Help with shield router

[Bob W]

Running a peer network.
Presently router 1 configured
lan 192.168.254.x
wan 192.168.1.x
isp gateway 192.168.1.254 (the dsl modem)
primary dns 192.168.1.254 (also the modem)

I want to add a second router, the first router to become the shield router.
the second router will connect to the modem, and a wireless access point
This will shield the original network from anyone accessing the WAP.
What settings do I want on router 2 (are the modem and wap on lan ports)?
On router 1 wan
IP router 2 or modem or just on that net 192.168.1.x
isp gateway router 1 or modem or other
primary dns modem or other
The modem is dynamic ip

 

[Richard G. Harper]

Your plan adds nothing but complexity and a new point of failure to your
network. A proper router will provide all the isolation you need from the
Internet. If you don't trust the firewall or isolation that your current
router provides, ditch it and get a new one.

 

[Jack \(MVP-Networking\).]

Hi
The principle is described on this page, Network Segregation -
http://www.ezlan.net/shield.html
However giving that you mentioned that your ISP gateway (DSL Modem) is
192.168.254 I am suspicious that your Modem is a Modem/Router, and you not
want system with triple Routing.
If your Modem is a Modem/Router you have to configure one Wireless Router to
functions as a Switch with an Access Point (like this,
http://www.ezlan.net/router_AP.html ) and then plug the output of the
Modem/Router and a second Router through its WAN port to the switch of the
Router that functions as an Access Point.
Jack (MS, MVP-Networking)

 

[smlunatick]

Running a peer network.
Presently router 1 configured
lan 192.168.254.x
wan 192.168.1.x
isp gateway 192.168.1.254 (the dsl modem)
primary dns 192.168.1.254 (also the modem)

I want to add a second router, the first router to become the shield router.
the second router will connect to the modem, and a wireless access point
This will shield the original network from anyone accessing the WAP.
What settings do I want on router 2 (are the modem and wap on lan ports)?
On router 1 wan
IP router 2 or modem or just on that net 192.168.1.x
isp gateway router 1 or modem or other
primary dns modem or other
The modem is dynamic ip

You need to replace the low-end broadband router with a higher quality
router which would create two different networks: one for the wireless
network and the other for the wired network. These type of units are
more expensive but will do what you want in one unit.

Look at Sonicwall TZ models.

 

[Bob W]

Thanks Jack
The 192.168.254.1 is the #1 Router
The Modem is at 192.168.1.254, modem only. Motorola unit.
I had this setup working previously with a prior modem.
I replaced the modem with a new one, same model, because the old one
died. In the process of proving to AT&T that our problem was the modem I
reset both routers, tried bridge mode, etc. Now I don't recall original
settings. Dumb, I know. So the current setting are with the wan port of
router 1 connected directly to the modem.
I am trying to set up using the ideas at exlan.net, but am missing
something on the setup, either at my networked computer tcp/ip or on one
or both of the routers.

Bob

 

[Bob W]

Finally up and running. Just a network plodder, for sure.
1. Computer gateway is the shield router
2. Shield router uses WAN gateway of the DSL modem
3. Router 2 connected to modem, WAN IP is the modem.