I’ve recently acquired a few Balance One routers and I’m trying to use them to set up a two-tiered network at a small business. The attached diagram shows what I’m trying to achieve.
Router #1 will be connected to the outside world through a WAN port. This router will be configured for NAT. It will also be where the firewall and port forwarding are configured. The LAN side of Router #1 will be my intranet that feeds the WAN ports of Router #2 and Router #3 with a 192.168.250.0/24 subnet.
Router #2 and #3 will be configured as IP Forwarding with the DHCP server enabled for their respective subnets. I don’t want NAT here because I want to be able to route traffic (Windows File Sharing, VNC, ssh, etc) between PCs on the 192.168.20.0/24 and 192.168.30.0/24 subnets. My understanding is that having NAT enabled on Routers #2 and #3 would prevent this.
I’ve been testing this setup for a couple of days but I’ve not been able to get it working exactly as I need. I’ve tried various settings using static routing and so far, I’ve been able to get the PCs connected to Router #2 and #3 to be able to access the Internet. The PCs can also access the configuration web page for Router #1. However, I have not been able to get the system working to the point that I can reliably get traffic between Router #2 and Router #3. For example, a PC behind Router #2 cannot access a Windows share on a PC behind Router #3.
My questions are:
-Does my setup as I’ve explained and diagramed make sense?
-If not, what might be a better configuration option?
-What other settings/configuration options might I have missed?