Author Topic: Seeing device from network B in network A  (Read 7712 times)

0 Members and 1 Guest are viewing this topic.

Offline CloudTopic starter

  • Regular Contributor
  • *
  • Posts: 194
  • Country: si
Seeing device from network B in network A
« on: January 21, 2021, 07:58:36 am »
Networking is something that I don't know a lot about so I don't know how to properly search for this.
So I have a device in network B that I need to be able to see in network A.
Config that I have is:
Modem
Switch
Router A Router B

So if I understand correctly I have set port forwarding for IP of my device on router B but what do I have to set up on ruter A?
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #1 on: January 22, 2021, 01:20:17 pm »
Networking is something that I don't know a lot about so I don't know how to properly search for this.
So I have a device in network B that I need to be able to see in network A.
Config that I have is:
Modem
Switch
Router A Router B

So if I understand correctly I have set port forwarding for IP of my device on router B but what do I have to set up on ruter A?


No responses...   2 cents of some...

NO you definitively  will not need port forwarding for this.

You need to configure your routers in the same network - that simple

*UNLESS* obviously you can not do so (they are already in different networks)
and in that case you need  a third router which will be configured doing
the proper routing table among your targets *OR* a way to do that
in one of the 2.. (unlikely)

First solution is trivial... and recommended
second one requires minimal routing skills - not trivial

There are indeed a list of other methods and alternatives..
will not go that deep.

Try the first one.. put all your eqip, inside the same network
with a single one WAN external IP

Paul
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #2 on: January 22, 2021, 01:45:41 pm »
Please draw a diagram of your network, note port types (LAN/WAN/...), IP addresses/networks and things like NAT, and explain what you are trying to achieve in more detail. It's impossible to give a proper answer based on your very brief overview.
 

Online Berni

  • Super Contributor
  • ***
  • Posts: 4949
  • Country: si
Re: Seeing device from network B in network A
« Reply #3 on: January 22, 2021, 01:56:56 pm »
You probably have your network configured incorrectly to begin with.

Typical small scale LAN networks should always have only one router in it (unless you have a good reason for needing more)

Unless you are connecting multiple premises together the whole network should just be a sea of switches talking to each other, all of the devices connecting to switches (including access points that provide distributed wifi) and then at one point there should be a single router that connects to the modem in order to connect the LAN to the internet.

The router is the single authority that gives out IP addresses and does the routing for any traffic that goes outside into the internet where you are most likely represented as a single WAN IP. Internally to the network the switches are smart enough to find paths between all the devices.

When you have two routers doing NAT translation for separate areas of the network this makes one network treat the other network as if it is some random network somewhere on the internet and hence you can't just directly connect to devices on it, the router serves as a gate keeper to those devices and so needs to be specifically told to expose devices to the outside. In 95% of LAN use cases this is not desired and just causes the problems you are having.
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #4 on: January 22, 2021, 02:28:00 pm »
Unless you are connecting multiple premises together the whole network should just be a sea of switches talking to each other, all of the devices connecting to switches (including access points that provide distributed wifi)

Sorry, without knowing anything about a network that could be a quite bad advice. Or would you, for example, place all PCs, IoTs, VoIP devices and the WiFi for guests in one LAN segment?
 

Online Berni

  • Super Contributor
  • ***
  • Posts: 4949
  • Country: si
Re: Seeing device from network B in network A
« Reply #5 on: January 22, 2021, 03:25:00 pm »
Unless you are connecting multiple premises together the whole network should just be a sea of switches talking to each other, all of the devices connecting to switches (including access points that provide distributed wifi)

Sorry, without knowing anything about a network that could be a quite bad advice. Or would you, for example, place all PCs, IoTs, VoIP devices and the WiFi for guests in one LAN segment?

For this reason large switches support VLANs and trunking to slice up the network as needed without having to have multiple completely physically separate networks, yet still simple dumb switches can be used in sections on the network that only belong to one VLAN.

High end routers also understand VLANs so they can route traffic from those network segments accordingly, even if it all comes through one ethernet or fiber cable.

And if they require networks physically air-gapped due to security then they would have probably also found the money to hire an IT professional that knows how it's done properly.
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #6 on: January 22, 2021, 04:03:32 pm »
Most SOHO routers support VLANs too (SoC and switch chip). Unfortunately not all web interfaces allow the configuration of VLANs but you could install an alternative firmware like OpenWrt (if available for your router) to get full control.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #7 on: January 22, 2021, 04:08:42 pm »
I am guessing ...

that he is mostly calling a "router"  actually  operating solely as a layer 2 switch...

