U-verse for BUSINESS? : 2Wire 3801

[SomeJoe7777 ACE - Expert]

Well, if you have no wireless connectivity at layer 2, then you have to fix that first. You either have mismatched wireless config parameters on the Linksys and the cameras (SSID, encryption type, encryption password), or you have MAC address filtering in place.

[Jamienjeff]

Will look into it. 

But I have changed no parameters since changing from comcast to uverse, so am quick to blame uverse (I understand there are other issues, but was hoping it wouldn't be so difficult).

Also, everything is finicky.  What I mean is: frequently, we put on a tv and there will be no picture (get info but no picture); frequently there will be nothing and I have to reboot the uverse dvr (happened today - unable to acccess payperview until I reset the box); I just came to check this forum and the router was no longer able to give me internet access so I had to re-connect to the 2WireXXX network.

Thanks again.

[SomeJoe7777 ACE - Expert]

If your cameras cannot connect to your Linksys router, there is no part of that connection that has anything to do with U-Verse. It is an isolated system.

[Jamienjeff]

Was my thought exactly.  Althought, cant understand why I can access via the external IP and not the internal.

[SomeJoe7777 ACE - Expert]

It would be helpful if you give a complete, detailed description of how everything is connected together. Much of what you're saying simply does not make sense unless there are broken wires someplace. How can a computer plugged into the LAN port of the Linksys not be able to communicate with it? That is not really possible.

[Computer-Joe ACE - Master]

---

SomeJoe7777 wrote:
It would be helpful if you give a complete, detailed description of how everything is connected together. Much of what you're saying simply does not make sense unless there are broken wires someplace. How can a computer plugged into the LAN port of the Linksys not be able to communicate with it? That is not really possible.

---

That's what it's starting to sound like to me as well. Possibly LAN to LAN between routers, instead of LAN to WAN (conflicting DHCP).

Don't know if the OP is aware that the STBs need to be connected to the RG. If they're connected to the Linksys, that could cause the DVR issues or if they're getting DHCP from Linksys.

__________________________________________________________
How can you be in two places at once, when your not anywhere at all?
------------------------------------------------------------------------------------------------------
I really want to become a procrastinator, but I keep putting it off.
------------------------------------------------------------------------------------------------------
There are three kinds of people, those that can count, and those that can't.
------------------------------------------------------------------------------------
“Our great democracies still tend to think that a stupid man is more likely to be honest than a clever man, and our politicians take advantage of this prejudice by pretending to be even more stupid than nature has made them." :Bertrand Russell

[Jamienjeff]

All the STB's are connected to the RG.

But, I started thinking the same thing re: connections.  Re-checked tonight. 

I have an ethernet cable connected from one of the 4 network outputs of the RG to the single internet in of the Linksys (same input I had from the cable modem when I had Comcast).  I have one of the 4 outputs from the router connected to switch (8 jacks); one goes to an office and an imac; one goes to a second switch with direct individual connections to a server, stereo receiver and bluray player.

I will work on a wiring diagram to send.

Just checked again.  Can ping 192.168.1.11.  This camera is assigned to port 81.  Cannot get to it via URL 192.168.1.11.  Cannot get to it via 192.168.1.1:81.  Can get to it via mydomainname.com:81

[SomeJoe7777 ACE - Expert]

---

Jamienjeff wrote:

Just checked again.  Can ping 192.168.1.11.  This camera is assigned to port 81.  Cannot get to it via URL 192.168.1.11.  Cannot get to it via 192.168.1.1:81.  Can get to it via mydomainname.com:81

---

From what computer, and what is it's IP?  What port is this computer plugged into, and on what device?  What port is this camera plugged into and on what device?  We're never going to get anywhere unless you start providing pertinent information and stop attempting to go all over the place with the troubleshooting.  There is a process and procedure here.  We have to establish internal connectivity first before we can get anything done with the routing.

"I can't get to it" is not helping you and it's not helping us.

[Computer-Joe ACE - Master]

---

Jamienjeff wrote:

All the STB's are connected to the RG.

But, I started thinking the same thing re: connections.  Re-checked tonight. 

I have an ethernet cable connected from one of the 4 network outputs of the RG to the single internet in of the Linksys (same input I had from the cable modem when I had Comcast).  I have one of the 4 outputs from the router connected to switch (8 jacks); one goes to an office and an imac; one goes to a second switch with direct individual connections to a server, stereo receiver and bluray player.

I will work on a wiring diagram to send.

Just checked again.  Can ping 192.168.1.11.  This camera is assigned to port 81.  Cannot get to it via URL 192.168.1.11.  Cannot get to it via 192.168.1.1:81.  Can get to it via mydomainname.com:81

---

I think the main problem is, we're still fighting the subnet battle. Factory reset the RG, go change your static IPs to the 192.168.2.* subnet, follow the steps in this thread for router behind router. Then if there are still connection issues we're all working from the same page.

