0

Warning: I sincerely apologize for any kind of ignorance displayed on my part. I am not a network engineer and I do not know anything more than how to mod routers into network switches and plug in cables. Please don't hurt me! D:

As of late, I've been concerned with roommates performing insecure activity. I have legitimate concern where potential problems could occur if something propagates through the network. I would like to be able to have all of my systems to be able to trust each other and in the event of any kind of malicious spread not of my own doing, I might have a bad time.

Please bear in mind that I am on a residential connection with an ISP provided router. Replacing the router nor firmware flashing are an option as it provides an ISP-provided phone line connection.

I would like to create a secondary network that uses the primary network (the ISP-provided router) internet connection. This network will maintain about twelve different devices. Two of these devices will be performing high-bitrate video streaming (yes, two devices sending out video to other devices at the same time). This network should be as isolated as possible from the primary network, I do not want the primary router to even know of the existence of any of the devices on the secondary network. However, I need to be able to manage ports and receive connections from the outside world. This secondary network, as mentioned before, requires full Internet connectivity.

An idea I had in my mind would be something like: the primary router forwards any ports that need forwarding to the secondary router, which would still be connected to the main network. From there, the secondary router would do the actual port forwarding that needs to be handled for each device, but it would be on a totally separate network so none of the devices outside of the secondary network would be able to see them. This seems like the most ideal solution for me and would really prefer this (as I could use the custom firmware I have on a router laying about; it is an old and vague NETGEAR router, don't expect anything out of it), but I have no idea whatsoever on how I might do this.

Is this possible (network bridging, mayhap)? If so, how may I accomplish this?

Post: This question was originally posted on NetworkEngineering, but someone kindly pointed out that it is oriented for actual network engineers, which would make sense. ;)

  • 1
    I guess you want to install another router behind the one you already have. It's wan connection must be Gigabit Ethernet, and then perform usual NAT. Forwarding will also work, just set up the rule on both routers. – davidbaumann Nov 7 '15 at 19:09
  • 1
    But in my opinion, just don't trust your network, as I use public wifi very often, my system is configured so I don't have to worry. – davidbaumann Nov 7 '15 at 19:10
  • @davidbaumann Well, I basically have to trust my network. I have multiple machines that work together (in parallel) and they require full and unobstructed access to each other. Basically any system on the network can read/write and access those machines. I know it's not great from a security standpoint, but I have a pretty specific reason (and laziness) for doing this. – Mythical Juggernaut Nov 7 '15 at 19:42
0

Routers cascading (LAN to WAN). It's the setup, i have to isolate my homeLab(RT-AC68U[asuswrt-merlin], SG300, N54L, ...).
Just plug router2-wan-port into one of router1-lan-ports. Make sure both dhcp-pool are not in the same network segment/range. [internet---router1---router2].
To expose some services on LAN1 ==> portforwarding on router2.
To expose some services on internet ==> double-portforwarding(router1 & router2).

  • Hm. I think I found my solution, then. I was running DHCP on both routers, which seems to kill any traffic that isn't in the "secondary network". I'm not sure how isolated this is, but I'll give it a whirl when I get the time. I'll mark it if I can manage to get it working .. hopefully within the week. – Mythical Juggernaut Nov 8 '15 at 2:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.