But *UNLIKE* mentioned above.. I have seen more and more cases
where  end users are having MORE THAN ONE PROVIDER

and so more than one WAN IP which requires a proper segmented
trunk in which both networks can be routing traffic.. example.
- an air  FIBER  that uses data sharing per channel and thus some
 hours of day is really bad or really expensive.
- the user also signs a private operator (GSM or other) in which
he can use the signed device as a routing target..

so in these cases both networks would be part of the routing table
and a minimal setup of "real router" is required.

That is all OSI 3 layer despite those "switches" spawned in his home/office
whatever..

This last case scenario is increasing with the advent of AIR FIBER..
and shared antennas  MIMOs  setups..

YES THE SCHEMA WILL HELP to answer..

Paul
 

Offline CloudTopic starter

  • Regular Contributor
  • *
  • Posts: 194
  • Country: si
Re: Seeing device from network B in network A
« Reply #8 on: January 27, 2021, 12:56:44 pm »
Sorry for not knowing correct terms since I don't have a lot of experience with networking.

Please see attached network diagram I have included just devices that are relevant.

I have sonoff flashed with ravencore on one network but other smart devices and homekit hub on other network and for that sonoff to work properly it needs to be seen in network with homekit hub.
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #9 on: January 27, 2021, 01:35:34 pm »
Are the WAN interfaces of the two WRT54GLs connected to the switch? Is the modem a router with integrated modem and does it perform NAT for the attached LAN?
« Last Edit: January 27, 2021, 01:57:49 pm by madires »
 

Online RoGeorge

  • Super Contributor
  • ***
  • Posts: 6201
  • Country: ro
Re: Seeing device from network B in network A
« Reply #10 on: January 27, 2021, 01:41:57 pm »
You need a bridge between network A and B.

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #11 on: January 27, 2021, 02:46:41 pm »
You need a bridge between network A and B.

Yes .. possible...  but more complicated setup..

He actually just need to  put both "routers" (which are
operating as switches only) into the same subnet.

ASSIGN AS THE MAIN "GATEWAY" :  192.168.1.1

ASSIGN your first "router" (switch) the IP:  192.168.1.10
   CLIENT:  ABOVE 192.168.1.100  via  Dynamic IP starting 100~200

ASSIGN your second "router" (switch) the IP:  192.168.1.20
   CLIENT:  ABOVE 192.168.1.100  via  Dynamic IP starting 100~200


SINGLE DNS SERVER on the gateway 192.168.1.1 (IMPERATIVE just one DNS)

this works fine. Done that with several devices... actually
more than 10 switches with dozen clients each..


Your devices need to allow their IP config.

SMART TRICK:  YOUR GATEWAY  DNS allows you
to define the "Dynamic range" -  define as 100~200.

Use the MAC  addr of each router to impose the IP
this way WRT54GL-ETH  XX:XX:XX:XX:XX:XX    192.168.0.10   
on the MAC  association table.

the MAC of your device is printed on the case
use the right numbers instead of those XXX above


This way your device will receive the assigned  **STATIC** IP
while CLIENTS  will receive dynamic IPs

Paul

PS:  BTW..  DISABLE  DNS in all devices EXCEPT  192.168.1.1
« Last Edit: January 27, 2021, 03:06:15 pm by PKTKS »
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #12 on: January 27, 2021, 03:08:49 pm »
Maybe there's a reason for the separate networks. You first have to figure out the intention of the current design before being able to give an advice. So let's ask about the details step by step since the OP isn't a network expert.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #13 on: January 27, 2021, 04:04:37 pm »
Maybe there's a reason for the separate networks. You first have to figure out the intention of the current design before being able to give an advice. So let's ask about the details step by step since the OP isn't a network expert.

There is none in this case.

It seems that some  autoconfig just picked those odd subnets.

Anyone can and should put all the internal devices in the same subnet
like I said above... quite simple.

ONE SINGLE DHCP - config range of dynamic in 192.168.1.100 to 192.168.1.200
(ALL OTHER DHCP SHOULD BE OFF)

ASSIGN STATIC IPs  based on  MAC of each device to the DNS server.
below 100.

