Sep 182005
 

Like prob­ably every oth­er com­puter geek out there, I do a cer­tain amount of help­ing friends set up their home sys­tems. This par­tic­u­lar friend knows noth­ing about net­works and fire­walls and the like, and just wanted some­thing secure that would allow her to have a reas­on­ably safe Win­dows box and the daugh­ter to have a reas­on­ably safe and vir­us-free Win­dows laptop. The easy bits were installing the spy­ware detect­ors (Ad-Aware and Spy­bot S&D) and the vir­us checker/utilities (Norton Sys­tem­Works); the tough bit was get­ting the routers to work.

The sys­tem that made most sense was to feed the DSL into a wired eth­er­net router with a built-in fire­wall (the D‑Link DI-604 has a reas­on­able price point and an integ­rated fire­wall) and then set up a wire­less point for the daugh­ter­’s laptop. So my friend got a Link­sys wire­less router (no fire­wall). We have this sys­tem at home, though with dif­fer­ent hard­ware (Linux fire­wall + Air­port wire­less) and it works just fine. So I was­n’t expect­ing any oddit­ies. I found the sup­port page on the Link­sys site that said to turn off the DHCP serv­er on the wire­less router, and to give it an IP address that fit­ted in with the IP setup of the wired router. That was easy enough to do. But some­how the laptop just nev­er man­aged to sync up.

Ah, how good it was that I allowed more time than I expec­ted to need to set it up! My basic idea was that eth­er­net comes out of the DSL mode, goes into the wired router in the uplink sock­et, then a cable comes out of the wired router and goes into the uplink sock­et of the wire­less router. Still seems logic­al to me, but in this case my logic was com­pletely wrong. For­tu­nately Link­sys has live chat to tech sup­port that works on a Sat­urday (good move, people!) and Mel­rose did­n’t need very long to fig­ure out the prob­lem and tell me to put the cable com­ing out of the wired router into one of the 4 reg­u­lar sock­ets. This worked just fine; the laptop synced up, my friend (and her daugh­ter) are happy and think I know exactly what I’m doing, while I’m still slightly baffled and won­der­ing what’s wrong with my simple hose-pipe ana­logy of inter­net con­nec­tions. Still, I now know empir­ic­ally what to do, so that’s the import­ant thing.

  4 Responses to “Double Routing”

  1. I think your logic makes per­fect sense. I some­times use a sim­il­ar, but non-wire­less, con­fig­ur­a­tion with an SMC Bar­ri­cade router con­nec­ted via its uplink (WAN) port to a Net­gear DG834 Router/DSL modem.

    Per­haps your prob­lem was, though, that you had a cross-over cable between the two boxes. The “uplink” con­nec­tions on most such boxes (includ­ing hubs) have the trans­mit and receive pairs switched so that a straight through cable will work. If you had a cross-over cable then trans­mit and receive would be swapped twice. Plug­ging the cross-over cable into one of the nor­mal ports of the wire­less router would then work OK.

  2. Good point. My friend might have got a cross-over cable by mis­take. I’ll know to look for that next time!

  3. Help, I also have double rout­ing problems…

    I’m doing some fire­walls for remote office sites, and want do have a dual VPN con­nec­tion setup:

    Two seper­ate VPN gate­ways at the main site, each with their own con­fig­ur­a­tion files, inter­net con­nec­tion etc. for redundancy.

    On the remote end I spe­cify (amongst others):
    remote vpnbox1
    ifcon­fig 10.251.0.2 10.251.0.1
    ping 1
    ping-restart 3
    route 10.0.0.0 255.0.0.0 10.251.0.1 1
    route-delay

    And the oth­er tunnel:
    remote vpnbox2
    ifcon­fig 10.252.0.2 10.252.0.1
    ping 1
    ping-restart 3
    route 10.0.0.0 255.0.0.0 10.251.0.1 2
    route-delay

    This works, as both tun­nels come up (each added with “ip route add 10.0.0.0/8 via met­rix “, and “ip route” gives me two routes each with their own metric.

    But alas, bring­ing one tun­nel down, removes both routes as the route is removed with “ip route delete 10.0.0.0/8”

    This is a bug, right?

  4. I have the same prob­lem but with dif­fer­ent hard­ware, I will have to give this a go!

Leave a Reply to Andy Cancel reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

(required)

(required)

/* ]]> */