One modem, multiple routers...

[Kantastic]

Hi guys, long time no see! The last time I was really active on TPU must have been when I was still in high school. Anyway, I have some pretty amateur networking questions to ask you guys.

Suppose that I am currently subscribed to cable internet from an internet service provider. I would like to share this connection with neighbors to the left and right of my apartment, but would like for each apartment to have its own router and unique SSIDs.

I currently have one modem that is connected to the ISP's main hub, and an Asus AC68U router connected to the modem. Is my hypothetical configuration as simple as attaching an ethernet cable (from my AC68U router) to each of the routers located in my neighbors' respective apartments?

Edit: I probably should have written a better title!

 

[brandonwh64]

double NATing will cause issue for the end users on services such as XBOX live and such. I would suggest looking into this asus router and see if you can create different IP subnets with DHCP pools. Also you would want to check to see if you can assign these subnets to different interfaces. You MAY can do this if you flashed with DD-WRT but I am not sure. Next I would add just a unmanaged switch with access points at each apartment. You can just use your router as the main router and turn DHCP off on the others and just use them as a switch/AP but that will have them on your network and could cause potential security issues if you piss off the smart neighbor

 

[FireFox]

double NATing will cause issue for the end users on services such as XBOX live and such.

I tried it once and it was a nightmare

 

[FR@NK]

would like for each apartment to have its own unique SSIDs.

You can do this all using one router. You create a virtual network for each apartment with its own SSID. They will be separate from each other yet still have internet access.

 

[remixedcat]

why not get one router and then some APs and VLAN stuff out? each neighbor has thier own VLAN.... Good starter is a ERL or meraki Z1 for the routers and you can drop some Xclaim Xi3s or UBNT ACAPLRs.....

 

[Kursah]

Be careful doing this...not generally legal and can cost you should you get busted...but as-long-as you're not charging them anything for it you wont' get busted AS badly. But I still would like to help you setup your access points for your neighboring sites via Ethernet runs. First you need to figure out how and if you can do the runs...do this before you do anything else. If not...honestly don't waste your time going any further. In-wall/ceiling is recommended but might not be an option for you or would be a huge pain in the ass.

I've double and triple NATed more times than I care to admit, but honestly in most situations most modern routers handle double-NATing just fine, though as stated some services don't play with it very well or at all so ymmv...also depends on firewall rules and abilities. You could consider placing the second router in the DMZ for the second router's IP address...I would recommend a different subnet for the second router to keep things simple, so if you're on 192.168.0.0, put them on 172.16.54.0 or 192.168.255.0 or whatever. But you still run some of the s


An option since you have an Asus router is to create multiple SSID's in Guest Network, and you can isolate them using the Guest Network feature...which I'm assuming yours has as my AC-66U does. You could create the separate guest networks with unique SSID's and passwords...they'll be isolated from your LAN so they won't be able to access your resources...though they WILL be on the same subnet as you unless your router's firmware had different options or you use something beyond AsusWRT or Merlin..not sure if Tomato or DD-WRT would allow you to manage multiple subnets and dhcp servers on that device...likely not.

But if you create those Guest networks, set the other two routers to "Access Point Mode", many newer and even 5+ year old routers have this option...consider a firmware upgrade or modded/custom firmware if that's an option if necessary. Then just have them broadcast the guest networks for each user. This would make your network larger, and stress your main gateway (the Asus) more as well...but would be a good way to go IMHO.


Another option with modded firmware possibly is to change ports 3 and 4 (or whichever you choose) to a different VLAN. Using a different VLAN would allow you to block the route from say VLAN2 (for them) from VLA1 (for you), and nobody would know the difference...this usually happens in a more advanced network switch, which could also be an option as well if you're able to acquire a decent Layer-3 or VLAN-capable 4+ port (how many you need plus a few, usually they go 4/8/16/24/48...the more ports the more $$$).

Honestly if you can tag each port, like a SonicWall and PFSense does, that'd make things super easy but many home-grade routers don't have this capability/feature set.

But it appears with DD-WRT you CAN use VLAN's, so these links might be helpful:

http://www.coertvonk.com/technology/networking/dd-wrt-heading-two-networks-asus-rt-ac68u-11717
http://www.dd-wrt.com/phpBB2/viewtopic.php?p=773584

Make your network VLAN1, guest network 1, VLAN2 and guest network 3, VLAN3...or whatever you want really. Don't allow any routing between VLAN's. Then use one run for neighbor site A and one for B off of those specific ports in Access point mode. This will be more complicated to setup but will provide better security and isolation between all 3 networks.

Though you might try the Guest Network SSID feature first. My AC66U can create three 2.4GHz and three 5GHz Guest SSID's. If your friends want their own LAN's...well then they need you to either VLAN and manage your setup with more complication or pay for their own shit.

 

[arbiter]

Ok i have multi routers in my house. I doubt you need to worry about port forwarding. Other question is if you are using wireless to link them up which i have Ethernet cable to do mine. I have 1 with DHCP enabled which is router with modem using 192.168.1.1. The 2nd router connected via wire has ip 192.168.1.2. I have DHCP turned off in the 2nd router cause since DHCP requests are multi cast they get boardcast over all the lan ports and first router will handle the DHCP request. you would be able to have separate wireless SSID's then.

 

[lorraine walsh]

Attach an Ethernet cord from a LAN port on the first router to the WAN or modem port on the second router. Power on the router. Attach your computer to a LAN port on the second router using an Ethernet cable. Open your Web browser and go to the IP address of the second router.

 

[Mussels]

have one central router, and put their routers after that one.

disable DHCP on their routers if you want full control of their networks (your DHCP/IP's, etc) or give them their own DHCP/subnets if you want their networks to be seperate to yours.

I recommend a router with bandwidth control (i like TP links for that) so you can limit their entire connection (bandwidth limit the IP their router has from yours) and prevent them hogging the connection.


if they're gunna be on wifi, just use guest AP's from your router if they're in range. Many routers can have multiple SSID's, with user isolation and such.

 

[arbiter]

Attach an Ethernet cord from a LAN port on the first router to the WAN or modem port on the second router. Power on the router. Attach your computer to a LAN port on the second router using an Ethernet cable. Open your Web browser and go to the IP address of the second router.

Um you want to use Lan ports to link them not wan port on 1 of them. Less you can assign the port to lan then it would activate the firewall so can't access admit less you enable access to it vs wan port but then still it won't forward DHCP from it.