Let all clients pick a dynamic IP

done..   all devices are automagic seen by each other
Subnet mask is 192.168.1.0/255.255.255.0

Paul
« Last Edit: January 31, 2021, 04:10:52 pm by PKTKS »
 

Online gmb42

  • Frequent Contributor
  • **
  • Posts: 294
  • Country: gb
Re: Seeing device from network B in network A
« Reply #14 on: January 28, 2021, 11:23:53 am »
Maybe there's a reason for the separate networks. You first have to figure out the intention of the current design before being able to give an advice. So let's ask about the details step by step since the OP isn't a network expert.
There is none in this case.

There are many possible reasons for multiple subnets, just ignoring them because you may not know how to configure routing isn't really the answer the OP is looking for.

Anyway, the diagram doesn't show the IP's assigned to the "WAN" side of the WRT54GL devices, I'll assume they are connected to the switch and have addresses in the 192.168.1.0/24 subnet.  These addresses should be statically assigned and NOT obtained via DHPC from the ISP modem as you need to add a route between these devices to allow packets to travel between their respective subnets.

Assume the L.H. device (call it Router A) has a "WAN" IP of 192.168.1.10 and the R.H. device (Router B) has a "WAN" IP of 192.168.1.20, these are the routers for their subnets (192.168.5.0/24 & 192.168.6.0/24) respectively.

Router A needs to have a route added that sends packets for the "other" subnet to Router B:

dest 192.168.6.0/24
gateway 192.168.1.20
interface "WAN"

Similarly Router B needs a route that sends packets back to the router A subnet:

dest 192.168.5.0/24
gateway 192.168.1.10
interface "WAN"

Depending on the software running on router A & B you may also need to add ingress and egress rules to allow the traffic to flow over the new route.  You may also want to restrict that traffic to certain protocols and ports, or even restrict which side can initiate connections.  All this is "medium" level network knowledge but unfortunately can be given different names in different contexts.
 

Offline MIS42N

  • Frequent Contributor
  • **
  • Posts: 511
  • Country: au
Re: Seeing device from network B in network A
« Reply #15 on: January 31, 2021, 11:58:44 am »
ONE SINGLE DNS - config range of dynamic in 192.168.1.100 to 192.168.1.200
(ALL OTHER DNS SHOULD BE OFF)
Do you mean DHCP when you say DNS?
DNS is domain name server, and it doesn't really matter if there's more than one on a network as long as they work. But it is unusual for a home network to have one. Usually there's none and use the ISP DNS.
DHCP is (I think) dynamic host control protocol and you can have more than one as long as they offer different ranges. I have two, one in a router, one in a Linux server, never had a problem. client machines sometimes change their IP address because they swap from one to the other, but that's no problem. The protocol is designed to allow multiple DHCP servers. I have the same MAC->IP mapping in both for things I want to stay with one IP address.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #16 on: January 31, 2021, 12:57:00 pm »
Different names for almost same thing...

While DHCP is mostly a protocol which runs offering part of DNS services...

bottom line is that the DHCP server will answer for local request
assigning IP to local clients...

while the DNS server (I run mine alone inside the intranet and extranet..)
will resolve all the  requests that are not local forwarding them to
proper uplevel domain authority


BOTH ARE REQUIRED .. if you don't  have your own DNS server...
your   setup requires a "forward"  to some DNS server outside your domain..

Paul


PS  What  matters here is that  WE ARE REQUIRED TO HAVE A SINGLE ONE DHCP SERVICE
...e..g.   inside our domain just a single DHCP server is allowed to answer...

while multiple DNS servers not only CAN but SHOULD be running
for proper safety reasons.. 

I RUN A TOTAL of 4 DNS servers ... and ONE SINGLE  DHCP  SERVER...

« Last Edit: January 31, 2021, 01:01:48 pm by PKTKS »
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #17 on: January 31, 2021, 01:15:42 pm »
DHCP is (I think) dynamic host control protocol and you can have more than one as long as they offer different ranges.

You don't want to have multiple DHCP servers in one LAN segment competing with each other. Just one active DHCP server or proxy per LAN segment!

