Help needed with settings on AC1200 Archer A6 - protected subnets

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Help needed with settings on AC1200 Archer A6 - protected subnets

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Help needed with settings on AC1200 Archer A6 - protected subnets
Help needed with settings on AC1200 Archer A6 - protected subnets
2023-08-04 06:10:45 - last edited 2023-08-08 06:18:05
Model: Archer A6  
Hardware Version:
Firmware Version:

I have bought an Archer A6 to use as a second ethernet router (R2) sharing one internet connection with another router (R1) which is already connected to the internet. The idea is that the connections and devices made via the Archer A6 will be secure and not accessible to those those users of the internet that are using the first router (R1). I have these instructions from another forum:

----------------------

protected subnets
 

I want to connect 2 WiFi routers to create 2 separate networks. Is it possible to isolate the systems from one another?

yes it's possible ...

Basically the subnet router#1 for shared usage is attached to the modem and the protected subnet router#2 attaches to router#1

Each router has one default route and no static routes which then forces all outbound traffic on router#1
to the modem and away from router#2. Without a route, subnet#1 can not access subnet#2

 

Code:

modem====(wan)router[B]#1[/B](lan#1)-----(wan)router[B]#2[/B](lan ports) - - - private systems
            |       192.168.1.1                192.168.2.1
            V
           shared access systems

 

You can use WiFi on either or both routers; just set different SSID, Channels, and encryption codes

When setting the config's (both of them), be sure to set a new password which will disallow Internet access to the settings!

Get router#1 running first and test Internet access, then move on to router#2

*Caution* Always change router configurations using ONLY a wired connection!

On router #1

  • set the router address specifically to 192.168.1.1
    which serves as a note as to which router you're connected to
  • set the DHCP range to 2-10
  • save the settings
  • now setup any wifi changes as applicable
  • and change the admin password
  • when you save this time, the router will restart and you WILL loose the connection


On router #2

  • set the router address specifically to 192.168.2.1
  • set the DHCP range again to 2-10
  • set the WAN side address to 192.168.1.100 (notice it's above router#1 item (b)
  • set the MASK to 255.255.255.0
  • set the gateway to 192.168.1.100
  • set the DNS to 192.168.1.100
  • save the settings (which likely will drop your connection due to the router address change)
    just reconnect and continue
  • setup the WiFi settings
  • change the admin password and save again


Test router#2 connections with the browser. Good results prove you're getting proper routing through router#1 AND that any DNS requests are being resolve.

Now test isolation; connect one system to both routers
from a system connected to router#2

ping 192.168.2.1 (must succeed)
ping 192.168.1.1 (should succeed)
ping 192.168.1.2 (should fail)​

from a system connected to router#1

ping 192.168.1.1 (must succeed)
ping 192.168.1.2 (should succeed)
ping 192.168.2.1 (should fail)
ping 192.168.2.2 (should fail)​

We can enhance the protection on all systems attached to router#2 with firewall rules, but let's deal with that latter...

-----------------------

Can someone please direct me to which of the advanced screens on the Archer A6 where I enter these settings (repeated below):

On router #2

  • set the router address specifically to 192.168.2.1
  • set the DHCP range again to 2-10
  • set the WAN side address to 192.168.1.100 (notice it's above router#1 item (b)
  • set the MASK to 255.255.255.0
  • set the gateway to 192.168.1.100
  • set the DNS to 192.168.1.100

 

Thank you

  0      
  0      
#1
Options
1 Accepted Solution
Re:Help needed with settings on AC1200 Archer A6 - protected subnets-Solution
2023-08-04 09:22:27 - last edited 2023-08-08 06:18:05

  @LeveeBank 

 

For the router#2 WAN port:

 

 

For the router#2 LAN port:

 

 

For the router#2 DHCP server:

 

 

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
Recommended Solution
  1  
  1  
#2
Options
2 Reply
Re:Help needed with settings on AC1200 Archer A6 - protected subnets-Solution
2023-08-04 09:22:27 - last edited 2023-08-08 06:18:05

  @LeveeBank 

 

For the router#2 WAN port:

 

 

For the router#2 LAN port:

 

 

For the router#2 DHCP server:

 

 

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
Recommended Solution
  1  
  1  
#2
Options
Re:Help needed with settings on AC1200 Archer A6 - protected subnets
2023-08-04 22:54:38

  @terziyski Thank you for your assistance - your images assisted considerably. I am testing the two networks sharing one internet connection and all is working as expected. Cheers from Australia.

  0  
  0  
#3
Options