I have a networking issue similar to Route to a server on subnet. I have tried the solution but without success.
Here is my network topology:
Internet | | ADSL x.x.x.x (external) Linksys WAG120N (Router1)---------------------+ 255.255.255.0 | 192.168.1.1 (internal) | DHCP active | | | | | | | LAN-to-WAN | 192.168.1.2 (external, static) 192.168.1.100 (DHCP) D-link DSL-2730E (Router2) PC1 Windows 10 255.255.255.0 192.168.2.1 (internal) DHCP active | | 192.168.2.2 (static) Ubuntu Server 16.04 with node server on Port 3344
- Router1 is connected to Router2 LAN-to-WAN
- both routers is NAT-enabled, dynamic routing disabled
- Router2 SPI firewall protection switched off, unblocked anonymous WAN request
- Router1 port forwarding to 192.168.1.2 WAN port 3344, LAN port 3344 TCP
- Router2 port forwarding to 192.168.2.2 WAN port 3344, LAN port 3344 TCP
- I can ping Router2 192.168.2.1 from my PC1
- I cannot ping the server 192.168.2.2 from my PC1
The port forwarding is working and the server is responding when the traffic is coming from the internet i.e. when I enter the Router1 external IP address and the forwarded port x.x.x.x:3344 in a browser on PC1, I get a response in the browser. Strangely, when I enter Router2 external IP address 192.168.1.2:3344 or Router2 internal IP address 192.168.2.1:3344 (via static route) in the browser on PC1 which I expect the Router2 to forward the traffic to my email@example.com:3344, neither of them works, on Google Chrome it says "This site can’t be reached". Am I missing something? Thanks in advance.
- The reason I want to separate two subnet is because I want to block the internet access of the 192.168.2.0/24 subnet.
- I also tried to set up a static route on my Router1 with destination to 192.168.2.0, subnet mask 255.255.255.0, next-hop address 192.168.1.2, there is only one interface available which is a1 interface and the metric to 1 (not sure what it does), but still no luck.
- My goal is to block internet access completely for the 192.168.2.0/24 subnet and to allow internet access for the 192.168.1.0/24 subnet.
- There will be about 12 android client devices connecting to the server in the 192.168.2.0/24 subnet which are not allowed to access the internet except the server.
- Another reason I want to use a separate subnet is because it will be easier to manage the internet access filter by filtering the whole IP range (except the server) in the subnet through a single router.