[Headshot_Harry]

Hi all,

Would like some advice / idiots guide if possible to setup the following:

I would like to have two separate networks running at home (192.168.0.XX and 192.168.10.XX) which are completely separate from each other, bar the ability for both to have access to my ADSL internet connection.
I would like one network to act as a ‘Dev’ network (where I might plug client machines into etc) and one as my main network.

So effectively I will have one network which is my main home network (running on 192.168.0.X) which all my home machines etc run on and have access to my main router or gateway to the internet (Gateway IP is: 192.168.0.1), and I will also have a seperate ‘Dev’ network (running on 192.168.10.X) which I can plug any PC / laptop etc that I am working on, into which won’t have network access to the other 192.168.0.X network for security purposes, but will have access to my ADSL gateway so they get internet access (like the other network).

Is this possible? And if so would someone please be able to give me a walkthrough on how to setup it up?

Current hardware is:

Main gateway router: Netgear DG834N on IP 192.168.0.1
Wifi access point: Netgear WNR3500 on IP 192.168.0.125
Spare (unused) router to work on the ‘Dev’ network: Draytek Vigor 2600 IP (to be confirmed) 192.168.10.1

Is it possible to do the above with my existing hardware? (I.e. not have to go out and purchase some expensive equipment)

Many many (many) thanks to any kind soul that is able to help.

[Borzi]

Just to clarify, you want to have one acting as a wireless router and the other to simply plug in ethernet based clients as necessary? Are you wishing to place the routers in seperate areas or connect them both to the same modem?

If you want them in seperate areas with the Netgear connected into the modem and the Draytek seperate you may want to (if possible) bridge the connection if the firmware allows it, that is, the Draytek will wirelessly connect to the Netgear and basically act as a large wireless card for you to plug other clients into. I won't detail it because I'm not sure that entirely matches your question?

[Headshot_Harry]

Hi Borzi,

Thanks for the reply, I'll try to explain in a more accurate way:

I have one internet connection coming into the property, this happens via my Netgear DG834N (modem / router).

This router acts as my main router / switch for my home PC / laptop and other bits and pieces.

I also have a spare (unused currently) Draytek router, This router I would like to use to create a separate network that I can plug client PC's / laptops into. I don't want the two networks to talk to each other, but I would like them to share the internet connection.

So in short, one router that handles the incoming internet connection as well as the 192.168.0.X network, and a second router that handles the 192.168.1.X network. The second router however is plugged into the first router to allow the 192.168.1.X network internet access, but NOT allowing clients on the 192.168.1.X network access to clients on the 192.168.0.X network (and vice versa).

Many thanks again.

[JohnWill]

Well, if you truly want total isolation between the two routers, you'll actually need three of them. Connect two routers to the LAN ports on the primary (ISP connected) router, and they'll be totally isolated from each other.

Connecting one router to the primary router will still allow traffic from the secondary router to machines connected to the primary router. You apparently don't want to allow this, right?

[Headshot_Harry]

Yes, that is correct, I was hoping to stop traffic between the two networks so effectivly they can't talk to each other (create some security betweent he "Dev" network and the primary or "Main" network.

[warrior19]

Sounds like you need seperate VLANs to me. See this link depending on capability of the Drigorr you might have all you need already? SEE BELOW

http://www.draytek.co.uk/support/kb_vigor_vlan.html

[zx10guy]

Well, there are ways but it depends on what you mean by isolated.

One method is to use a router which you can assign multiple subnets to. The Netgear FVS338 has the ability to run multiple subnets on the private side. The catch is...even though the clients can't talk to each other over layer 3 and above, they can from layer 2 on down. Again, it depends on how tightly you want to control traffic. For most people this would work fine.

Second method is to use VLANs to segregate traffic for the two subnets and then have a router which can accept a VLAN trunk. This setup requires a managed switch along with a higher end router/firewall.

Last method is what John is proposing.

[JohnWill]

I was going for the cheap method, SOHO routers can be had for $25-30.

[Borzi]

If you're going to pick up another router, make sure it's one you can shove some custom firmware like DD-WRT on, just worked out my Linksys WRT160N could do so and boy, the customisation it allows is amazing, might help in the future/save a headache.

[JohnWill]

Actually, unless he has some specific requirements, any cheap SOHO router will do what he's asking.

[Borzi]

Agreed but the list of custom firmware compatible routers is pretty large, some of the cheap SOHO one's probably fall in the range and he seems like he likes to experiment somewhat, might be useful.

Was having issues with my router reaching the end of the house, installed the custom firmware, jacked up the transmitting power slightly and saved the cash I would've otherwise spent on a new router.