Re: Home LAN/WAN network problem

Daniel Pittman <[email protected]> Mon, 12 Jul 2010 23:29:16 +1000
Newsgroups gmane.org.user-groups.slug.chat
Message-ID <[email protected]>
Philip Rhoades <[email protected]> writes:
> On 2010-07-12 16:28, Daniel Pittman wrote:
>> Philip Rhoades<[email protected]>  writes:

[...]

>>> Everything works fine except:
>>> - I can't ssh from the server to the Netbook (it works fine the other way)
>>
>> You didn't say where these were connection, so I am guessing that the server
>> is on the wired network, and the netbook is on wireless, right?
>
> Yes - it is the computer labelled "Server" as opposed to "Old Server". I used
> a dotted connection for the netbook to indicate a wireless connection.  Did
> you look at the diagram? - I thought it was clear . .

I didn't even notice the diagram existed until you pointed it out, so no.
Um, and it did answer the question, and sorry for wasting your time as a
result of not spotting it.

>> In future, it helps to say that, because now I am just guessing at your
>> problem.  However: your wireless device shows that it uses the 192.168.1/24
>> range for "LAN and Wireless", and 10.1.1/24 for "WAN".
>>
>> On these devices "WAN" usually means "the far side of a NAT layer", which
>> means that what you are seeing in terms of ssh (from wireless to wired, but
>> not wired to wireless) is more or less what I would expect.
>>
>> Personally, I solved this by turning *off* all the routing, DHCP, DNS, etc
>> features on the wireless router,
>
> Right . .
>
>> then plugging a *LAN* port on it into the switch providing the internal
>> network.
>
> Not sure what you mean - can you draw it?

No, but I can perhaps explain:

You know how you have the printer plugged in to the "LAN" side of the wireless
router?  If you take the cable plugged into the "WAN" port and plug it,
instead, into a spare port on the same "LAN" side as the printer you will have
done what I was talking about.

Aw, heck, lemme draw it anyway:

 unplug the ADSL modem here
           |
           |
  +-----| wan |-----+
  |                 |
  | wireless router |
  |                 |
  |-| |-| |-| |-| |-+
     |           |
     |           \---- <- plug the ADSL modem in here instead
   printer


>> That makes it a wireless bridge, with DHCP served by the server on the LAN,
>> and no protection at all between wired or wireless clients.  For my set of
>> risks this was great.
>
> Sounds OK for me too but I still can't visualise it . .

Hopefully the picture and description help there. :)


Anyway, make sure you turn off the DHCP service on the Wireless Router
*before* you move the cable from the WAN port to a LAN port on it.

Otherwise you have two of 'em running, and that will make your life a misery.

        Daniel
-- 
✣ Daniel Pittman            ✉ [email protected]            ☎ +61 401 155 707
               ♽ made with 100 percent post-consumer electrons
-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html