First post on this forum, please be don't be too rude
I live in France and have an FTTH subscription at Sosh/Orange. The ISP provides 3 devices of their own: an ONT / Optical to Ethernet converter (Huawei), a router (Livebox 4, Sagemcom) and a TV "decoder" (Sagemcom). I have something like 15 devices connected to the Internet at home, some of them needs fixed IP addresses and some others even need to be accessed from the Internet through a domain name (self hosted server). This makes many rules to configure and it was becoming tedious to manage (DHCP, Firewall, WiFi concerns, ...).
A year back I decided to buy a router to put behind my ISP router. The idea was to:
- Not be limited regarding the Local network configuration
- Be able to configure Layer-2 bridges (WDS)
- Keep most of the configuration in my own equipment, being able to switch to another provider without much configuration to change
- Use only my own router as a WiFi access point
- (bonus) Be completed isolated of the ISP's "control scope"
The Livebox 4 (ISP's router) contains specific configurations, at least for IPTV. That's mainly why I decided to not drop this front router completely.
The (second) router -the one I bought- is a Linksys WRT1200AC, with OpenWRT installed on it of course.
The physical wiring is as follows:
FTTH -- ONT -- Livebox 4 -- WRT1200AC -- NAS | +------ Computers TV decoder +------ WDS repeater +------ Smartphones +------ SmartHome devices
First point: Access the NAS from the Internet
Unfortunately my wish to have the most simple front router configuration didn't become real.
Because the second router has its own firewall, I have first decided to put it in the DMZ of the front router. But this doesn't make my NAS accessible from the Internet.
Then I have disabled the DMZ and have created port forwarding rules, exactly like the ones I have set in the second router. Now it works, but this setup introduces more hassles than flexibility!
What is the recommended way to configure my front router as a "transparent bridge"? I must precise that it doesn't come with a built-in "bridge mode", unfortunately.
Would I lose the TV service?
Here is the Livebox (front router) configuration:
- DHCP enabled (mask 255.255.255.0)
- Fixed IP address: 192.168.0.1/24
- Second router fixed IP address: 192.168.0.11/24
- IPv6 enabled
- Firewall set to "medium (recommended)": "The firewall filters all the inbound connections. Outbound connections are allowed, except for the Netbios services."
Note: I haven't tested to set the firewall to "weak" yet ("The firewall doesn't block any inbound connection. Please note that a connection initiated from the Internet could be rejected if no corresponding NAT/PAT rule has been created.").
Second point: Make use of IPv6
Third point: Put the TV decoder inside my LAN (behind the second router)
Let's close the first issue before opening others