[ale] HELP, need to setup wireless access point!

[Michael H. Warfield]

On Fri, 2011-02-04 at 13:35 -0500, Ron Frazier wrote: 
> I don't see what the problem is.  I go though two routers all the time, 
> both doing NAT, to get to my internet connection.  The following should 
> work fine with LAN cables between the parts.  Paul is welcome to call me 
> personally if he needs help.

It will sort of work (for some value of "work") but the real gotcha's
happen if the two NAT's are using the same address range (a very
frequent occurance) and then conflict.  The inner NAT can get really
confused if his WAN port and default gateway is on the same subnet as he
is offering on the LAN side of the house.  This is one reason why CGN
(Carrier Grade NAT or ISP NAT) will probably use 240.0.0.0 and up.  That
block is reserved and discussions are ongoing at the IETF and recently
at an ARIN conference here in Atlanta.  Double NAT does break
somethings, though.  That was mentioned at that conference in that some
things are going to break with CGN that just can not be fixed (mostly
certain games, I heard them say).  It also won't help if you need a flat
address space between the WAN port and the WLAN wireless and the LAN
ports say for shared network resources and Windows stuff.
> wifi router WAN port --> ADSL switch port
> ADSL WAN port --> ADSL wall outlet
> 
> The PC's can connect either wired or wireless to the wifi router.
> 
> PC --> (wire) wifi router SWITCH port
> PC --> (wireless) wifi router radio
> 
> Works like a charm.  Everything has DHCP turned on.
> 
> Wifi router should have:
> 
> Firewall - ON
> NAT - ON
> WPA2 encryption - ON with good long random password
>     see https://www.grc.com/passwords.htm - you can store the password 
> in a text file on the PC
> DHCP service for LAN - ON
> Auto obtain IP from ISP - ON
> 
> UPNP - OFF
> remote admin - OFF
> remote ping reply - OFF
> 
> Sincerely,
> 
> Ron
> 
> On 02/04/2011 12:27 PM, Michael B. Trausch wrote:
> > On Fri, 2011-02-04 at 12:04 -0500, Paul Cartwright wrote:
> >    
> >> ouch, well atnex switched me over this morning to my new business
> >> class. WELL, the new modem is a 4-port adsl setup with NO WIRELESS..
> >> ( He said he will ship me a new model that will replace this&  have
> >> wireless, but I need this to work NOW..
> >> what I have:
> >> 4-port modem connected to atnex.
> >> what I need is one of my 2 routers to connect to the modem to give me
> >> wireless access for my laptops.
> >>
> >> routers:
> >> wrt54GL with DD-wrt on it
> >> wrt160N with basic cisco firmware ( don't think this one can be
> >> changed
> >> to dd-wrt)
> >>
> >> I can work with EITHER, I just need instructions on how to change it
> >> to an access point&  work.
> >>
> >> right now my setup is modem has a local address of 192.168.10.1
> >> whatismyip.com says I am 65.166.136.233 ( if that matters), and Milt
> >> said I have NO access to the modem, as far as admin...
> >>      
> > You'll need to use your wireless router as just a switch in order to
> > avoid double-NAT.  If you disable its DHCP, and ensure that it's got an
> > IP address on the right subnet, all you have to do is plug the Atnex
> > equipment into one of the normal ports on your wireless router.
> >
> > Do _not_ plug your Atnex equipment into the "WAN" or "uplink" port on
> > your router.  If you do that, then you're not using it as a switch,
> > you're using it as a router, and you'd need to configure the device to
> > properly handle its own subnetwork.
> >
> > Doing it this way takes advantage of the fact that all of the non-uplink
> > ports are bridged together (that is, after all, what a switch is: just a
> > multiport network bridge).  So, once you plug one of the normal ports
> > into one of the Atnex ports you will be able to use the wireless network
> > as an extension of the network serviced by the Atnex device.
> >
> > Does that all make sense?
> >
> > 	- Mike
> >    
> 

-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
Url : http://mail.ale.org/pipermail/ale/attachments/20110204/f5036a67/attachment.bin