I have a networking issue similar to Route to a server on subnet. I have tried the solution but without success.
Here is my network topology:
Internet
|
|
ADSL
x.x.x.x (external)
Linksys WAG120N (Router1)---------------------+
255.255.255.0 |
192.168.1.1 (internal) |
DHCP active |
| |
| |
| |
LAN-to-WAN |
192.168.1.2 (external, static) 192.168.1.100 (DHCP)
D-link DSL-2730E (Router2) PC1 Windows 10
255.255.255.0
192.168.2.1 (internal)
DHCP active
|
|
192.168.2.2 (static)
Ubuntu Server 16.04 with node server on Port 3344
Additional info:
- Router1 is connected to Router2 LAN-to-WAN
- both routers is NAT-enabled, dynamic routing disabled
- Router2 SPI firewall protection switched off, unblocked anonymous WAN request
- Router1 port forwarding to 192.168.1.2 WAN port 3344, LAN port 3344 TCP
- Router2 port forwarding to 192.168.2.2 WAN port 3344, LAN port 3344 TCP
- I can ping Router2 192.168.2.1 from my PC1
- I cannot ping the server 192.168.2.2 from my PC1
The port forwarding is working and the server is responding when the traffic is coming from the internet i.e. when I enter the Router1 external IP address and the forwarded port x.x.x.x:3344 in a browser on PC1, I get a response in the browser. Strangely, when I enter Router2 external IP address 192.168.1.2:3344 or Router2 internal IP address 192.168.2.1:3344 (via static route) in the browser on PC1 which I expect the Router2 to forward the traffic to my [email protected]:3344, neither of them works, on Google Chrome it says "This site can’t be reached". Am I missing something? Thanks in advance.
Edit1:
- The reason I want to separate two subnet is because I want to block the internet access of the 192.168.2.0/24 subnet.
- I also tried to set up a static route on my Router1 with destination to 192.168.2.0, subnet mask 255.255.255.0, next-hop address 192.168.1.2, there is only one interface available which is a1 interface and the metric to 1 (not sure what it does), but still no luck.
Edit2:
- My goal is to block internet access completely for the 192.168.2.0/24 subnet and to allow internet access for the 192.168.1.0/24 subnet.
- There will be about 12 android client devices connecting to the server in the 192.168.2.0/24 subnet which are not allowed to access the internet except the server.
- Another reason I want to use a separate subnet is because it will be easier to manage the internet access filter by filtering the whole IP range (except the server) in the subnet through a single router.