PS: Dynamic Host Configuration Protocol
« Last Edit: January 31, 2021, 01:19:09 pm by madires »
 

Online gmb42

  • Frequent Contributor
  • **
  • Posts: 294
  • Country: gb
Re: Seeing device from network B in network A
« Reply #18 on: January 31, 2021, 01:20:45 pm »
DHCP is (I think) dynamic host control protocol and you can have more than one as long as they offer different ranges.

You don't want to have multiple DHCP servers in one LAN segment competing with each other. Just one active DHCP server or proxy per LAN segment!
Not normally required for home networks, but larger networks will have multiple DHCP servers for failover scenarios.  Supported by Windows Server since 2012 and by the various DHCP servers on other OS's.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #19 on: January 31, 2021, 01:25:57 pm »
Not normally required for home networks, but larger networks will have multiple DHCP servers for failover scenarios.  Supported by Windows Server since 2012 and by the various DHCP servers on other OS's.

Well that will certainly require a SEGMENTED LAN (VLAN)
where each segment will run a single DHCP server...

Personally I prefer to assign in that cases  a fully functional named record
<host.domain>  IN A  <IP>

for each of fixed clients segmenting the VLAN properly by domain name...
that  results in  isolated LAN trunks (better routing firewalling..)

Each VLAN trunk will just run a single DHCP server..

<domain>  IN NS <mydns>

records will do the rest...

Paul
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #20 on: January 31, 2021, 01:42:01 pm »
Different names for almost same thing...

DNS is for resolving names into IP addresses and vice versa, plus some additional information for various purposes. DHCP is for auto-configuration of a client's network settings. Completely different protocols.
 
The following users thanked this post: MIS42N

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #21 on: January 31, 2021, 01:50:13 pm »
Not normally required for home networks, but larger networks will have multiple DHCP servers for failover scenarios.

That's what I've meant with "active". One is active and the optional other ones are in stand-by mode.
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #22 on: January 31, 2021, 02:36:37 pm »
Not normally required for home networks, but larger networks will have multiple DHCP servers for failover scenarios.  Supported by Windows Server since 2012 and by the various DHCP servers on other OS's.

Well that will certainly require a SEGMENTED LAN (VLAN)
where each segment will run a single DHCP server...

Nope! For example:
- Windows Server 2012 https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn338983(v=ws.11)
- ISC DHCP https://kb.isc.org/docs/aa-00502
- ISC Kea https://kb.isc.org/docs/aa-01617

And it's not just about fail-over, you can also have load-balancing.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #23 on: January 31, 2021, 04:12:45 pm »
ONE SINGLE DNS - config range of dynamic in 192.168.1.100 to 192.168.1.200
(ALL OTHER DNS SHOULD BE OFF)
Do you mean DHCP when you say DNS?.

yes misplaced terms.. fixed... Thanks
 

Offline MIS42N

  • Frequent Contributor
  • **
  • Posts: 511
  • Country: au
Re: Seeing device from network B in network A
« Reply #24 on: February 01, 2021, 12:05:45 am »
DHCP is (I think) dynamic host control protocol and you can have more than one as long as they offer different ranges.

You don't want to have multiple DHCP servers in one LAN segment competing with each other. Just one active DHCP server or proxy per LAN segment!

PS: Dynamic Host Configuration Protocol
Yes. I haven't had to think what DHCP actually stood for, for quite a while. So I just guessed.

DHCP servers do not 'compete with each other' if they offer different address ranges. So there can be more than one on an unsegmented LAN, they will happily coexist (as mine do). There is a situation where a DHCP server thinks it is authoritative, and a client asks for a previously allocated address the server isn't able to give.  The client response to a server refusal should be "you didn't give me the IP address I asked for. Give me one of yours" and things go on without a problem. If the server is non-authorative and the issuing DHCP server is not available, the client does not get any joy and should conclude after some timeout that it it isn't getting its old address back and ask for a new one anyway. Any server will respond to that unless its address range is full.

Failover is a different thing. It requires DHCP servers to interact. One of my DHCP servers is the router and it doesn't have that sort of configuration option.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #25 on: February 01, 2021, 09:50:10 am »

DHCP servers do not 'compete with each other' if they offer different address ranges. So there can be more than one on an unsegmented LAN, they will happily coexist (as mine do).


In this case the folk would have different networks...

Devices most likely will not "SEE" each other and some
sort of routing will probably be necessary..

The single DHCP server on a single subnet is easier..

