Help with static routes

[andresmorago]

Hello to all

Im having some issues when setting up a static route.

I have a AC66U as my primary router (router #1). Local ip is 10.0.0.1
It receives WAN from a bridged cable modem
Its also connected to a remote VPN on PPP5 which serves the 5GHZ guest network (wl1.1).

So far, this works OK.

Today, i needed to locally connect another router (router #2) which has 192.168.240.1 IP.

I have enabled a static route on router #1:
Network: 192.168.240.0
Netmask: 255.255.255.0
Gateway: 10.0.0.1 (router #1)
Metric: 1
Interface: LAN

After enabling this, i can now ping router #2 from my PC connected (which is connected to router #1). But all TCP ports appear to be blocked from my computer to router #2.
Ping works but router#2 webserver is inaccessible

Could you please give me some help about it!?

thanks!!

 

[ColinTaylor]

Your configuration make no sense.

The gateway value should be the WAN address of router #2, 10.0.0.??? But if you only want the access the router you don't need a static route at all.

Pinging router #2 works because presumably you have "Respond Ping Request from WAN" set to yes (on router #2). You won't be able to access the router's webserver unless you set "Enable Web Access from WAN" to yes also.

 

[andresmorago]

Hello.
Thanks for the reply.

Router 2 has wan access enabled. I just tested separately. But, Actually I'm connecting the LAN side of router 2 with the LAN side of router 1.

Regarding the gateway parameter, you leave me somehow confused.
Both routers have different ip addresses.
Router 1 (the main which runs Merlin) has 10.0.0.1
Router 2 (the one I'm trying to connect to router 2) has 192.168.240.1 (LAN side)

Why shouldn't I create a static route then?

Thanks!

 

[ColinTaylor]

Router 2 has wan access enabled. I just tested separately. Actually I'm connecting the LAN side of router 2 with the LAN side of router 1.

Ah, OK.

As you're connecting LAN to LAN then all of the "WAN" settings I mentioned are irrelevant because you're not using the WAN interface.

Normally the static route would not be necessary because the traffic should only be moving across the switch and is not being routed. But *WRT routers are a bit weird so I'll have to think about this a bit more.

BTW Have you made sure that router #2's DHCP server has been disabled, otherwise it will conflict with router #1?

 

[andresmorago]

thanks

router 2 has dhcp disabled. router 1 is the only dchp server active.

actually, if i connect computer to router 2, i will get an ip from router 1. (remember that router 1 and 2 are connected on LAN sides)

thanks for your help. if you come up with something else, i will appreciate it!

 

[ColinTaylor]

Can I ask what you are trying to achieve here? With your current setup (LAN connected to LAN) you have 2 different subnet's connected directly together. You should really have a router in between different subnets, i.e. router #1 LAN connected to router #2 WAN. Any reason you're not doing that?

The alternative would be to keep the LAN to LAN setup that you have but make them part of the same subnet. i.e. change router #2 to be 10.0.0.2 (for example).

 

[andresmorago]

its a temporary setup to update the firmware of some industrial routers. i prefer not to change their ip but to connect them to my current network.
Thanks for all your help. i ended up doing something else by separating networks.

thanks again