CG3000-2STAUS WiFi Router. Trying to configure as a WiFi AP but unable to route to internet gateway

Question

I have an old Netgear WiFi router which Optus left me when I went on NBN. I want to use the old router as a WiFi AP to connect IoT devices to and keep these segregated from other devices on the home network. However, I cannot get the Netgear to route traffic to the "main" router and internet. There is a UI showing the internet gateway details but it will not allow me to enter the IP address of the main router as the gateway address. Can anyone help me with this?

antinode · Answer

&gt; [...] I want to use the old router as a WiFi AP to connect IoT devices&gt; to and keep these segregated from other devices on the home network.&gt; [...]&nbsp;&nbsp;&nbsp; A wireless access point would not really segregate anything fromanything, but that might be the best approach.&nbsp; Configuring the CG3000v2as a (second) router would provide some separation, but perhaps lessthan you might think.&nbsp; And that would be more complicated.&nbsp;&gt; [...] I cannot get the Netgear to route traffic to the "main" router&gt; and internet. [...]&nbsp;&nbsp;&nbsp; "cannot" is not a useful problem description.&nbsp; It does not say whatyou did.&nbsp; It does not say what happened when you did it.&nbsp; As usual,showing actual actions (commands) with their actual results (errormessages, LED indicators, ...) can be more helpful than vaguedescriptions or interpretations.&nbsp;&gt; [...] There is a UI showing the internet gateway details [...]&nbsp;&nbsp; It's not showing them to me.&nbsp; With my weak psychic powers, I can'tsee what you connected to what, or how you configured anything.&nbsp;&gt; [...] it will not allow me [...]&nbsp;&nbsp;&nbsp; How, exactly, does it try to stop you, threats and menaces, or some(invisible) error message, or what?&nbsp;&nbsp;&nbsp; If you do decide to use the CG3000v2 as a (second) router (presumablyconnecting its WAN port to a LAN Ethernet port on your (unspecified) newrouter), then you'd probably need to configure the CG3000v2 with adifferent LAN subnet (address range) from that used by your(unspecified) new router, and then configure a suitable static route onyour (unspecified) new router, so that devices on its LAN subnet willhave a chance of getting a message passed to the CG3000v2, instead ofeverything with a foreign-looking destination getting sent to your ISP.

PaddyButler · Answer

Hi, Apologies for lack of clarity and information (and assumptions re your psychic powers), I wasn't even sure I would get a response, let alone such a fast one, thank you.

I attach a diagram of what I am trying to achieve with two subnets, one on each router. The NetGear is WiFi Router2 in below diagram and Sagemcom (new) is Router1

The tick marks are ping results. From Subnet1 to SSID3, I am able to ping 192.168.0.130 but not 133. I suspect 130 is a second IP address for Router1.

The Advanced Home screen of the NetGear router is as shown below. I don't know where to set the Default Gateway address (which should be 192.168.0.1?). I guess it cannot get an IP address without that since it will use it for DHCP? Maybe I need to set this as static, as you seem to be suggesting in your final comment? Anyway, thanks again for your help and I will continue my quest.

PaddyButler · Answer

I think I need to somehow assign WiFi R2 a static "internet" address from the WiFi R1's subnet. And then set the Gateway and DNS address to that of WiFi R1.

However, these options are not availabe in the WAN Setup or Internet Setup tabs on WiFi R2 (NetGear). Is it possible that the ISP has disabled these options? Or that it is not configurable on this router model and I need to purchase one that does have them?

