Question

I have a RUT955 as main network in building 1. It has WAN (starlink) and GSM SIMs(2). Subnet is 10.0.0.0/24

I have building 2 with RUT240 with subnet 10.0.2.0/24. This RUT is connected to the RUT955 Wireless as its only source for WAN. RUT240 has IP 10.0.0.250.

RUT955 (10.0.0.254) -------- WIFI ------- RUT240 (10.0.0.250) ----------clients (10.0.2.x)

 |

---------------------clients (10.0.0.x)

I cannot reach the subnet of RUT240 from the RUT955 network (any of the 10.0.2.x IPs)

I tried static route

10.0.2.0 255.255.255.0 Gateway 10.0.0.250

but this doesn't work.

Any ideas? Thanks!

Answer 1

Hello,

Is the IP 10.0.0.250 of RUT240 a LAN IP or IP of wireless client interface provided by RUT955 DHCP? Is the LAN IP of rut240 also within the subnet of 10.0.2.x?

I have replicated a similar scenario with the following setup and configuration:

RUT955 (10.0.0.254) -------- WIFI ------- RUT240 (10.0.2.1) ----------client device (DHCP lease from RUT240 10.0.2.x)

RUT955 LAN settings:

Static route in RUT955 (10.0.0.194 is the IP provided to RUT240 wireless interface):

RUT240 LAN Settings:

RUT240 Wireless client interface :

Modify RUT240 firewall zone forwarding for LAN zone by adding: 

Pings in RUT240 are enabled by default, thus the device should reply by now, however, in order to access the device itself, remote HTTP(S) or SSH needs to be enabled too in RUT240.This can be done in System -> Administration -> Access control:

With this setup, I was able to access device 10.0.2.128 connected to RUT240 from device 10.0.0.113 connected to RUT950.

Best regards,

Comments

Thankyou! This really helped. You guessed right - the RUT240 has IP from RUT955 of 10.0.0.250. The RUT240 own LAN IP is 10.0.2.254.

The missing piece I needed was the interzone forwarding, and also the static route setting on the 955 should have metric 0.

I also noticed all my LAN interface settings for IP4 gateway and broadcast were empty for both routers so I entered values in there also.

I still cannot reach the RUT250 WebUI from 955 LAN at 10.0.0.250, even with Access Control enabled for remote. But I can reach it with 10.0.2.254 ok.

Thanks again!