When you come up with a network map include the type of switches (unmanaged, managed, PoE, etc.).

Your basic map should be:

RG------------>Your Router------------>Everything Else (cameras, computers, blueray, switches, etc.)

RG------------>STBs

__________________________________________________________
How can you be in two places at once, when your not anywhere at all?
------------------------------------------------------------------------------------------------------
I really want to become a procrastinator, but I keep putting it off.
------------------------------------------------------------------------------------------------------
There are three kinds of people, those that can count, and those that can't.
------------------------------------------------------------------------------------
“Our great democracies still tend to think that a stupid man is more likely to be honest than a clever man, and our politicians take advantage of this prejudice by pretending to be even more stupid than nature has made them." :Bertrand Russell

[Jamienjeff]

Thanks ComputerJoe and SomeJoe. 

Will be silent as I create a network diagram to better describe my network configuration. 

You did mention that I should put my router on 192.168.2.x. Currently, I have the RG set to the 172.16.0.x option, and the router to 192.168.1.1. Do you think this is part of the issue?

[SomeJoe7777 ACE - Expert]

Several different IP configurations will work, but we need to see how you currently have everything set up so that we can then find the problem(s).

[TraptPatriot]

I tried searching for the answer, but either it was beyond my understanding or I just could not find the information.

I have a 3801HGV and I am looking to "bridge" it to an Asus RT-N56U dual band router. Obviously, it will not be a full bridge, but close enough (according to what I have read). My question is, will the new router have control of the traffic shaping or will that still be under the 2wire gateway? I am not knowledgable enough with wireless/internet terms and uses to know if this will work, but it was my understanding that QoS from the Asus would be superior to what is used on the 2wire. Would this be true or should I just use the Asus as an access point for the dual band frequencies?

My main applications are gaming, watching HD videos, and sometimes torrenting.

[SomeJoe7777 ACE - Expert]

If you set up router-behind-router, your router (your Asus) will have full control of QOS within the limits of the Internet package that you've purchased.

[stooby_mcdoobie]

---

SomeJoe7777 wrote:

So you are only interested in the wireless aspect of the router?

In that case, you do not want to follow these directions at all, since you do not need special routing functionality.  Instead, all you want is a wireless access point.

To do this, do the following:

1. Turn off DHCP on your router.

2. Change the link between the 2Wire router and your router to use the LAN ports on both ends.  (In other words, plug the cable from one of the LAN ports of the 2Wire to one of the LAN ports of your router.  Leave your router's WAN port empty).

3. Change the LAN IP address of your router to a static IP on the same subnet as the 2Wire router.  For example, if the 2Wire router is using 192.168.1.x, and the DHCP range is 192.168.1.64 - 192.168.1.253, set your router to 192.168.1.10.

4. If necessary, configure the wireless parameters on your router, such as SSID, encryption, pre-shared key, and MAC filtering.

Your wireless computers connected to your router will now be able to communicate with wired computers on the 2wire router since everything will be on the same subnet.

---

So I don't need to turn off the wireless functionality in the RG (is this even possible)? What's keeping the wireless devices from connecting to the RG if wireless is enabled on both? 

Thanks

[SomeJoe7777 ACE - Expert]

Some people want their own wireless access point to augment the coverage provided by the RG (for example, to increase signal strength in a large house -- the RG downstairs and their own router upstairs).

Other people want to completely replace the RG's wireless with their own wireless router.

If you want to do the former, then don't turn off wireless on the RG.

If you want to do the latter, then yes, you can turn off wireless on the RG using the web interface.

[stooby_mcdoobie]

Yes, I am part of the latter. I would like to have 802.11n functionality, but would still like to have the RG do all the things a normal router would do (DHCP, etc).

Thanks for your quick and thorough reply! I think I have all the information I need now.

[cashkennedy]

Jeez 10 pages and not another person needing to do VPN... I have the vpn router setup in dmz plus with the external ip, no problem getting the internet to work. I have the 3600hgv setup as 172.16.0.1, and the vpn router as 192.168.0.254 , and a windows server doing DHCP for all the computers. (the 2wire has dhcp on obviously to give the router the static external ip).

I can create vpn tunnels, and they establish the tunnel / so are succesfully agreeing on the key / encryption. But i am not able to ping the other computers on either side, from either side, so essentially no data goes over the VPN once established. I have all the advanced firewall rules off on the 2wire device, so the only thing left that im thinking maybe you did different is the part about overloading NAT on your vpn device, but i dont know what that means and im using a netgear fvs318n and dont know any option similar.

Any ideas?

[SomeJoe7777 ACE - Expert]

What type of VPN? What device is the VPN server and how is it connected to this network? Is this an inbound or outbound tunnel? Do you have proper IP routing on your VPN device?

