Need Help to Setup Port Forwarding through Double Router Setup (2 subnets)

[edwardsutrisno]

Dear all,

I'm trying to setup port forwarding on my ZTE-F609 Modem and my TP-LINK (Archer D9) but i can't seem to set it up properly. The portforwarding is to allow remote access to my NVR.

Here is my setup:
ZTE-F609 (LAN)------> TPLINK D9 (LAN)------> SWITCH----->PC + NVR

ZTE-F609 (LAN: 192.168.2.1, DHCP ON 192.168.2.100 - 253)
http://s32.postimg.org/8wl3reu91/ZTE_DHCP.jpg

TPLINK D9 (WAN: 192.168.2.2, LAN: 192.168.1.1, DHCP ON 192.168.1.100 - 200)
http://s32.postimg.org/ws26p8gpx/TPLINKD9_WAN.jpg
http://s32.postimg.org/a779palr9/TPLINKD9_LAN.jpg

PC (LAN: 192.168.1.200)
NVR (LAN: 192.168.1.10)

PORT FORWARDING ZTEF609:
http://s32.postimg.org/gc7eznmp1/PORTFORWARD_ZTE.jpg

PORT FORWARDING TPLINKD9:
http://s32.postimg.org/t62pkr6hx/PORTFORWARD_TPLINKD9.jpg

When i tried to check my public IP from the PC, the public IP is different from the public IP of my ZTE-F609 modem-router, I also did a check from canyouseeme.org for ports 8080, 8100, 8554, they are still closed...

Could anybody point out what i did wrong...? What should be the best setup for my situation?

Thanks in advance...

 

[kanewolf]

Why are you using the TPLink as a router rather than an access point?

 

[Yimman]

If we move away from the having a switch connecting to your WAP there are several settings that are questionable.

1) Are you using Multicast? If not, disable IGMP snooping
2) Is there separate network connected to your ZTE? If not disable DHCP server on the router
3) Why do you have two routers rather than connecting the switch directly into the first router?
4) Put the servers in a DMZ. If you are running virtual servers then you can connect that one server directly into the ZTE and route through one device.
5) Put the rest of your devices being the LAN zone on the AP.

If you only have two ports on your ZTE (DMZ, LAN) then use the switch as a physical connection through the AP. If you have enough ports, then remove the switch and connect to the ZTE or TP without the switch.

Moving the server to a DMZ off the ZTE will fix your PAT issues.

Dear all,

I'm trying to setup port forwarding on my ZTE-F609 Modem and my TP-LINK (Archer D9) but i can't seem to set it up properly. The portforwarding is to allow remote access to my NVR.

Here is my setup:
ZTE-F609 (LAN)------> TPLINK D9 (LAN)------> SWITCH----->PC + NVR

ZTE-F609 (LAN: 192.168.2.1, DHCP ON 192.168.2.100 - 253)
http://s32.postimg.org/8wl3reu91/ZTE_DHCP.jpg

TPLINK D9 (WAN: 192.168.2.2, LAN: 192.168.1.1, DHCP ON 192.168.1.100 - 200)
http://s32.postimg.org/ws26p8gpx/TPLINKD9_WAN.jpg
http://s32.postimg.org/a779palr9/TPLINKD9_LAN.jpg

PC (LAN: 192.168.1.200)
NVR (LAN: 192.168.1.10)

PORT FORWARDING ZTEF609:
http://s32.postimg.org/gc7eznmp1/PORTFORWARD_ZTE.jpg

PORT FORWARDING TPLINKD9:
http://s32.postimg.org/t62pkr6hx/PORTFORWARD_TPLINKD9.jpg

When i tried to check my public IP from the PC, the public IP is different from the public IP of my ZTE-F609 modem-router, I also did a check from canyouseeme.org for ports 8080, 8100, 8554, they are still closed...

Could anybody point out what i did wrong...? What should be the best setup for my situation?

Thanks in advance...