Static route not working?

mu-777

My LAN of the "swisscom internet box standard" is configured as 192.168.1.0/24.

I want it to forward the network 192.168.2.0/24 to the gateway (router) 192.168.1.86
I configured this in network / static routes as:

192.168.2.0 255.255.255.0 192.168.1.86

but it is not working.

Any Ideas?

Richie

Hi mu-777,

If this is the only configuration you did, then LAN (and WLAN) clients on your internet box standard should be able to reach destinations on 192.168.2.0/24 LAN by means of being redirected to gateway 192.168.1.86. One problem could be that certain clients will reject ICMP redirect routing rules received. You may want to check this. Another potential problem may be on your gateway 192.168.1.86: possibly a firewall forward rule may drop packets from 192.168.1.0/24 to 192.168.2.0/24 or vice versa or there might be mutual routing rules missing.

If you want to be able to forward traffic coming from the internet to your internet box standard further to a destination on 192.168.2.0/24, then you would also need to configure the respective port forwarding rule on the internet box standard, or you may wish to configure 192.168.1.86 as DMZ destination.

If your setup is a bit more complicated, like having to or more gateways routing from 192.168.2.0/24 to the internet, then configuration on your internal gateway may be a bit more complicated. Or iv you even have more than one gateway serving 192.168.2.0/24 it will be even a bit more complicated to make sure clients on the 192.168.2.0/24 network segment "know" which gateway to use to access 192.168.1.0/24 or the internet. Possibly by defining on of the gateways as default gateway, with a static route to 192.168.1.0/24 redirected to the other gateway.

If you are sure your configurations on the internal gateway are correct and it is still not working, I'd need a bit more information about your setup to be able to help.

mu-777

Hi Richie

No, I did not add any other routes. And my configuration is as simple as that:

PC (192.168.2.22/24) <-LAN2-> (192.168.2.1/24) Router (192.168.1.86/24) <-LAN1-> (192.168.1.1/24) Internet Box...

When I ping the Internet Box from the PC I can see that ICMP-Requests are sent by the Router on LAN1. But there is no reply from the Internet Box. But there is an entry of the Internet Box in the ARP-Table of the Router. The connection must be ok. (ARPING is also working.)

My first guess was that the firewall is interfering. I stoped it but this did not change anything.

For me it looks as if the Internet Box is just not routing to the static routes.

Black Mamba

@mu-777

Several machines with static non-domain DHCP IP addresses that are working fine. With standard router configurations, there is no reason for the 192.168.1.xxx address to block.
To do this, you must disable DHCP in the device and enter the IP configuration manually.

These addresses have been defined in the clients (the hosts) and not in the gateway. If this is the case, these addresses must be changed in each of the clients (not in the gateway):
- or request a dynamic IP which will then be allocated by the gateway. If you choose dynamic IP, you can also ask the gateway to assign an IP defined in the webUI of the gateway.
- or define a fixed IP outside the DHCP range.

The configuration of the Internet Box was also part of the correction, the following settings must be made:
- Activation of static IP within the network for synology
- Activation of the DMZ (demilitarized zone) on the synology
- Spanning-tree activation
- Disabling IPv6
- Redirection of router input port to synology input port

If the DMZ port does not suit you, 2 other possibilities
- which would be the IP passthrough, which is only available with the CentroBusiness 2.0 router which is normally for professionals
- or take a third-party router managing bridge mode

But if you don't need 2 lan networks with different IPs, use the DMZ port, it redirects all internet traffic on it, and you wouldn't have any packet loss...

PS: on the other hand, you will need to secure your synology router as much as possible...

Meilleures salutations de la Communauté francophone

Customers help customers