[mbglobal]

I want to create two different subnets (that can't see or access each other) using two routers and 1 DSL line.

e.g. Router A - DSL connection - 4 ports - DHCP range 192.168.1.x - z
Subnet Mask: 255.255.255.0

Router B - connection by WAN to LAN port of A - DHCP enabled - DHCP range 10.0.0.1 subnet mask: 255.0.0.0

I've read about 100 scenarios on different forums stating that this set-up does not work, but I had it running for 18 months until my old DSL/modem router died and although I bought the same model and use the same configuration and set-up it does not work anymore.

Bummer!

Any and all suggestions are appreciated.

Thanks

MB

[zx10guy]

If I understand your initial setup, you would have to put the WAN port of Router B on the 192.168.1.0 subnet. So you would have Router A like this: WAN port ISP public IP and LAN on 192.168.1.0/24. Router B would be WAN port on 192.168.1.0/24 and LAN on 10.0.0.0/8. But doing it this way does not fulfill your requirement. You will get some isolation but the 10.0.0.0 subnet will be able to see and access 192.168.1.0.

What you could try doing is putting Router B on a DMZ off of Router A. Another method is to get totally different router....a router which supports multiple routeable interfaces.

[JohnWill]

With two SOHO routers, you'll still have an issue that the secondary daisy-chained router can see the workstations on the primary router.

I wonder if using DD-WRT on a compatible router would solve this problem? I know multiple subnets are supported with DD-WRT, maybe that's a one router solution on the cheap?

[mbglobal]

Thanks guys
That gives me something to think about.
the issue of router B seeing a is not so critical. I can just have my office computers on B (safe) and I don;t care what happens on A anyhow.
What router model would you recommend for the DMZ approach?

Thanks again MB

[sdikevin]

What you need here is a router that support VLANs or better yet a layer 3 switch that supports VLANs... I don't know if the home routers/switches that you can get at best buy offer this feather.

[JohnWill]

Well, since the requirements have been relaxed, you can just daisy-chain two SOHO routers to accomplish the task. Put all the "secure" computers on the secondary router, configure the primary router's DMZ to put the secondary router's static WAN address in the DMZ.

This will allow you to have full port forwarding capability on the secondary router.