Linksys WRT54G Access Restrictions

[Vich3]

I have Linksys WRT54G connected to a 2 wire modem/router with a cable into the ethernet ports on both. The2wire is providing DHCP.

My problem is the access restrictions dont work. I suspect it is the way I connected them.

When i connected the ethernet port to the wan port on the wrt54g pc's wohld not connect to the wrt54g.

i would like to keep wireless working on both devices.

What am missing?

Thanks for the help!

 

[Emerald]

when you connect via the WAN port have you tried changing the LAN IP of the Linksys to 192.168.5.1 with DHCP enabled?

 

[Vich3]

No, i was hoping to keep them all on the same network 192.168.1.##.
i guess i can change to that. If so, I am correct in remebering that they would be able to connect to a pc in the 192.168.1 network. It is the one with the printers shared.
Thanks for the help!

 

[Emerald]

why are you using two routers?

and what are you trying to control?

 

[Vich3]

Should have told more info at first, sorry.
i have a 2wire router at one end on the house. The other side was not getting a strong signal.
so i added the wrt54g first just as an access point.
Now the kids are staying up all night playing games so I implemented access contols on the wrt54g. However yhe dont seem to work. I figured it must be because i first had the two conected via ethernet ports. I am guessing the restrictions only work for traffic out the internet/wan port.
are my assumptions correct?
thanks

 

[Emerald]

yes the rules are to work with the WAN port only; however, if your connect the routers LAN to LAN, you should be able to setup the same rules on the 2wire router.

 

[Vich3]

Thanks.
The 2wire doesnt have the time of day restrictions.
so I guess I'll try the 2 different network approach

 

[Vich3]

Ok. I changed
1. the address of the WRT54G to 192.168.2.254
2. Turned on DHCP
3 Plugged the enternet cable coming out of one of the ethernet ports on the 2wire to the WAN port on the WRT54G.
4. Power cycled the WRT54G.

The PC connected to the WRT54G were assigned ip addresses in the 192.168.2. range. However I could not get out on the internet.
What did I miss?

I tried from one of the PC's to ping the 2Wire at 192.168.1.254, no luck.

Your help is appreciated very much.

 

[Emerald]

what is the IP of the 2wire router?

 

[Vich3]

192.168.1.254

 

[Emerald]

assign a static IP to the WAN side of the Linksys:

IP: 192.168.1.253
netmask: 255.255.255.0
Gateway: 192.168.1.254
DNS: 192.168.1.254

assign to the LAN side of the Linksys:

IP: 192.168.2.1

I don't think the Linksys likes .254 as a LAN IP


then first try to ping 192.168.2.1
second try to ping 192.168.1.253
finally ping 192.268.1.254

 

[Vich3]

Ok I think I'm getting some where thanks.
On the WRT54G I set:
Static IP as 192.168.1.253 with 255.255.255.0
Gateway as 192.168.1.254
Router IP 192.168.2.1
Enabled DHCP with starting Address of 192.168.2.100
Connected the 2Wire ethernet port to the WRT54G WAN port
power cycled

Renewed the ConfigIp on one of the PC's and access restrictions work great.

Now my problem. I thought the PC's on the 192.168.2. network could see devices on the 192.168.1 network (i.e. a network attached printer 192.168.1.50) or a PC that shares other printers.

Forgot to add that technically the WRT54g is connected to a netgear Ethernet switch then to the ethernet port to the 2WIre router. The other devices I am trying to connect to from the .2 network are also on the switch.

Am I missing something or will that not work. How can I use printers or share other devices between the 2 networks?

I REALLY appreciate your time and help!!!!!!

 

[Emerald]

what IP does the printer have?

 

[Vich3]

It is on the network on the 2wire 192.168.1.50

 

[Emerald]

can you ping that IP from the other network?

 

[Vich3]

Emerald, I appreciate your constant help.
I now have a second WRT54G I can experiment with(it was at the office)
Anyway. I changed the settings as you advised.
When I am on a PC on the WRT54G with address 192.168.2.100 i can
ping 192.168.2.1 successfully
ping 192.168.1.253 sucessfully
Ping 192.168.1.254 unsucessful
ping 192.168.1.50 unsuccessful

When I am on a PC with address of 192.168.1.66 I can ping 192.168.1.50 successfully.

Just for clarification. a PC with an address of 192.168.2.100 should be able to ping(access) 192.168.1.50 correct? (it is a printer)

I am sure I am just over looking something.

Thanks for the continued help

 

[old_IT_man]

don;

you have to get the basics,192.168.2.100 should not be able to ping 192.168.1.50 because they are on different subnets.Ping is icmp echo on layer 2 connectivity.This will only be possible if routing occurs and is layer 3.Look into settings for linksys Router ,introduce RIP and depending on whether your two wire supports it ,you can add a route from your linksys to it.However you are seperating a network for Firewall protection and restriction and it seems you want to rejoin them again.Finally ,what is stopping you from installing the printer in the second network .2.X and share it ,instead of leaving it in one that is not accessible from two.

 

[Vich3]

Old_IT_Man
Thanks, I am trying to learn. The funny thing is I used to run an IT shop with 3000 users and 150 developers and network professional. I just never got to that level of detail.

Here is my goal. May be this will help and should be started as a new thread/topic.
I ahave a 3800 HGV-B Uverse service providing TV's, and Phone Lines and Internet.

At first reception was terrible at the other end of the house. So I had an WRT54G i placed in a room at the other end of the house. connected them ENet to ENet port by wire. Live was good.

Well, the kids started abusing access privelages so I wanted to implement the access control feature. It was explained to me that the only way to do that was connect on the Enet port on t he 3800 to the WAN/Internet port of the WRT54G.
Then I could implement shut down rules for the kids MAC id's. All ove my other computers, IPADS, Phones,Nooks, Home Computer w/printers are at the end of the house with the 3800 RG. So I was trying to keep them on one network.

It was also explained to me that if I set up the WRT54G as a static IP 192.168.2.1 and enable DHCP the users on the WRT54 would be good AND that the could connect to any device on the main network 192.168.1.### network. But that never happened.

I have since purchased an E4200 thinking it would give better range but have stuggled setting up and not really seeing a range improvement. The range I don't thin is unreasonable. my house is not huge, frame house the 3800 is in my office which is next to the foyer, dining room, small hall, then the kids bedrooms probably 60 ft tops.

If I could get the E4200 to work in the office I would for fgo the router(as an access point) in the other end of the house if the range/reception was good.

Both PC's at the other end have N capability.

I also like the Idea of the 4200 in the office so I can connect my laptop to a port and our windows 3000 server to a second port and have 450 gb service between the two.

I appreciate the help. I am reluctant to contact ATT for help or LinkSys they tend to operate indepently and muck everything up. I may be wrong though. And may have to make the call. I am sure someone has done this before.

Sorry for the long winded message but I think I explained everything in detail.