[Sussex] Draytek router configuration

[Al Bennett]

Hi Richie

Thanks very much for your reply, you confirmed the route I was going down 
was right!

I went for the opening port ranges, that way there's still some kind of 
firewall in place on the router.  It all seems to be working as it should 
now.

Thanks for that, useful to have someone who knows this box.  Have you 
updated the firmware on yours yet?  I'm wondering if it's worth doing, the 
wireless stuff doesn't seem to work properly which would be worth the effort 
of reflashing.  I tried upgrading using the FTP method but that didn't seem 
to work right, I couldn't upload the new firmware to it without errors. 
Have you had any success?

Thanks again

Al

----- Original Message ----- 
From: "Richie Jarvis" <richie at helkit.com>
To: "LUG email list for the Sussex Counties" <sussex at mailman.lug.org.uk>
Sent: Tuesday, May 09, 2006 8:40 PM
Subject: Re: [Sussex] Draytek router configuration


Al Bennett wrote:

> Evening all
>
> OK, so I've acquired a Draytek 2800G ADSL router which looks the part but 
> actually seems to be pretty crappy.  I'm trying to find out how best to 
> set the damn thing up to do what I want it to, so if anyone has any 
> experience with Draytek routers I'd appreciate some pointers!
>
> What I'm trying to set up is a simple network of two Windows NATted PCs 
> which receive IPs via DHCP from the router and a Debian server which has a 
> static IP.  We've got 5 usable IPs from Zen Internet and I'd like one of 
> them to go to the Debian box but that box still to be accessible from the 
> two windows PCs (my first attempt at setting this up had full access for 
> the server but no way to talk to the different subnets).
>
> To me this seems simple enough for a £160 router to handle but for the 
> life of me I can't get it all working.  I've got it to the point now where 
> the PCs get IPs and happily chat to each other, I've assigned a private IP 
> to the server (in the 192.168.1.xxx range) and now PCs and server talk (I 
> think, not very well tested).
>
> What I can't get to work is the external IP address forwarded to the 
> internal server address.  I've presently got it set up using some form 
> port forwarding but it seems to work unreliably.  Sometimes I can connect 
> using the external IP, sometimes not.
>
> Does anyone have any idea how I should be doing this and if I'm at all 
> near the mark?
>
> TIA!
>
> Al
>
Hi Al,

I have a Draytek 2800VG, and previously had a 2600, and have found them
to be the best cheap router/firewall money can buy.  I also have an 8
range IP set myself.

Anyway, on to your issue.  The answer is to go to LAN/General Setup and
set the 2nd IP Address and subnet mask to your external addresses.  Make
sure 'For IP Routing Usage' is enabled.  Your router should now accept
connections for your IP range.

The next step depends on whether you wish to put your Debian box into
the DMZ, or just open single ports.

For DMZ, go to NAT/DMZ Host, and enable the required Aux WAN IP, and tie
it to the internal address
For Open ports, go to NAT/Open Ports, and open the required ports, and
make sure the Aux WAN IP is set to the required address.

The trick here is that your Debian machine needs to be in the same
address range as the NAT'd windows machines.  My main fileserver is
setup like this, and has a different external address to everything else
on my network, even on the outbound.

Hope that helps,

Cheers,

Richie

_______________________________________________
Sussex mailing list
Sussex at mailman.lug.org.uk
E-mail Address: sussex at mailman.lug.org.uk
Sussex LUG Website: http://www.sussex.lug.org.uk/
https://mailman.lug.org.uk/mailman/listinfo/sussex