnet.

Or - if they are set up for NAT rather than classic IP routing, then they
are working as configured, and not letting any connections in from the "WAN"
interface.

Is this a bug? Does it have something to do with the fact that one of
the interface is br0? I assume that br0 is a bridge interface to get
all four ethernet ports working - maybe the bridging module code doesn't
like this sort of stuff...

Any thoughts or help would be greatly appreciated.

Thanks,
James.


------------------------------------------------------------------------
View this thread: http://www.wirelessforums.org/showthread.php?t=32896
http://www.wirelessforums.org

--
Regards

stephen_hope@xxxxxxxxxxxx - replace xyz with ntl


.

Relevant Pages

  • Re: [fw-wiz] Is it possible to control access between clients on same LAN with a firewall?
    ... same subnet that are protected by the same firewall. ... In my case, the firewall is a home router running DD-WRT, so ... Add a static route to the netbook if you need ... Now add a static interface route to the router's ...
    (Firewall-Wizards)
  • Re: Multiple subnet routing issue from vpn
    ... Then I could disable rras and route that way, ... RRAS or anything else dealing with more than one NIC. ... router for the LAN if required. ... subnet to the other site is doable. ...
    (microsoft.public.windows.server.networking)
  • Re: Multiple subnet routing issue from vpn
    ... If you want a single NIC, which is recommended, go through the motions and ignore the single NIC errors and don't opt for RRAS or anything else dealing with more than one NIC. ... All non-SBS servers can handle routing better, but honestly a Windows server to be used for a router is way overkill in the price and hardware department. ... network and the LAN it is attached to, it is possible to route it through to the other site, but it won't be easy. ... subnet to the other site is doable. ...
    (microsoft.public.windows.server.networking)
  • Re: Win2k3 LAN Routing Questions
    ... all you need to do is enable IP routing on the router. ... If there was no other network involved, you simply make the router the ... pretty straight forward as long as you can add a route to your NAT router. ... This is important because this router needs to know where your new subnet is ...
    (microsoft.public.windows.server.networking)
  • Re: please advise - problem with routing
    ... and a network is a very important distinction in IP address configuration. ... you show that the 192.168.1.0/24 subnet has two devices ... ROUTE PRINT on NT4 ... ROUTE PRINT on router ...
    (microsoft.public.windows.server.networking)