Need some routing help

[Pinion]

I need a little help understanding some things about routing and how to achieve what I want. My network is growing and i need more IP's

I can do what I want with Super netting, but that's not what I want. If my network grows too much, I'll have performance problems with all the broadcast traffic and such.

What I would like is to have some more network ranges and route those to my main box. I'm using a RV016 Linksys in gateway mode and twin 5mbps DSL lines balanced. I'm using a 192.168.12.0-255 range now.

I have a couple WRT54GL'S flashed with tomato firmware. I have one set to 192.168.100.10 and one set for 192.168.101.10. I have succeeded in routing traffic between them, and I'm able to reach my main router as well from behind them. I'm not able to ping back into either network from my core router, nor am I able to get out to the internet from those routers.

My core router runs as a gateway, and has RIP enabled. Both tomato routers have RIP enabled and are set as routers, not gateways.

I need all three networks to reach each other transparently, as well as reach the internet. Can anyone help me? I can send configs and such and I'm willing to learn.

Howard

[MaximumISP]

Hello Pinion I believe you will need to assign a static route to the tomatos from your core router and perhaps a firewall rule allowing access to that subnet
also I needed this bit of code into Tomatos administration/scripts in the firewall section
iptables -P INPUT ACCEPT
to be able to access any of my radios behind the Tomato

[Pinion]

Hello Pinion I believe you will need to assign a static route to the tomatos from your core router and perhaps a firewall rule allowing access to that subnet
also I needed this bit of code into Tomatos administration/scripts in the firewall section
iptables -P INPUT ACCEPT
to be able to access any of my radios behind the Tomato

How do you hook your tomatoes to your core network? How do you provide for redundancy? Do you use them as gateways or routers? I can get them to access the core network when set as routers, but I can't get out to the net. When they are routers, I can access IP's behind them, but when set to gateways I can't.

Howard

[MaximumISP]

I use the tomatos at each pop tower site
to shape traffic and do connection limiting before it hits my backbone
They are set as routers no RIP
(that little piece of code I showed above is why
you cant access radios behind them )
ie my typical setup

Wireless BH---Tomato WAN
Tomato LAN - AP~~~~~~~Clients

There is no provision for redundancy but one could use a switch
and plug in all BH radios into it then plug that switch into the tomatos WAN port
just disable the LAN port on the spare BH radio until they are needed
this would provide redundancy but you would need to enable it manually
if you needed automatic failover the Id use a pfsense box or something else instead

[Pinion]

I use the tomatos at each pop tower site
to shape traffic and do connection limiting before it hits my backbone
They are set as routers no RIP
(that little piece of code I showed above is why
you cant access radios behind them )
ie my typical setup

Wireless BH---Tomato WAN
Tomato LAN - AP~~~~~~~Clients

There is no provision for redundancy but one could use a switch
and plug in all BH radios into it then plug that switch into the tomatos WAN port
just disable the LAN port on the spare BH radio until they are needed
this would provide redundancy but you would need to enable it manually
if you needed automatic failover the Id use a pfsense box or something else instead

Ok, I'm trying to get this through my thick skull......

I set my tomatoes to routers

I set them to 192.168.100.10 and 192.168.101.10 respectively

Disabled RIP

Added code into Admin>Scripts>Firewall

I'm able to contact both routers ( I'm plugged into 192.168.101.10)

No Internet......... :shock:

I've created routes from both tomatoes in various ways to my core and no joy.

The routes I have created between them work.....

I'm at a loss....... Would it be possible to get a sample config for me to look at or load into one???

Howard

[MaximumISP]

I doubt my config files will help you much
I have never been able load one Tomatos config onto a different unit
I suspect my networking setup is quite different
from most others and may well make matters worse for you lol

In any event check these things
That your subnets and addressing are correct
You have NAT and Firewall rules correctly addressed with the
proper gateway IPs enabled and specified on your core router allowing traffic on these subnets

I suspect one or more of these is where your having problems
since I am not familiar with your core router
I have no idea if its even capable of static routes, NAT rules or its firewall rule requirements
( all the things my Pfbox needed ) but I expect it should be very similar

[Pinion]

I doubt my config files will help you much
I have never been able load one Tomatos config onto a different unit
I suspect my networking setup is quite different
from most others and may well make matters worse for you lol

In any event check these things
That your subnets and addressing are correct
You have NAT and Firewall rules correctly addressed with the
proper gateway IPs enabled and specified on your core router allowing traffic on these subnets

I suspect one or more of these is where your having problems
since I am not familiar with your core router
I have no idea if its even capable of static routes, NAT rules or its firewall rule requirements
( all the things my Pfbox needed ) but I expect it should be very similar

I have a PF box here that I haven't yet put into production. Maybe it's time to hook it up and try to make it work.

Care to share some specifics on what you have done? As in what your routes and such as well as NAT setting for your PF box? Example:

You have a 192.168.10.X core address range

You want to create a 192.168.11.X range

What routes/rules and such would be needed in your PF box and tomatoes to make it work?

I'm not a complete newb, but I'm afraid the subnetting and such really confuses me. Prolly the hardest part of it for me, someday I hope to have an epiphany.

Howard

[Pinion]

I have a solution working.....

I loaded DD-WRT on my routers.....

I have this working using the routers as gateways, but I'm wondering how badly that impact performance as I'm going to guess that it's nat'ing the works and causing some extra overhead.

Howard