VDSL2 Modem in Bridge Mode - Access GUI

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Wed Dec 07, 2016 22:31    Post subject: VDSL2 Modem in Bridge Mode - Access GUI Reply with quote
I have a WRT 1900AC that connects to my ISP via PPPoE through a NetGear DM200 VDSL2 Modem/Router that is set in "Bridge Mode" (no routing).

The DM200 is just the VDSL2 connection and the WRT1900AC handles the login, routing, WIFI, and WAN IP etc..

The DM200 keeps the default static IP of 192.168.5.1 in Bridge Mode with no DHCP or other routing functions and if I plug in the Ethernet cable from my PC directly, set a static IP for it of 192.168.5.2, then I can access the DM200 GUI for checking VDSL2 connection status.

There is only one LAN port on the DM200 (and a DSL RJ11 port) and the LAN Port is normally connected to WAN port of the WRT1900AC during normal operation.

My local LAN (WRT1900AC) is set at 192.168.1.1 and I cannot seem to find static routing or other setups that allow me to access the DM200 Modem 192.168.5.1 from my PC through the WRT1900 Router to the DM200 on the WAN side of the WRT1900AC.

Can anyone suggest a setup that will allow me to check the DM200 Modem GUI without having to unplug WRT1900AC from it and directly connect PC and set static IP on PC?

I think Static Routing will do it but I cannot seem to get a setup that will work.

I am running Kong's DD-WRT v3.0-r30840M kongmv (11/03/16)

WRT1900AC Router in PPPoE Mode as a Gateway - 192.168.1.1
DM200 as a VDSL2 Modem in Bridge Mode - 192.168.5.1
Sponsor
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Thu Dec 08, 2016 21:07    Post subject: Reply with quote
I tried it as you wrote it and then I changed it to 5.1 vice 5.2 since the DM200 is 192.168.5.1.

It did not work as planned but it did redirect me to the WRT1900AC GUI start page on the second try. I need to get to the DM200 GUI start page with 192.168.5.1

The DM200 has no routing NAT or routing functions active, it is just a bridge.

What an I doing wrong and how would I check if the commands are set?

eibgrad wrote:
You need to bind the 192.168.5.x network to the WAN, then NAT that network over the WAN for clients of the 192.168.1.x network.

Code:
ifconfig $(get_wanface):1 192.168.5.2 netmask 255.255.255.0 broadcast 192.168.5.255
iptables -t nat -I POSTROUTING -o $(get_wanface) -d 192.168.5.0/24 -j SNAT --to 192.168.5.2


The first line goes in the startup script. The second line goes in the firewall script.
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Thu Dec 08, 2016 22:03    Post subject: Reply with quote
http://www.dd-wrt.com/wiki/index.php/Access_To_Modem_Configuration
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Fri Dec 09, 2016 22:51    Post subject: Reply with quote
Tried following the WIKI but it seems outdated and did not work.

I put the commands in via Putty, and various versions of the commands that I could figure out from the WIKI, but no success.

Does anyone have a working set of commands I could try for my access to the Modem from a WRT1900AC?

Per Yngve Berg wrote:
http://www.dd-wrt.com/wiki/index.php/Access_To_Modem_Configuration
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Dec 10, 2016 10:16    Post subject: Reply with quote
After executing the commands posted by eibgrad.

ifconfig $(get_wanface):1

Do you see the address 192.168.5.2?

Route

Do you see 192.168.5.0 listed?
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Sat Dec 10, 2016 11:27    Post subject: Reply with quote
I ran the commands again and got the following through Putty:
Code:

BusyBox v1.24.2 (2016-11-03 23:01:38 CET) built-in shell (ash)

root@Router:~# ifconfig $(get_wanface):1 192.168.5.2 netmask 255.255.255.0 broadcast 192.168.5.255
root@Router:~# iptables -t nat -I POSTROUTING -o $(get_wanface) -d 192.168.5.0/24 -j SNAT --to 192.168.5.2
root@Router:~# ifconfig $(get_wanface):1
ppp0:1    Link encap:Point-to-Point Protocol
          inet addr:192.168.5.2  P-t-P:192.168.5.2  Mask:255.255.255.0
          UP POINTOPOINT RUNNING MULTICAST  MTU:1492  Metric:1

root@Router:~# Route
-sh: Route: not found


It seems that the IFCONFIG is working OK but the IPTABLES is the problem. ROUTE commnd does not work on my DDWRT Router, why?

Per Yngve Berg wrote:
After executing the commands posted by eibgrad.

ifconfig $(get_wanface):1

Do you see the address 192.168.5.2?

Route

Do you see 192.168.5.0 listed?
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Dec 10, 2016 13:12    Post subject: Reply with quote
It's "route" with lowercase r.

You are putting the ip address on the wrong interface. It shall be the wan port, not the ppp0 interface. usually vlan2
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Sat Dec 10, 2016 21:27    Post subject: Reply with quote
I have the WRT1900AC set up as PPPoE and I confirmed that ppp0 is my WAN and the IP of ppp0 matches the WAN IP.

With lower case "route" I see the following:

192.168.5.0 * 255.255.255.0 U 0 0 0 ppp0

Anything else I need to do to get it working?

Per Yngve Berg wrote:
It's "route" with lowercase r.

You are putting the ip address on the wrong interface. It shall be the wan port, not the ppp0 interface. usually vlan2
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Dec 10, 2016 22:09    Post subject: Reply with quote
You have to bypass pppoe and access through the physical wan port.
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Sat Dec 10, 2016 23:23    Post subject: Reply with quote
How is that done?

Per Yngve Berg wrote:
You have to bypass pppoe and access through the physical wan port.
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Dec 10, 2016 23:58    Post subject: Reply with quote
By changing the interface name.


ifconfig vlan2:1 192.168.5.2 netmask 255.255.255.0 broadcast 192.168.5.255
iptables -t nat -I POSTROUTING -o vlan2 -d 192.168.5.0/24 -j SNAT --to 192.168.5.2
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Sun Dec 11, 2016 9:42    Post subject: Reply with quote
The commands below did not work.

I then ran IFCONFIG and noticed that the WAN port MAC was assigned to "eth1" (vice vlan2). I then ran the commands with eth1 and it worked! I can access the VDSL2 Modem directly through the WRT1900AC without unplugging and plugging in Ethernet cables.

The commands I used were:

ifconfig eth1:1 192.168.5.2 netmask 255.255.255.0 broadcast 192.168.5.255
iptables -t nat -I POSTROUTING -o eth1 -d 192.168.5.0/24 -j SNAT --to 192.168.5.2

One more question: Do I have to consider any additional security measures after I made the above changes to the WRT1900AC settings for the config and firewall?



Per Yngve Berg wrote:
By changing the interface name.


ifconfig vlan2:1 192.168.5.2 netmask 255.255.255.0 broadcast 192.168.5.255
iptables -t nat -I POSTROUTING -o vlan2 -d 192.168.5.0/24 -j SNAT --to 192.168.5.2
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sun Dec 11, 2016 11:01    Post subject: Reply with quote
No, you are perfectly safe.
fcs001fcs
DD-WRT Novice


Joined: 30 May 2007
Posts: 47

PostPosted: Sun Dec 11, 2016 11:37    Post subject: Reply with quote
Thanks to you (@Per Yngve Berg) and @eibgrad for all your assistance.

Per Yngve Berg wrote:
No, you are perfectly safe.
pwhalley
DD-WRT User


Joined: 24 Oct 2006
Posts: 56

PostPosted: Sat Apr 22, 2017 2:49    Post subject: Reply with quote
Thank you all, this was very helpful. Using the second variation worked in my case. I have a set of Ubiquity radios providing a point to point link on the WAN side of the router connecting to the ISP router/modem. Having he modem end of my WAN almost 1.5 miles away makes this a real timesaver! At present there are 3 IP addresses that I need access to and this does it!

For the record, The second variation worked for me (my WAN subnet is 192.1.2.0/24).
Code:
ifconfig vlan2:1 192.168.2.2 netmask 255.255.255.0 broadcast 192.168.2.255
iptables -t nat -I POSTROUTING -o vlan2 -d 192.168.2.0/24 -j SNAT --to 192.168.2.2


I am using this on:
Netgear R3600 V2
DD-WRT v3.0-r30700M kongac (09/27/16)

I too had tried the wiki directions and for whatever reason was not successful. That was years ago on less capable platforms though.

P

_________________
Windstream bondedDSL 50Mbs down 4Mbs up subscribed. 1 Netgear R3600 V2 running
DD-WRT v3.0-r30700M kongac (09/27/16)
3 WRT610N V1.0(1donat 2brick...)
1 WRT54GS V1.0 (spr Open WRT)
1 WRT54GS V1.1 (donated)
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum