Home Network Community > All Threads > TD-W9970: how to connect to a modem ISP via LAN/WAN port
< All Threads

TD-W9970: how to connect to a modem ISP via LAN/WAN port

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

TD-W9970: how to connect to a modem ISP via LAN/WAN port

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
TD-W9970: how to connect to a modem ISP via LAN/WAN port
TD-W9970: how to connect to a modem ISP via LAN/WAN port
2021-12-15 09:48:38 - last edited 2021-12-15 19:50:29
Model: TD-W9970  
Hardware Version:
Firmware Version:

Hi all,

I'm configuring a little webserver at home and I would like to separate it from the rest of my LAN.

 

I bought this router TD-W9970 for that.

 

I know I have to connect, by ethernet cable (see the picture below):

 

  1. the LAN/WAN port of TC-W9970 to a LAN port of my modem ISP (the rest of my local network will be on the other LAN ports of the modem ISP).
  2. the PC webserver to a LAN port of TD-W9970

 

This way I should "separate" my Local network from the PC webserver.

 

but it isn't. I tried pinging from both sides and they "see" each other....

 

Then I think I have to configure my TD-W9970 in some way...

 

Can someone help me on that?

 

many thanks!

mf

 

  1      
 
  1      
 
#1
Options
1 Accepted Solution
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port-Solution
2021-12-15 19:21:17 - last edited 2021-12-15 19:50:29

 

mfran2002 wrote

update:

 

step1:

to block the traffic from the webserver to the home lan, I have enabled a rule on the firewall of the router tplink

 

deny ALL from webserver lan (192.168.1.0/24) to home lan (192.168.178.0/24)

 

the only problem (maybe) is that with this rule I also reject teamviewer traffic from outside: to allow, I should remove the modemISP (192.168.178.1) from the firewall rule...and I don't know if it can be safe... any idea?

@mfran2002 

 

Yes, that's what you'll have to do - exclude the modemISP (192.168.178.1) from that rule.

This way the devices in 192.168.1.0/24 will have access to Internet through home lan GW (192.168.178.1 - modemISP), but the rest of the home lan (192.168.178.0/24)

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
Recommended Solution
  2  
  2  
#5
Options
6 Reply
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port
2021-12-15 10:46:54 - last edited 2021-12-15 11:22:27

@mfran2002 

 

You should set TD-W9970 in Wireless Router mode.

Thus, when connected on its LAN4/WAN port to your ISP router LAN4 port it will separate its LAN in a different subnet.

You'll introduce a double NAT this way but this is what you're trying to achieve - isolate your WebServer in a different subnet.

Remember that you'll need to configure a Virtual Server on TD-W9970 to be able to access WebServer from the Internet:

 

In this scenario you'll need to configure Virtual Server (Port Forwarding) on your ISP Router to the TD-W9970 WAN port IP address (which is in your ISP Router LAN subnet).

Also you'll need to configure as a Virtual Server on the TD-W9970, the LAN IP address of your WebServer.

 

Here you can set the ping behavior:

 

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  1  
  1  
#2
Options
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port
2021-12-15 11:56:27

Hi @terziyski  and many many thanks for your suggestions!

 

really appreciated

 

I followed your suggestion and first of all I have switched to Wireless Router mode (the initial configuration was the original one, from the farm).

 

My webserver has taken IP address from TD-W9970 and this one has taken its IP (home_lan side) from the modem ISP: good

 

then I tried to see if the subnets (home_lan and webserver_lan) were separated:

 

my home_lan can't reach the webserver: ok

the webserver can reach my home_lan, it can navigate and ping as well


before to go ahead: how can I sort this? indeed my main goal is that from webserver nobody can reach my home lan...

 

 

 

  1  
  1  
#3
Options
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port
2021-12-15 16:06:26 - last edited 2021-12-15 16:08:50

update:

 

step1:

to block the traffic from the webserver to the home lan, I have enabled a rule on the firewall of the router tplink

 

deny ALL from webserver lan (192.168.1.0/24) to home lan (192.168.178.0/24)

 

the only problem (maybe) is that with this rule I also reject teamviewer traffic from outside: to allow, I should remove the modemISP (192.168.178.1) from the firewall rule...and I don't know if it can be safe... any idea?

 

 

step2:

to be able to reach the webserver via http from outside I created two forwarding port rules:

 

  1. forward http traffic (port 80) to router TPLINK (192.168.178.149)
  2. forward http traffic (port 80) to webserver (192.168.1.2)

 

 

  1  
  1  
#4
Options
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port-Solution
2021-12-15 19:21:17 - last edited 2021-12-15 19:50:29

 

mfran2002 wrote

update:

 

step1:

to block the traffic from the webserver to the home lan, I have enabled a rule on the firewall of the router tplink

 

deny ALL from webserver lan (192.168.1.0/24) to home lan (192.168.178.0/24)

 

the only problem (maybe) is that with this rule I also reject teamviewer traffic from outside: to allow, I should remove the modemISP (192.168.178.1) from the firewall rule...and I don't know if it can be safe... any idea?

@mfran2002 

 

Yes, that's what you'll have to do - exclude the modemISP (192.168.178.1) from that rule.

This way the devices in 192.168.1.0/24 will have access to Internet through home lan GW (192.168.178.1 - modemISP), but the rest of the home lan (192.168.178.0/24)

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
Recommended Solution
  2  
  2  
#5
Options
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port
2021-12-15 19:52:36

@terziyski you are my legend!

 

MANY MANY TAHNKS!

 

without your help I would never sorted this out!

 

if you come in London (better after omicron...), wagons of beer approaching for you my friend!

 

cheers!

  1  
  1  
#6
Options
Re:TD-W9970: how to connect to a modem ISP via LAN/WAN port
2021-12-15 20:35:39 - last edited 2021-12-15 21:37:00

@mfran2002 

 

Glad that you've sorted this out...) Cheers.

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  1  
  1  
#7
Options

Information

Helpful: 1

Views: 2537

Replies: 6

Related Articles
TD-W9970 as Modem
863 0
VOIP for TD-W9970
2487 0
TD-W9970 wifi drops
1027 0
TD-W9970 V1 questions
817 0
Port Forwarding for DVR on TD-W9970
1198 0
TD-W9970 Not recognising any Usb devices
3308 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.