Paul
 

Online gmb42

  • Frequent Contributor
  • **
  • Posts: 294
  • Country: gb
Re: Seeing device from network B in network A
« Reply #26 on: February 01, 2021, 11:41:33 am »
In this case the folk would have different networks...

Devices most likely will not "SEE" each other and some
sort of routing will probably be necessary..

The single DHCP server on a single subnet is easier..

Paul

Why does *everything* have to be your way or the highway?

There are very good reasons for running multiple subnets, even at home, with the proliferation of IoT devices that phone home and rarely get updated.  Many folks, quite sensibly IMHO, keep that kind of stuff on its own subnet with firewall rules restricting access both ways.  Unfortunately most home routers\firewalls don't help here so you'll need to step up to things such as OpenWRT, pfSense and OPNSense and the like and of course understand some network basics to be able to create a sensible configuration.
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #27 on: February 01, 2021, 12:59:21 pm »
DHCP servers do not 'compete with each other' if they offer different address ranges. So there can be more than one on an unsegmented LAN, they will happily coexist (as mine do). There is a situation where a DHCP server thinks it is authoritative, and a client asks for a previously allocated address the server isn't able to give.  The client response to a server refusal should be "you didn't give me the IP address I asked for. Give me one of yours" and things go on without a problem. If the server is non-authorative and the issuing DHCP server is not available, the client does not get any joy and should conclude after some timeout that it it isn't getting its old address back and ask for a new one anyway. Any server will respond to that unless its address range is full.

You can do that, but the DHCP servers will still compete with each other because the offer of the first server to reply wins. When server #1 is faster the client gets an IP address from server #1's pool. And when server #2 is faster it's going to be an address from server #2's pool. If you want a client to be always in subnet #1 (server #1's pool) you'll have a problem. BTW, you can also run multiple independent DHCP servers in one LAN segment serving the same pool when you tie each IP address to a client's MAC address (IP - MAC associations have to be the same across all servers).

One might have special use cases which require unusual setups. However, in general we should stick to the best current practice.
« Last Edit: February 01, 2021, 01:02:15 pm by madires »
 

Offline Syntax Error

  • Frequent Contributor
  • **
  • Posts: 584
  • Country: gb
Re: Seeing device from network B in network A
« Reply #28 on: February 01, 2021, 12:59:48 pm »
There are very good reasons for running multiple subnets, even at home, with the proliferation of IoT devices that phone home and rarely get updated.  Many folks, quite sensibly IMHO, keep that kind of stuff on its own subnet with firewall rules restricting access both ways.  Unfortunately most home routers\firewalls don't help here so you'll need to step up to things such as OpenWRT, pfSense and OPNSense and the like and of course understand some network basics to be able to create a sensible configuration.
Agree 100%. With most domestic routers, the 'advanced' setting allows customers to change SSID names and set port forwarding rules for their smart TV, but that's about it. Which is possibly a good thing, as this prevents wannabe network architects from screwing the ARP table; because they just heard about doing that on Eli The Computer Guy's channel. Other channels are available.

Recently, I approached a major UK ISP with a question about creating a subnetted interface on their routers exclusively for IoT devices connecting via wifi - with a different wifi key. The response was the usual cut-n-paste wankspeak about how customers can install antivirus software to protect Windows 10. Pay peanuts....

Advice to anyone who really wants to do home networking properly is, place your ISP router in the e-waste dumpster and get a device that's configurable. Even get some old Cisco hardware from ebay. But first, learn about networking!

Incidentally, I'm on a  /27 subnet here. This 30 host segment is for 5Ghz traffic only. The DHCP server is on the gateway :-)
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #29 on: February 01, 2021, 01:23:05 pm »
The stock firmware of some SOHO routers supports the configuration of a "Guest WLAN". I wouldn't recommend to buy old Cisco gear if you aren't familiar with that. The old stuff is also often EoL, i.e. you won't get security updates. Better choose some SOHO router supported by OpenWrt and Co. And get acquainted with IPv6.
 

Offline Syntax Error

  • Frequent Contributor
  • **
  • Posts: 584
  • Country: gb
Re: Seeing device from network B in network A
« Reply #30 on: February 01, 2021, 02:37:45 pm »
Those guest networks vary on implementation. I had issue with one brand where the default protocol security on the guest network was 'open'. Why do WPA when you can do WTF? As for IPV6, let's not make things too scarey >:D. Indeed, old Cisco kit is bordering on the antique, but the build standard is good and it's often stupid cheap. If you can find a power supply that matches. Cisco Meraki has one or two OpenWrt rooted access points. Hello from my ex-enterprise MR16 :-)

https://openwrt.org/toh/meraki/mr16
« Last Edit: February 01, 2021, 02:53:23 pm by Syntax Error »
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #31 on: February 01, 2021, 03:08:03 pm »
In this case the folk would have different networks...

Devices most likely will not "SEE" each other and some
sort of routing will probably be necessary..

The single DHCP server on a single subnet is easier..

Paul

Why does *everything* have to be your way or the highway?



It is just easier.  Don't get me wrong.

 

Offline MIS42N

  • Frequent Contributor
  • **
  • Posts: 511
  • Country: au
Re: Seeing device from network B in network A
« Reply #32 on: February 02, 2021, 03:37:44 am »
DHCP servers do not 'compete with each other' if they offer different address ranges. So there can be more than one on an unsegmented LAN, they will happily coexist (as mine do). There is a situation where a DHCP server thinks it is authoritative, and a client asks for a previously allocated address the server isn't able to give.  The client response to a server refusal should be "you didn't give me the IP address I asked for. Give me one of yours" and things go on without a problem. If the server is non-authorative and the issuing DHCP server is not available, the client does not get any joy and should conclude after some timeout that it it isn't getting its old address back and ask for a new one anyway. Any server will respond to that unless its address range is full.

You can do that, but the DHCP servers will still compete with each other because the offer of the first server to reply wins. When server #1 is faster the client gets an IP address from server #1's pool. And when server #2 is faster it's going to be an address from server #2's pool. If you want a client to be always in subnet #1 (server #1's pool) you'll have a problem. BTW, you can also run multiple independent DHCP servers in one LAN segment serving the same pool when you tie each IP address to a client's MAC address (IP - MAC associations have to be the same across all servers).

One might have special use cases which require unusual setups. However, in general we should stick to the best current practice.
The design of the DHCP protocol had multiple offers in mind. The faster server will only make an offer if it has spare addresses in its pool. A subnet is defined by the network mask offered. If two DHCP servers offer two different address pools in the same subnet who cares which DHCP server wins. If the subnet was 192.168.1.0/24 (mask of 255.255.255.0) and DHCP server 1 offers 192.168.1.50 to 99 (with mask of 255.255.255.0) and DHCP server 2 offer 192.168.1.100 to 149 (same mask) then all the addresses offered are in the same subnet. It doesn't matter which DHCP server 'wins'.

Best Practice is a compromise between the applicability of the design to the task at hand, and the competence of the people who look after it. A company servicing many clients tries to keep each client network the same so various techs get no surprises when they work on the client's network. An in house group servicing their own needs can be more innovative in how they configure their network. As long as the standards are followed, I try for the solution that best fits the problem.
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #33 on: February 02, 2021, 11:16:50 am »
I would prefer a more deterministic solution for load balancing / fail-over.
 

Offline m k

  • Super Contributor
  • ***
  • Posts: 2006
  • Country: fi
Re: Seeing device from network B in network A
« Reply #34 on: February 02, 2021, 05:40:36 pm »
I have sonoff flashed with ravencore on one network but other smart devices and homekit hub on other network and for that sonoff to work properly it needs to be seen in network with homekit hub.

Do you have an answer?

The thing goes so that the connection initiator is a client and the other end is a server.
NAT means that default connection is one direction only.

Do you need bidirectional connections?

Windows network is typical bidirectional network.
FTP was also but was later extended by unidirectional method called passive transport.
Advance-Aneng-Appa-AVO-Beckman-Data Tech-Fluke-General Radio-H. W. Sullivan-Heathkit-HP-Kaise-Kyoritsu-Leeds & Northrup-Mastech-REO-Simpson-Sinclair-Tektronix-Tokyo Rikosha-Triplett-YFE
(plus lesser brands from the work shop of the world)
 

Offline MIS42N

  • Frequent Contributor
  • **
  • Posts: 511
  • Country: au
Re: Seeing device from network B in network A
« Reply #35 on: February 02, 2021, 10:55:32 pm »
It seems we have been off topic for a while. I decided to look at the WRT54GL manual (there seems to be many versions so I don't know if this is the same as the OP's). There is a configuration option 'Advanced Routing' which is turned off by default. To get routing working locally, need to enable it. Select operating mode Router. Worth trying dynamic routing using RIP on such a small network. It may depend on how the Internet router responds to RIP requests. If that doesn't work, have to set up static routes.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #36 on: February 09, 2021, 01:13:57 pm »
Different names for almost same thing...

