Router / Switch settings for FTP server set-up

[wolfhound]

In my home network I am running a router for the downstairs (connected to the ISP) and a router (acting as a switch) for the upstairs. The downstairs router is a D-Link 624 and the upstairs is a Linksys WRT54G.

I may have gotten myself confused when I set up the port forwarding. Currently, the downstairs has port 80 & 21 forwarded to the IP address of the server. The Linksys, which the server is connected to, has port 21 forwarded.

Does this sound right?

Thanks.

[mbossman2]

unless you are coming thru the WAN port on the 2nd router (acting as a switch) port forwarding won't be active as the switched ports on the router are not "routable" ports so the routing engine doesn't come into play (and hence no port forwarding) and if you are coming thru the WAN port you will have some configuration issues to deal with.

Is there any particular reason that your server isn't close to the (i think) D-Link?

[wolfhound]

Thanks for the response. The D-Link is contained within a connection box in my closet. So, space is the biggest issue.

The WAN port on the upstairs router is connected to the downstairs router.

Yes, this configuration is not the easiest to deal with.

[mbossman2]

what I would do here is either:

Buy a switch and put it where the 2nd (Linksys) router is (that'll make life easier)
or
Disable DHCP on the Linksys, reconnect the Linksys router to the D-Link router using one of the switch ports on the Linksys (so everybody is/stays on the same LAN) and then either port forward 80 and 21 or just port 21 to the server (no need to forward 2 ports and then strip off 1, that's just an added, and from what I can tell, unecessary step)

[wolfhound]

I forgot to mention that the Linksys does have DHCP turned off. It is wireless and I really like having the freedom. All machines in the house are on the same network and/or workgroup.

So do I make the forwarding settings only on the D-Link?

Thanks.

[mbossman2]

keep the linksys routing functions out of the mix and treat it like a switch with wireless attached and then all you need to do is set the port forwarding on the D-Link and off you go.

In the future, for most small networks, 1 router per network please, otherwise you introduce significant troubleshooting and configuration problems.

[wolfhound]

mbossman2 - I understand about 1 router per network. I am behind the eight ball on that one though due to my ISP (Verizon Fios). I have to use their router with their firmware. It does not have enough ports to conntect to the whole house so I tried to work with what I have.

I will verify my settings tonight and check back in.

[wolfhound]

Setting are what we discussed.

Here is the error I am getting.

Try XX.XXX.XXX.XX ... conncted
Conected to XX.XXX.XXX.XX (XX.XXX.XXX.XX) port 21
FTP response reading failed
Closing connection #0

I am researching this error. It appears that I at least connect.

Thanks.

[wolfhound]

I ran a scan with Shields Up and it appears that all my ports are in stealth mode.

How do I undo this on a DI-624??

Thanks.

[gunrunnerjohn]

Make the second router a switch. I also have Verizon FiOS, and this works fine for my second wireless router to cover the back of the house.

Connecting two SOHO broadband routers together.

Configure the IP address of the secondary router to be in the same subnet as the primary router, but out of the range of the DHCP server in the primary router. For instance DHCP server addresses 192.168.0.2 through 192.168.0.100, I'd assign the secondary router 192.168.0.254 as it's IP address.

Disable the DHCP server in the secondary router.

Setup the wireless section just the way you would if it was the primary router.

Connect from the primary router's LAN port to one of the LAN ports on the secondary router. If there is no uplink port and neither of the routers have auto-sensing ports, use a cross-over cable. Leave the WAN port unconnected!

[wolfhound]

Originally Posted by gunrunnerjohn Make the second router a switch. I also have Verizon FiOS, and this works fine for my second wireless router to cover the back of the house. Connecting two SOHO broadband routers together. Configure the IP address of the secondary router to be in the same subnet as the primary router, but out of the range of the DHCP server in the primary router. For instance DHCP server addresses 192.168.0.2 through 192.168.0.100, I'd assign the secondary router 192.168.0.254 as it's IP address. Disable the DHCP server in the secondary router. Setup the wireless section just the way you would if it was the primary router. Connect from the primary router's LAN port to one of the LAN ports on the secondary router. If there is no uplink port and neither of the routers have auto-sensing ports, use a cross-over cable. Leave the WAN port unconnected!

Thanks. I think this may be getting clearer now. If I am understanding this correctly have one router 192.168.1.1 and the other 192.168.1.2 keeps it within the range of the DHCP server on the primary router. So, changing the second router to 192.168.1.254 should work?

Currently the network runs great as is. Multiple machines working just fine. Getting my FTP server to connect to the outside world is what is eating my lunch.

I ran a port scan locally and it did not say that Port 21 was open even though it shows to be open within the D-Link set-up menu.

[gunrunnerjohn]

Yep, you have it.

[wolfhound]

Does that also change the stealth port settings that I see with a Sheilds Up scan?

I am thinking not.

[wolfhound]

Doesn't seem to be working. Still getting the FTP response reading failed.


Maybe I should post a picture or slide of my set-up.

Gunrunner, since we have the same ISP I would like to PM you with a couple of questions if I may.

Thanks.

[wolfhound]

I have posted a network map in hopes that it helps explain my set-up better.

[gunrunnerjohn]

Are you following the instructions to connect the secondary router to the primary router using one of the LAN/Network ports, NOT the WAN/Internet port?

[wolfhound]

Yes, the second router is connected via a LAN port. It is a Linksys WRT54G. The only port that is not populated is the one labeled Internet.

[wolfhound]

This week I am going to restructure my network and remove the D-Link router as I have feeling that it is a major part of my problems. Then I am going to move the FTP server downstairs thereby connecting to the outside through only one router, a Linksys.

[glc]

That will make it a LOT simpler.