Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This might be a common situation but I couldn't find anything that provided a clear answer.

I moved into an apartment complex. All the apartments are on a LAN sharing the same Internet connection. I have no control over the central router.

What is the best way to set up my Internet access?

I want to isolate myself from other people living in the apartment complex. I need wireless because my phone does not have an ethernet port :) So I have bought my own router (with wireless) and installed DDWRT on it.

Is there a way to set it up to avoid double NAT, while still isolating myself from the other apartments?

There is no UPnP on the central router. I think they disallow open ports anyway for security reasons. Is there any way I can open ports without access to the central router? Or is there a workaround like using a VPS or reverse-ssh (and how does it work)? Bittorrent works without open ports. Hosting webservers I can do on a VPS. What about remote desktop/VPN? Games nowadays don't require open ports?

A more general question: is this the way to set up Internet access in an apartment complex? It seems a bit strange that with all the different protocols and routing types and the Internet being just a bunch of routers connected together, that there is no way to host a server behind a third party router? Should I try to talk the admin into making the router use BGP or something (but it won't work because the ISP needs to do that). Actually, why can't you get multiple IP addresses from your ISP on a single connection?

share|improve this question
up vote 1 down vote accepted

Unfortunately, I doubt that whoever is the net admin for your apartment complex is going to make changes to the entire LAN just to suit your needs, but it is a nice thought.

Secondly, I'm not 100% sure if DDWRT supports pass-through NAT or a VPN pass-through, but if it does (I believe so), you can set it up in such a way so that you can avoid NATing through both yours and your buildings NAT.

In the end, unless you are able to (somehow) convince your buildings net admin to segment the network or configure vlans throughout the complex to divide network traffic (depending on the network devices used by the administration) you will be operating off of a shared pool. Even if you were to gain access to your buildings gateway device, you are still segmented off of it someway...somehow (considering you have physical connections that you are already connecting your own router to).

Not sure if you want to attempt breaking into the network infrastructure at your complex, unless you're looking to get evicted. Your best solution is to work with what you have, unless you can get your own ISP.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .