How to configure the router when the gateway is in bridge mode?

2

1

I was given a VDSL gateway (ZyXel) by my ISP (online.nl) whose performance is low, and therefore I bought a router (ASUS RT-AC66U) to improve the LAN/WLAN/home networking performance.

Therefore I want to have something similar to this: enter image description here

I want my NAS to be connected to the Internet and therefore only one routing with NAT is enough and thus I bridged mode the gateway. I know how to bridge mode the gateway, but every time I do it, I lose internet connection.

  • Do I need to do something special in the router when I setup the gateway to bridge mode? Which exact WAN configurations?

  • Can the router work directly as a VDSL gateway, removing then the gateway provided by the ISP?

João Pimentel Ferreira

Posted 2019-08-15T12:42:42.343

Reputation: 207

The text-labels in the image do not match the question text. What is the P-2601HN-F1? RT-AC66U or N66U? If N66U, why do you need the other modem? – harrymc – 2019-08-15T13:03:02.513

@harrymc yes, the image is merely an example. Do you mean why do I need the router? To improve Wi-fi and CPU performance. The gateway given by the ISP is really poor. – João Pimentel Ferreira – 2019-08-15T13:06:37.417

The AC66U does not support VDSL, so you can't get rid of the modem. Where here is the DHCP master? I also don't understand your first question. – harrymc – 2019-08-15T13:17:30.283

@harrymc what do you mean by DHCP master? The question is: if the gateway is in bridge mode, what WAN settings shall I put in the router? – João Pimentel Ferreira – 2019-08-15T17:03:40.297

I mean which box is master and which only a repeater. – harrymc – 2019-08-15T17:04:34.420

@harrymc I have no repeaters. I have a ZyXel VDSL gateway that connects to the Internet, and whose port LAN1 then connects to the WAN port of the ASUS router. – João Pimentel Ferreira – 2019-08-15T17:06:33.497

Answers

2

I would just like you to note that exposing a NAS to the Internet may be a big security hole. NAS devices are not well protected, and when infected can easily infect every other device on the local network.

Thus warned, here are some answers.

Do I need to do something special in the router when I setup the gateway to bridge mode? Which exact WAN configurations?

You have set up a double-NAT situation by connecting the ZyXel to the WAN port of the ASUS router. Connecting the ZyXel LANx to an Asus LANx port will make the network into single-NAT.

For more information see :

Can the router work directly as a VDSL gateway, removing then the gateway provided by the ISP?

The AC66U does not support VDSL, so you can't get rid of the modem.

harrymc

Posted 2019-08-15T12:42:42.343

Reputation: 306 093

Thanks, I read your great answer. But I have a gateway not a modem. May I assume that my gateway is equivalent as a modem+1st router? – João Pimentel Ferreira – 2019-08-15T19:11:03.383

1Yes, that's the way things work for just about all devices. – harrymc – 2019-08-15T19:12:28.957

If I configure the ZyXel as bridge mode, may my asus work as primary router (zyxel LAN -> asus WAN)? – João Pimentel Ferreira – 2019-08-15T19:13:49.453

Regarding your answer on the second configuration (LAN to WAN) what happens if I configure the first router to bridge mode? Will it be similar to the first configuration? I want my asus to be the main router and not merely a repeater. – João Pimentel Ferreira – 2019-08-15T19:18:39.120

1The answer is positive, if bridge mode turns off the ZyXel DHCP-master function, requiring perhaps giving it a static IP that is excluded from the Asus DHCP IP address-range (as well as other adjustments as required). As the Asus is a better device, that may give more control of the network. – harrymc – 2019-08-15T19:19:59.937

Thanks again for the answer; btw, can you also check my answer just to be sure that I wrote everything correctly? In any case your answer is the accepted one. – João Pimentel Ferreira – 2019-08-15T23:02:41.217

1

Just to let the readers know the solution I found for my issue (now, it's working like a charm):

Cabling

Connect the LAN port (LAN1 to be sure) of the gateway (gateway=modem+router, in my case a ZyXel) to the WAN port of the router (in my case ASUS RT-AC66U)

Something similar to this (hardware brands are just exemplary):

enter image description here

enter image description here

Gateway

On the gateway GUI/portal:

  1. go to "broadband" section or similar, set it to bridge mode
  2. go to "home networking" section or similar, disable DHCP
  3. go to "security" section or similar, disable firewall

Router

On the router GUI or portal, got to WAN section:

  1. clone MAC address (your ISP may block any device except the one with the MAC address of the known gateway). My router has that option:

enter image description here

  1. set to automatic IP or DHCP (if your ISP does not give you a static IP, like it is normal)

  2. in my ASUS I still set DHCP query frequency to "normal" instead of "agressive"

Conclusion

Now I really have a nice bridged network between both routers, that is the 1st router (embedded in the gateway) and the 2nd router, being my 2nd router the main only true router (routing data with firewall, NAT, etc.) and not being merely a repeater or an access point.

I did this because the 1st router provided by my ISP has much poorer performance than the 2nd router which I bought separately.

João Pimentel Ferreira

Posted 2019-08-15T12:42:42.343

Reputation: 207

Nicely written, no problem that I can see. Enjoy. – harrymc – 2019-08-16T15:19:47.187

@harrymc thank you – João Pimentel Ferreira – 2019-08-16T15:42:23.503

hey, i know this thread is mega old... but what did you do about WiFi on the Zyxel? Ty! – m1nkeh – 2019-09-11T20:38:15.953

1@m1nkeh I switched it off to avoid duplication of networks. But pay attention that if you switch it off you can no longer configure the Zyxel via wifi. Thus just switch it off after every setting is complete and running smoothly – João Pimentel Ferreira – 2019-09-13T09:01:39.380

Asked: 2019-08-15T12:42:42.343

Viewed: 1 181 times

Active: 2019-09-13T09:07:07.037