DNS is for resolving names into IP addresses and vice versa, plus some additional information for various purposes. DHCP is for auto-configuration of a client's network settings. Completely different protocols.

I understand your statement very well.. 
You just need to note that DNS also works in REVERSE ..

DHCP is just a one-way dynamically request  assign tool ..

while DNS will do both:
- it solves  name to IP resolution
- it solves IP to name resolution as well

We can even ditch DHCP and use static DNS strictly.
I do this for several fixed devices in the bench.

They do not require DHCP and the static DNS resolution solves
their IP better.  forward and in reverse matching.

All you will eventually need is your working server as default
on all your intranet.

Better than DHCP  - which I mostly use for "alien" (not fixed resident) clients.

Everything else is static sticky via my DNS,  solved both ways.

Paul

 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #37 on: February 09, 2021, 01:16:16 pm »

I will say again for the OP that ..

It is much much easier to shutdown all except ONE DHCP
and configure all devices into a single subnet.

Much much easier.. no routing issues..

Paul
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #38 on: February 09, 2021, 01:32:22 pm »
Different names for almost same thing...

DNS is for resolving names into IP addresses and vice versa, plus some additional information for various purposes. DHCP is for auto-configuration of a client's network settings. Completely different protocols.

Besides  ISC consortium BIND tools I also use quite a lot
all the DJB tools (QMail and DNS  http://cr.yp.to/djbdns.html )

Faster stable secure and very reliable...

Just for stating that DNS is bi-directional...try DJBs on console:

Code: [Select]
> dnsip eevblog.com && dnsname 192.154.109.3
192.154.109.3 192.154.111.219
192-154-109-3.static.gorillaservers.com

instantly and hassle free resolvers
(because a full BIND server requires additional config..)

Paul


PS:  DJB tools are so much damn good properly  written that
     even if you are behind a competent firewall having just a local
     (really CIDR local)  DNS server working..  DJB tools will find
     and properly match all your devices... gateways.. switches..
     everything without hassle
« Last Edit: February 09, 2021, 01:50:02 pm by PKTKS »
 

Offline MIS42N

  • Frequent Contributor
  • **
  • Posts: 511
  • Country: au
Re: Seeing device from network B in network A
« Reply #39 on: February 09, 2021, 11:04:16 pm »
@PKTKS

The OP has a routing problem. DHCP will not fix it. DNS will not fix it. Configuring the routers will fix it.

DHCP and DNS do different things, one does not stand in for the other.

DHCP provides a way of managing IP addresses (the numeric thingos usually written 123.45.67.89) and basic configuration from a centralised point instead of having to deal with each machine. If you ever get to change your network configuration you will find out how useful DHCP can be. Split it into two subnets. Combine two subnets into one subnet. Change the IP address of the router. etc.

DNS is a mapping mechanism of names to IP addresses (or vice versa if you need it). It does not allocate IP addresses. It cannot change IP addresses.

I reorganised the network for a medium sized financial organisation with several remote branches each with their own subnet and connected via routers. I have done courses on Internet protocols. I introduced NTP (network time protocol) in an organisation with 25,000 PCs. I maintained remotely 75 servers in several countries (a most interesting exercise was to build a new server from scratch when it was halfway round the world. The office had no IT capable people). I think I know enough about how things work to offer an opinion.

We haven't heard from Mr Cloud so I don't know if he has found a solution.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #40 on: February 10, 2021, 08:17:02 am »
the routing issues will vanish by using the devices as simple switches...
 

Online Bicurico

  • Super Contributor
  • ***
  • Posts: 1714
  • Country: pt
    • VMA's Satellite Blog
Re: Seeing device from network B in network A
« Reply #41 on: February 10, 2021, 09:42:05 am »
This thread has been used for much non-topic discussion. This happens a lot when general computing or networking is the topic. It would be nice if all participants could stick to the question asked.

