two router connections to the internet

I'm trying to connect two routers to one Cable modem Internet connection.

The first router which is supplied by work and is setup to provide VPN
access on my work laptop at home over my Cable Internet connection. The VPN
is setup with a fixed IP address that's validated on the work server.

The second router which is a Linksys Wireless router is used for my home
computers to connect to the Internet over the same Cable Internet
connection. This connection is currently setup to use DHCP provided by the
router to the PCs. The address range for this router and PCs is based on
the default range of the router out of the box.

Since both address ranges are different, I tried to setup both routers on a
10/100 hub with the hub linked to the cable modem.

When I do this arrangement, the VPN works fine but I can't get the PCs on
the Linksys hub to see the Internet.

When I ipconfig all equipment, I see all IP address ranges I would expect to
see.

Should this concept work? And if so, any thoughts on what I would change to
make it work. I didn't know if I have to turn DHCP off on the Linksys
router and hard code the addresses on the PCs connected to it.

Thanks

Steve

On Fri, 23 Sep 2005 20:56:09 -0700, Steve Arndt wrote:
[color=blue]
> I'm trying to connect two routers to one Cable modem Internet connection.
>
> The first router which is supplied by work and is setup to provide VPN
> access on my work laptop at home over my Cable Internet connection. The VPN
> is setup with a fixed IP address that's validated on the work server.
>
> The second router which is a Linksys Wireless router is used for my home
> computers to connect to the Internet over the same Cable Internet
> connection. This connection is currently setup to use DHCP provided by the
> router to the PCs. The address range for this router and PCs is based on
> the default range of the router out of the box.
>
> Since both address ranges are different, I tried to setup both routers on a
> 10/100 hub with the hub linked to the cable modem.
>
> When I do this arrangement, the VPN works fine but I can't get the PCs on
> the Linksys hub to see the Internet.
>
> When I ipconfig all equipment, I see all IP address ranges I would expect to
> see.
>
> Should this concept work?[/color]

Not unless your cable company gives you two public IP Addresses.

Why don't you just plug your computers into one of the LAN ports on the vpn
router?

I was trying to seperate the two for security reasons.

Steve

"BobC" <nospam@nospam.here> wrote in message
news:1nnzctltgtuq5$.1vle33ao7jhoq.dlg@40tude.net...[color=blue]
> On Fri, 23 Sep 2005 20:56:09 -0700, Steve Arndt wrote:
>[color=green]
> > I'm trying to connect two routers to one Cable modem Internet[/color][/color]
connection.[color=blue][color=green]
> >
> > The first router which is supplied by work and is setup to provide VPN
> > access on my work laptop at home over my Cable Internet connection. The[/color][/color]
VPN[color=blue][color=green]
> > is setup with a fixed IP address that's validated on the work server.
> >
> > The second router which is a Linksys Wireless router is used for my home
> > computers to connect to the Internet over the same Cable Internet
> > connection. This connection is currently setup to use DHCP provided by[/color][/color]
the[color=blue][color=green]
> > router to the PCs. The address range for this router and PCs is based[/color][/color]
on[color=blue][color=green]
> > the default range of the router out of the box.
> >
> > Since both address ranges are different, I tried to setup both routers[/color][/color]
on a[color=blue][color=green]
> > 10/100 hub with the hub linked to the cable modem.
> >
> > When I do this arrangement, the VPN works fine but I can't get the PCs[/color][/color]
on[color=blue][color=green]
> > the Linksys hub to see the Internet.
> >
> > When I ipconfig all equipment, I see all IP address ranges I would[/color][/color]
expect to[color=blue][color=green]
> > see.
> >
> > Should this concept work?[/color]
>
> Not unless your cable company gives you two public IP Addresses.
>
> Why don't you just plug your computers into one of the LAN ports on the[/color]
vpn[color=blue]
> router?[/color]

On Fri, 23 Sep 2005 22:05:28 -0700, Steve Arndt wrote:
[color=blue]
> I was trying to seperate the two for security reasons.
>
> Steve
>[/color]
Security from what? Your vpn connection will be separate and secure from
your LAN unless you specifically allow local access. Your vpn connected
computer will be part of the remote network. In fact, your sys admin may
not allow local browsing nor local gateway while connected to the VPN. So
the VPN connected computer will be isolated from your local internet
gateway and LAN and will be part of the corporate network.

