Router to Router NAT issues

[Randall C]

Ran into an issue that I've spent a while trying to figure out. Not sure if this is a problem with asuswrt-merlin or just ASUS Routers.

Basic layout...

Main Network (192.168.1.0/24)
- with static route for 192.168.10.0/24 -> 192.168.1.10 (LAN port)

Sec Network (192.168.10.0/24)
- with static IP set to 192.168.1.10 (255.255.255.0)
- gateway set to 192.168.1.1
- dns set to 192.168.1.1
- NAT enabled for port forwarding - incoming port 22 - go to -> 192.168.10.5
- NAT enabled for port forwarding - incoming 1900, 32410, 32412, 32413, 32414 UDP
& 32469 TCP - go to -> 192.168.10.8

This setup works with pfSense (just pfSense VPN doesn't work with the two I use), was able to have any DLNA player on 192.168.1.0/24 (ie xbox one) see the DLNA server on my 192.168.10.0/24 network.

I set this all up on with using and extra ASUS RT-AC3200 router and everything works (22 forward & VPN), but I can't get any DLNA player on my 192.168.1.0/24 network to see my DLNA server on my 192.168.10.0/24 network.

Not sure why I'm having such a hard time with asus routers basically aliasing a 192.168.1.10 address to 192.168.10.8 address then and port forwarding.

When I went back and tested I could get to for example 192.168.1.10:1900 using pfSense.
I tried the same thing with asus router and it gets blocked. Even with port forwarding 1900 to 1900 and IP 192.168.10.8 configured.

 

[ColinTaylor]

I set this all up on with using and extra ASUS RT-AC3200 router and everything works (22 forward & VPN), but I can't get any DLNA player on my 192.168.1.0/24 network to see my DLNA server on my 192.168.10.0/24 network.

I can't say I'm surprised. DLNA works by using SSDP so it's not simply a case of forwarding a port. You need to setup multicast routing from the first network to the second.

It would be a lot easier if you setup the second router as an access point instead.

 

[Randall C]

I can't say I'm surprised. DLNA works by using SSDP so it's not simply a case of forwarding a port. You need to setup multicast routing from the first network to the second.

It would be a lot easier if you setup the second router as an access point instead.

Not sure why multicast routing didn't pop into my head, troubleshooting this. I'll take a look at that and see what I can figure out or see if this asus router supports that. I'm just surprised this all worked with pfSense. Normally it's the other way around. Also can't setup the second as an access point. Soon as I turn on the VPN Clients, even if I tell it not to. It tries to force everything through the VPN and cause's my xbox's to Double NAT.