Regarding what OP really wants, he should indeed better explain why he setup his network as is. However, I would like to add that it does TOTALLY make sense to keep two or more subnets at home: one network for computers to share folders and printers, a separate network for IOT like surveilance cameras, internet power switches, etc. It is recommended to not have these devices, often with questionable FW, sharing the "main" subnet at home - what if the FW has backdoors or can easily hacked?

I have set my network like this:

Internet provider Router (with integrated modem, access point, VOIP, CATV modulator, etc.): 192.168.2.x > All IOT connect here
\/
My own router: 192.168.1.x
\/
My network with all computers

While the IOT cannot access my 192.168.1.x network, because my own router does not forward their requests to my network, all my computers can access the IOT, because the Internet provider router handles these requests, forwarding them either to the internet or the 192.168.2.x subnet.

So, yes, what OP wants to achieve is perfectly possible.

Regards,
Vitor
 
The following users thanked this post: Ian.M

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #42 on: February 10, 2021, 11:57:18 am »
This thread has been used for much non-topic discussion. This happens a lot when general computing or networking is the topic. It would be nice if all participants could stick to the question asked.
(..)
So, yes, what OP wants to achieve is perfectly possible.

Regards,
Vitor

Actually the target is trivial.
How much diverted from OP is not trivial.

I use ZoneMinder integrated on my intranet
so unless you have dedicated DVRs ...

My 5y nephew wants to find our game server..
So instead of putting numbers..
he just do:  gamer.<intranet>.<unclebob>

All stuff can be readily seen wo routing issues.
Which I keep apart by a VLAN on the main switch.

So my bench have static IP instruments seen
I have video on ZoneMinder servers...

And our gaming server is readily available ..
The static DNS names (A records) play a nice role by
letting devices ask for a static IP and BINGO uncle bob network servers are there..

I would not do that using large arrays (kinda Mikrotik routers. )
designed to handle large pools..

I am sure the routers can be just used as switches with advantages
in his case...(OP)

Paul




 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7763
  • Country: de
  • A qualified hobbyist ;)
Re: Seeing device from network B in network A
« Reply #43 on: February 10, 2021, 12:14:02 pm »
... or use SRV RRs if supported by the client (https://en.wikipedia.org/wiki/SRV_record).
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #44 on: February 10, 2021, 12:42:46 pm »
In my specific case ...

The ZoneMinder server and the instruments and
our game server...   they should be all readily available.

The 5y old creature will not wait more than 3 seconds
to play the games... so the better I could teach is: type gamer!

And I can  watch what the wild creature is doing wo me.. ::)

On any device via  the ZoneMinder  server

Cell phone .. mobile or not desktop.. whatever

Paul
 

Offline MIS42N

  • Frequent Contributor
  • **
  • Posts: 511
  • Country: au
Re: Seeing device from network B in network A
« Reply #45 on: February 11, 2021, 02:02:45 am »
This thread has been used for much non-topic discussion. This happens a lot when general computing or networking is the topic. It would be nice if all participants could stick to the question asked.
I don't think the original poster is following this. I posted the solution Reply #35 on: February 02, 2021, 10:55:32 pm. I don't know if he has tried it.

Unfortunately this thread has been hijacked by people for whom this expression "a little knowledge is a dangerous thing" is appropriate. Unless the OP returns, I'm out of here.
 
The following users thanked this post: madires

Offline David Hess

  • Super Contributor
  • ***
  • Posts: 16611
  • Country: us
  • DavidH
Re: Seeing device from network B in network A
« Reply #46 on: February 11, 2021, 02:02:35 pm »
If NAT on the routers is configured properly, then a static route can be added to each router so that it knows how to forward traffic to the other network on the other router.  Otherwise the routers have no idea where traffic for the other network needs to go.  Or NAT could be bypassed with a direct link between the routers which is probably easier to setup assuming the hardware has  a third port available.

But it is very unlikely that you can configure the NAT properly to do this unless your routers are running a FreeBSD or Linux based router distribution.  Offhand I do not know of any consumer grade routers which support this.
 

Offline PKTKS

  • Super Contributor
  • ***
  • Posts: 1766
  • Country: br
Re: Seeing device from network B in network A
« Reply #47 on: February 11, 2021, 03:21:35 pm »
geeezzz  the folk has at least 5 solutions ready..

i wish i had such kind of support 10 or 20 years ago...
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf