Double Router Forwarding process

As a CCTV Engineer / Technician its very hard to configure Double Router Forwarding for your Installed DVR. As a Technical Writer this post is dedicated to all who call / Mail for writing this Process. My aim is to keep this guide as simple as possible, while still providing you with the information you need to know.

As you can imagine, port forwarding through two routers is a bit more complex than port forwarding through one router. Below is a diagram of a double routed network.

Important Things to Notice:

· Both "Router #1" and "Router #2" have TWO IP addresses; an Internal IP address and an External IP address.

·    There are TWO LANs (Local Area Networks).

·    There are TWO WANs (Wide Area Networks). If there is a LAN then there is an accompanying WAN.

Now that we have identified these things we can go on to learn how they affect us.

Network Address Translation

For the sake of readability, from now on I will refer to "Router #1" and "Router #2" as "R1" and"R2" respectively.

Every router does NAT (Network Address Translation), and has both an internal IP address and an external IP address. The external IP address is the one that connects that router to the WAN (Wide Area Network). Usually the WAN is the Internet. The internal IP address connects the router to the internal network. Our network here is a bit more complex than the basic network.

R1's external IP address connects R1 to the Internet, just like any other network. R1 also has an internal IP address which provides NAT to the internal LAN1 network below it. The only thing connected to LAN1 is the router R2. R2 connects to LAN1 with an external IP address. Notice that R2's external IP address does not connect to the internet, but to another private network. Another way to say that is, R2's WAN IP address is external to R2 but internal to R1. R2 then provides NAT to the LAN2 network below it. R2 provides NAT through its internal IP address. The computers then connect to LAN2 and receive data from R2.

Let's assign IP addresses to everything, and see how it would look.

Notice that the IP addresses that exist on LAN1 differ from the IP addresses on LAN2. The IP addresses that are on LAN1 are 192.168.1.1 and 192.168.1.5. The IP addresses that are on LAN2 are 10.0.0.1 and 10.0.0.15. Here is another diagram to help show the network divisions:

Configure Port Forwards

Okay enough idle chatter. Let's talk about how to forward ports through this network.

Step 1

We want to forward ports from the WAN of R1 to a computer connected to LAN2. To do this we need to forward the ports in R1 to R2's external IP address. In this example we would log into R1 and forward ports to 192.168.1.5.

Note: In order to connect to R1's web interface one will probably have to plug a computer directly into R1 and establish a connection on LAN1.

Step 2

The next step is to forward ports from R2 to the proper network device whether it be a computer, XBOX, or PS3. (The Proper network device is the device on which you run the program for which you are forwarding ports.) In our example we would log into R2, and then forward ports to 10.0.0.15.

If you are having trouble forwarding ports or just don't want to deal with the hassle of doing it manually, check out PFConfig; a software tool that automatically forwards your ports.

Using the Free Router Detector you can know IP address for each host. Download Now & Install.

Static IP Addresses

You have now set up port forwards in your double router network and everything is working without a hitch. That's great, but if you have not configured static IP addresses for the network devices for which you have forwarded ports then your port forwarding settings are just waiting to break. When your port forward settings stop working, the most likely cause is that the network device for with you have forwarded ports has obtained a different internal IP address than the internal IP address that it had when you originally configured your port forward settings. The result is that your ports are no longer forwarded to the correct IP address.

How do I stop my port forward settings from breaking?

Static IP addresses allow you to assign an IP address to a network device and ensure that its IP address does not change.

The network devices for which ports are being forwarded need to have a static IP address. If a device does not have a static IP address, then it has a dynamic IP address. Dynamic IP addresses can/will change. As stated earlier, if the IP address of a network device for which ports you've forwarded ports changes, the ports will not be forwarded to the correct place. So it is important to setup a static IP address on the network devices for which you intend to forward ports.

The same applies to R2 in our example. R2's external IP address should really be static. This is not too big of a problem if R2 is the only network device connected to LAN1. If R2 is the only device on LAN1, it is unlikely that its IP address will change. If you have other devices on LAN1, you really need to setup a static IP address on R2. You would make configurations for a static IP address in the WAN section of R2.

How To Setup Two or More Routers Together

One of the most common issues people encounter is when they have more than one router hooked up. Sometimes people don't realize their modem is also a router (Such as DSL) and other times people hook up an extra router to use things their router/modem doesn't have, such as wireless.

So now with 2 or more routers hooked up people start to realize port forwarding & port triggering isn't working. This is because they are only setting up the port forwarding or triggering in one router, which is what they should be doing! Now let me explain, no one wants to setup port forwarding & triggering rules in two or more routers, they should only need to do it in one, making things simple. But you may ask "If I have more than one router how can I keep it simple?" The answer: DMZ

First off DMZ is supported by nearly every router/modem out there. What DMZ does is allow you to tell the router to forward all incoming connections to a single IP address. So in this case we will setup DMZ in the first router to point to the second router. Now all incoming connections are sent to the 2nd router and thus your port forwarding & triggering will work again.

So here is a quick example. I log into router 1 and go to the DMZ settings and put the WAN IP address of the 2nd router there. Now router 1 is out of the way for port forwarding and triggering as all incoming connections are now being forwarded to router 2. Now in router 2 I can setup my port forwarding & triggering rules just like normal.

So here is a quick step by step.
Step 1. Login into your Router
Step 2. Find the status page that shows the WAN/Internet IP address and write it down. (The Gateway IP will be the IP needed to log into the first router/modem.)
Step 3. Log into the first router/modem now.
Step 4. Find the DMZ page
Step 5. Enter the IP you wrote down into the DMZ page and enable DMZ.
Step 6. Save and you’re done.

Quick Tip: You should setup a static WAN IP address for router 2. If you leave it on DHCP the IP could change thus breaking the DMZ and of course breaking the port forwarding & triggering. This doesn't happen very often, but it is always a possibility.

If you want to Setup 3 routers at home. Here is my plan to setup. Please let me know if it make sense.

1.    SMC. It is a modern with router. It locates in the first floor, Rogers cable connected to this router. It is the main router to connect outside. I turned off the wireless on the router. It has 4 ports connected to SMC all with wires. First one connect to D-615(second router) Second one connect to D-815(third router) Third one connect to WD Mybook live(NAS HHD) Fourth one connect to TV player

2.    DLink 615. It is a wireless router. It located in the first floor as well, but close to bedroom. It has 4 ports, but I only use 3 of them connected to PC. Also there are wireless device need connect to this router as well.

3.    DLInk 815. It is a wireless router. It located in the second floor. It connected with 3 PCs and also accept wireless connection. The signal in second floor is very weak if using D-615 wireless connection.

I setup the SMC to 192.168.0.1 with DHCP, D-615 to 192.168.2.1 with DHCP and D-815 to 192.168.1.1. I cannot get rid of the second router, since SMC doesn't have enough wired port. And I need to D-815 because the signal problem. Wondering if this gonna work? Thanks.