Let 2 routers see networks behind each other (Primary can see Secondary but not vice versa)

[daveycoleman]

Hi all,

I have a Primary Router (ADSL) with a Cisco RV130W connected to it. the connection is from the LAN port on primary to WAN port on the VPN Router.

machines behind the VPN Router can ping and Remote Desktop to machines on the Primary router. BUT not vice versa.

I set the "Routing rules" to be a "Router" on the VPN router but then i lose internet access. If i set it back to be a "gateway" the internet is working again. What would be the Routing rules i need to set here? Do i need to set any Firewall rules?

I have Port forwarding set from the Primary Router to the VPN Router for VPN Access and a static rule as well.

So basically, i want to be able to ping from machines on the primary router to machines behind the VPN Router internally.

any help would be appreciated for a networking noob.

 

[bill001g]

That is because the devices you have are not really "routers" . I do not know why they even have static routes in them since they have little to no use. The devices you are better called gateways. They take a single lan subnet and NAT it to a single WAN IP.

All traffic on your VPN router will appear to come from the WAN ip address it obtained from the primary router when it is in gateway mode. This is your standard NAT problem where external machines must send all traffic to the common address and then you have the port forwarding issues. All the lan ips do not really exist from the main routers viewpoint just like your private ip are not viable on the internet.

Now it might be possible to do this with actual routers. Some consumer routers have some feature but most do not completely support this. To work BOTH routers must support routing/multiple subnets. One of the key function that is missing most the time is the router that is internet facing must be able to NAT all the different ip blocks to the same wan ip. The vast majority only support the single lan subnet.

 

[daveycoleman]

we simply placed all the machines /devices on our network on the VPN router (via a switch). this means all machines internally see each other now.

No machine is on the network of the Primary router besides WIFI devices which only have internet access.