DD-WRT :: View topic - Gateway and Router mode setup to create multiple networks (2024)

Router mode does disable NAT, but it also disables connection tracking. And that can cause other problems, esp. given the router is typically used as an applications platform, and NOT just as a pure router. It also assumes you can add static routes to the primary router to establish the routing back to the local network behind the secondary router. Many ISP provided devices do NOT offer that option.

So in general, you're usually better off to leave any secondary routers in Gateway mode unless you have a specific, known issue that makes that unworkable. And in some cases (as I described above), you made have no choice anyway.

Do Router 1 have the Public IP?

Router 1 (Buffalo WZR-600DHP2 DD-WRT v3.0-r44715 std (11/03/20))(Public IP)
Advanced Routing
Operation Mode Gateway
Static Routing
Masquerade Route unchecked
Destination LAN NET: 192.168.11.0
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.111
Interface: Any

Administration > Commands > Firewall
iptables -I FORWARD -s 192.168.1.0/24 -j ACCEPT

Router A (Buffalo WZR-600DHP 22084 Idexx v1.0 (02/13/14))
Basic Setup > WAN Connection Type
Connection Type: Static IP
WAN IP Address 192.168.1.111
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.1
Static DNS 1-3 are all blank.

What am I missing or have wrong?

iptables -t nat -A POSTROUTING -o `get_wanface` -j MASQUERADE

Begin with the basics.

Can you ping Router 1 from Router A?
Can you ping Router 1 from a client behind Router A?

Try 9.9.9.9 for static DNS 1

If possible I would not use static IP for WAN but use a static lease from the primary router.

That way you know what IP addresses are handed out
But that is just me

Ping testing:
Client on Router A can ping
192.168.11.1
192.168.1.111
Cannot ping
192.168.1.1
or a client on Router 1

Router A can ping
192.168.1.1
192.168.11.1
192.168.1.111
1.1.1.1
The WAN IP of Router 1
a client on Router 1

Client on Router 1 can ping
192.168.11.1
192.168.1.111
Cannot ping a client on Router A

Router 1 can ping
192.168.11.1
192.168.1.111
Cannot ping client on Router A

I tried a static DNS on Router A (9.9.9.9) but that did not help.

Change the default gateway on the Client on Router 1 from 192.1.1 to 192.1.111 and redo the test.

If it goes through, check the routes on router 1.

route 192.168.11.0/24 via 192.168.1.111

have a look on those links...

https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point

https://wiki.dd-wrt.com/wiki/index.php/Category:Linking_Routers

as well, follow the gurus guidance !

If i got you correctly...you want 3 separate networks...behind your router 1 ???
Your best bet is...if your router allows it,do a x3 separate Vlans...related to the router 1 LAN ports and than, all those routers will be on a different Vlan, either with net isolation or not, depends what do you need them for....
You may need to update to a newer build, as this build you have is old...sadly there is a lots of WIP on the newer builds especially Brodacom Vlans and ect.