antinode · Answer

&gt; I attach a diagram [...]&nbsp;&nbsp;&nbsp; It might be safer/clearer to use a /24 subnet on each router.&nbsp; Iwould not bet that anything else gets tested, and that'd make it easierto see which addresses are in which subnet.&nbsp;&gt; [...] I suspect 130 is a second IP address for Router1. [...]&nbsp;&nbsp;&nbsp; A router does not have _an_ IP address.&nbsp; Each network interface in arouter has an IP address.&nbsp; So, each router here has a WAN/Internet IPaddress and a LAN IP address.&nbsp;&nbsp;&nbsp; The WAN/Internet IP address on the CG3000v2 must be on the LANsubnet of the main router.&nbsp; Documentation on the CG3000v2 seems sparse,at best, so I'm not sure exactly where/how you'd configure this stuff.(If it's possible.&nbsp; Normal Netgear cable modem+router models lack aWAN/Internet Ethernet port.&nbsp; That makes then simple to deal with in sucha system: You can't do it.&nbsp; Exactly how much you _can_ do with aCG3000v2 is not immediately obvious (to me).)&nbsp;&nbsp; I'd configure the main-router LAN as "192.168.0.1/24" (perhaps withits DHCP pool as ".8"-".254"); the CG3000v2 WAN/Internet interface as"192.168.0.2/24"; and the CG3000v2 LAN as, say, "192.168.2.1/24".&nbsp;&nbsp;&nbsp; The main router would then need a static route (not related to havingany static address) like:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Destination: 192.168.2.0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Subnet Mask: 255.255.255.0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Gateway: 192.168.0.2&nbsp;&nbsp; I don't know how you'd configure that on your (unspecified) mainrouter.&nbsp;&nbsp;&nbsp; Whether it would make sense to enable NAT on the CG3000v2 is notclear to me.&nbsp; Some experimentation might be needed.&gt; I think I need to somehow assign WiFi R2 a static "internet" address&gt; from the WiFi R1's subnet. And then set the Gateway and DNS address to&gt; that of WiFi R1.&nbsp;&nbsp; No.&nbsp; "WiFi" is not a separate network, or subnet, or anything.&nbsp; It'sjust part of the LAN (subnet) of the relevant router.

PaddyButler · Answer

Many thanks for your suggestions and advice, it has been a really helpful discussion for me.&nbsp;&gt;&nbsp;It might be safer/clearer to use a /24 subnet on each router.&nbsp; Iwould not bet that anything else gets tested, and that'd make it easierto see which addresses are in which subnet.&nbsp;I tried that (I used 192.168.1.0/24) and I agree it is easier but still no joy. In my main router (which is a Sagemcom&nbsp;F@ST3864V3HP by the way) on the LAN setup, there is an option to "Configure the second IP Address and Subnet Mask for LAN interface" which I selected and entered 192.168.1.0 and 255.255.255.0. This automatically created a route to that address from main router.&nbsp;&gt;&nbsp;I'd configure the main-router LAN as "192.168.0.1/24" (perhaps withits DHCP pool as ".8"-".254"); the CG3000v2 WAN/Internet interface as"192.168.0.2/24"; and the CG3000v2 LAN as, say, "192.168.2.1/24".&nbsp;The problem seems to be in setting the WAN/Internet i/f address - there just doesn't seem to be a way of doing this. As I showed in the screenshot, there is no IP Address/Mask shown for the Internet port and no Default Gw or DNS and I cannot see how it can be set.&nbsp;&gt;Normal Netgear cable modem+router models lack aWAN/Internet Ethernet port.&nbsp; That makes then simple to deal with in sucha system: You can't do it.&nbsp; Exactly how much you _can_ do with aCG3000v2 is not immediately obvious (to me).)&nbsp;I think that is the answer unfortunately - No can do.&nbsp;A final question - my main router&nbsp;by default, allows all outgoing IP traffic from LAN, and&nbsp;blocks all incoming traffic. This presumably enables all my IoT devices to communicate with their servers (and other devices to access www etc.) by allowing them to set up TCP connections but blocks any attempts by external devices to initiate TCP connection to them, right? So I guess this provides some security but is it sufficient? What about UDP, I guess that is covered by the same rules as it doesn't specify the protocol.&nbsp;Thank you again for your valuable support.&nbsp;&nbsp;

Forum Discussion

CG3000-2STAUS WiFi Router. Trying to configure as a WiFi AP but unable to route to internet gateway

6 Replies