Basically I have no control over the setup of the VPN router. And if I want
to use the VPN router to provide Internet access to my home pc's, they get
to the Internet through the work tunnel not directly to the Internet through
the Internet service provider.

"BobC" <nospam@nospam.here> wrote in message
news:p0616x4lchrg$.z7ono6wvgwk5$.dlg@40tude.net...[color=blue]
> On Fri, 23 Sep 2005 22:05:28 -0700, Steve Arndt wrote:
>[color=green]
> > I was trying to seperate the two for security reasons.
> >
> > Steve
> >[/color]
> Security from what? Your vpn connection will be separate and secure from
> your LAN unless you specifically allow local access. Your vpn connected
> computer will be part of the remote network. In fact, your sys admin may
> not allow local browsing nor local gateway while connected to the VPN. So
> the VPN connected computer will be isolated from your local internet
> gateway and LAN and will be part of the corporate network.[/color]

Could you not do away with the other router and plug the "home" pc directly
into the broadband router - having the second router there is providing no
benefit - unless I am missing something?

Marc
"Steve Arndt" <sarndt01@comcast.net> wrote in message
news:IZydnU1UL61CfKveRVn-iw@comcast.com...[color=blue]
> Basically I have no control over the setup of the VPN router. And if I
> want
> to use the VPN router to provide Internet access to my home pc's, they get
> to the Internet through the work tunnel not directly to the Internet
> through
> the Internet service provider.
>
> "BobC" <nospam@nospam.here> wrote in message
> news:p0616x4lchrg$.z7ono6wvgwk5$.dlg@40tude.net...[color=green]
>> On Fri, 23 Sep 2005 22:05:28 -0700, Steve Arndt wrote:
>>[color=darkred]
>> > I was trying to seperate the two for security reasons.
>> >
>> > Steve
>> >[/color]
>> Security from what? Your vpn connection will be separate and secure from
>> your LAN unless you specifically allow local access. Your vpn connected
>> computer will be part of the remote network. In fact, your sys admin may
>> not allow local browsing nor local gateway while connected to the VPN. So
>> the VPN connected computer will be isolated from your local internet
>> gateway and LAN and will be part of the corporate network.[/color]
>
>[/color]

[This followup was posted to alt.comp.networking.connectivity and a copy
was sent to the cited author.]

In article <IZydnU1UL61CfKveRVn-iw@comcast.com>, [email]sarndt01@comcast.net[/email]
says...[color=blue]
> Basically I have no control over the setup of the VPN router. And if I want
> to use the VPN router to provide Internet access to my home pc's, they get
> to the Internet through the work tunnel not directly to the Internet through
> the Internet service provider.
>
> "BobC" <nospam@nospam.here> wrote in message
> news:p0616x4lchrg$.z7ono6wvgwk5$.dlg@40tude.net...[color=green]
> > On Fri, 23 Sep 2005 22:05:28 -0700, Steve Arndt wrote:
> >[color=darkred]
> > > I was trying to seperate the two for security reasons.
> > >
> > > Steve
> > >[/color]
> > Security from what? Your vpn connection will be separate and secure from
> > your LAN unless you specifically allow local access. Your vpn connected
> > computer will be part of the remote network. In fact, your sys admin may
> > not allow local browsing nor local gateway while connected to the VPN. So
> > the VPN connected computer will be isolated from your local internet
> > gateway and LAN and will be part of the corporate network.[/color]
>
>
>[/color]
That would not be normal config for a VPN tunnel. Typically the VPN
router will have a route table entry for the IP's or subnets that are
present at the other end of the tunnel, then all other traffic is sent
normally.

You should check with your corp IT about the config. 2 routers will not
work properly unless one is acting as a bridge and that's just a mess.
--
--
Michael Hyman
Owner/Consultant
OnTarget Solutions
- Linux/Unix/Windows consulting
- Network/Database/System Administration
[url]www.OnTargetSolutions.net[/url] | (510)907-0169