Jump to content

Setting up NetDuma Behind TP-Link


Recommended Posts

So I got a TP-Link C8.  I've reserved an IP on the TP-Link for my NetDuma mac address of 192.168.0.10. I've then placed that IP in a DMZ on the C8.  I've left DHCP on in the NetDuma and left it's IP address as 192.168.88.1.  My problem is I cannot access the ND at the 192.168.88.1.  I'm not sure how to get around this.  A little background on my setup. My POE enters ISP Comcast cable modem, then goes to my TP-Link. I have a direct ethernet from my TP-link to the NetDuma. I then have an ethernet from my TP-Link to my Dell 24-port switch to feed the rest of my network (which btw my computer is connected thru).  My gaming consoles are connected directly to my NetDuma.  Any idea why I cannot get to the NetDuma?  

 

I've checked the forums and this procedure falls in line with the setup referenced in this post:  http://forum.netduma.com/topic/2111-how-to-set-up-the-netduma-with-sky-fibre-sr-102-modemrouter/?hl=address, which is what I am trying to do. 

 

Thanks,

Josh

Link to comment
Share on other sites

So you are using the TP-Link as your main router and the R1 for your gaming consoles only?  If so you  should be getting assigned an IP from the TP-Link of 192.168.0.x.

 

In that case you might need to allow WAN access on your R1 to get to it.  It can be found unsder misc. settings

Link to comment
Share on other sites

Guys, my computer I'm trying to access the R1 from is connected to my LAN downstream from the TP-Link, not directly connected to the R1.  So do I need to allow WAN and what are the steps?  Again, I can now access the R1 by connected a second ethernet cable from the R1 to my 2nd port on the Mac Pro, just thought I could access it through LAN somehow.  That link I provided from these forums showed the setup as I have it but never addressed any additional instructions for getting to the R1, just that when finished with setup, go to the regular IP address for the R1.  I know the article referenced a different router, but same concept. 

Link to comment
Share on other sites

So sounds like that is a little risky.  Would I just be better off keeping that second cable plugged into my Mac Pro and accessing it from that second connection to keep the security? 

Link to comment
Share on other sites

  • Netduma Staff

So sounds like that is a little risky.  Would I just be better off keeping that second cable plugged into my Mac Pro and accessing it from that second connection to keep the security? 

 

It would be a a lot more secure to not enable WAN access - especially as the router is not yet password protected. So if your concerned about the security then I would say that your definitely better off leaving it disabled :)

Link to comment
Share on other sites

Crossy, someone would still have to get past the modem, which has a firewall as well.  Correct me if I'm wrong there.  Basically, if I try to go to my web IP, I hit the modem login.

Link to comment
Share on other sites

  • Netduma Staff

Crossy, someone would still have to get past the modem, which has a firewall as well.  Correct me if I'm wrong there.  Basically, if I try to go to my web IP, I hit the modem login.

 

I'm not entirely sure but what you're saying makes sense and if you type in your IP and you get the modem login, I don't think there would be a way for them to reach the Netduma.

Link to comment
Share on other sites

Modems don't generally have firewalls as they don't do any routing.

 

To me it seems if you have put the R1 in the TP-Link's DMZ then external packets will hit the R1 WAN interface and if WANside access to the R1 is enabled you would get to the control panel.

 

Easiest way to check is to browse to your external IP address with another device (phone on 3g) and see what happens.

Link to comment
Share on other sites

Nothing happens, it times out.  I have enabled the WAN setting as Iain suggested.  You can't get anywhere by typing in my public IP address.  My ISP modem/router has custom security settings enabled.  So although it is not in full pass-through mode, it won't take over the job of my downstream router.  

 

I have tried it from my phone and from a remote computer across the country, so I think I'm safe unless one of you still have your doubts.

Link to comment
Share on other sites

  • Netduma Staff

You need to use the IP you find in Device manager >> WAN IP to connect from outside the network - you can't use 192.168.88.1 as that is for the Netduma's WAN side.

 

Can you follow the instructions here for an Open NAT and make sure that when you test you have the GeoFilter disabled.

 

So basically the IP you put in the DMZ is the IP that you use to access the router from the WAN side (when you are not connected directly to the R1).

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...