[Jamienjeff]

ComputerJoe and SomeJoe-

Follow up with the answer. I haven't had time to devote to this due to work related projects. In gathering the data you requested, I was reviewing the settings on my NAS. What I found buried in the server settings was the problem and thus the solution. It turns out the devices that were the problem that were those that had static ip addresses. In reviewing their network settings, all of them  had the dns and gateway assigned to Comcast.net, not gateway.2wire.net. Once I changed that in the settings on my nas and ip camera - everything returned to the way it was before I switched to Uverse. Nice!  I was able to find the correct settings from my iMac, which gets its ip via dhcp from my router.   I feel like an i,d,i,o,t.  So...the instructions to get it in to bridge mode worked perfectly for me. The only thing to add, would be to remind people who follow your instructions to make sure all the network settings for all networked devices change accordingly. 

Thanks again for your patience and sage advice. 

Here is one additional question. My linksys router for some reason today lost its Internet connection.  I was able to do a quick check to verify it had an ip address from the 2Wire. I unplugged and reset the 2wire and all worked well following thisreboot. Any ideas?  Should I expect this to happen every month?  I believe my external ip has not changed. 

Thanks. 

[SomeJoe7777 ACE - Expert]

Glad everything's working.

Today's oddity may have just been that the RG needed a reboot due to everything on the network getting recent configuration changes. If it happens again, start a new thread and we'll troubleshoot.

[Computer-Joe ACE - Master]

---

SomeJoe7777 wrote:
What type of VPN? What device is the VPN server and how is it connected to this network? Is this an inbound or outbound tunnel? Do you have proper IP routing on your VPN device?

---

Hey SJ, don't you have a VPN thread going already?

If not, it looks like we have another project for you, just in case your plate is not full enough yet.

__________________________________________________________
How can you be in two places at once, when your not anywhere at all?
------------------------------------------------------------------------------------------------------
I really want to become a procrastinator, but I keep putting it off.
------------------------------------------------------------------------------------------------------
There are three kinds of people, those that can count, and those that can't.
------------------------------------------------------------------------------------
“Our great democracies still tend to think that a stupid man is more likely to be honest than a clever man, and our politicians take advantage of this prejudice by pretending to be even more stupid than nature has made them." :Bertrand Russell

[SomeJoe7777 ACE - Expert]

No VPN-specific thread that I know of.

Most types of outbound VPN should work on all 2Wire routers with no issues. Inbound VPN on 2Wire routers may work if configured properly, but I've seen many people say it requires your own DMZ router or static IPs.

Outbound VPN on the Motorola NVG510 works only with the very latest firmware. I don't think inbound VPN works at all without static IPs.

[Jamienjeff]

Ugh!  New thread started!

[cashkennedy]

Forgot to check back for reply, and have been to busy to even work on this problem some more.

Im using a netgear fvs318n(newer model) behing the 2 wire router, and it is in dmz plus mode with the static IP going to the netgear (it properly receives it),

On the other end i have tried netopia 3347 dsl modems, and a netgear fvs318(and old model). Both "connect" and agree on a key with the fvs318n(newer model), but Im not able to ping devices on either end from either side.

[cashkennedy]

In regards to your other questions that i forgot to answer, it is a ipsec vpn tunnel, i dont think those are really "directional" but you can set whether 1 device initiates the tunnel, but i believe both devices are in both mode where either tries to initiate the connection based on who realizes its down first.

Im not sure if my "ip routing" is correct, i think the whole problem might be due to some ip routing options to overcome the NAT (2wire) inbetween. But basically the fvs318n is 192.168.0.254, and all the computers at that site are int he .0. subnet and receiver their ip's from the windows server dhcp server. (although as a side note occasioanlly the 2wire will still somehow assign dhcp's throught the netgears wan port, if the windows server dhcp server is offline, i dont get how a dhcp could be passed through the wan port...) but before testing the tunnel i of course make sure im on the .0. subnet.

The other end is much simpler with either the netopia or the netgear fvs318(older model) acting as the DHCP and being 192.168.6.1, and assigning addresses in the .6. subnet.

I make sure when setting up the vpn tunnel to allow .0. subnet for the 1 location and .6. for the other (in each routers vpn settings) but if any additional ip configuration / settings are required then i probably have not done them (such as i have no static routes, or ports open on either router on either end) i also have no signed certificate on the fvs318n (doubt that matters for ipsec) and

[SomeJoe7777 ACE - Expert]

OK, so it sounds like your tunnel is actually coming up, you just aren't able to route traffic over it.

This is probably not an issue with U-Verse or the 2Wire. Check your routes carefully on each of the routers on each end, they have to have a route to the other network over the tunnel. If they're not running a routing protocol with each other, then these routes need to be entered statically.

[cashkennedy]

Turns out having the negear fvs318n router foward all the inbound ports/traffic to my sip phone server was interfering with vpn tunnels (or with pings / rdp connections i guess). (was only forwarding all the ports temporarily till i had time to tune it just to the right ports.).

The good news is that i can further confirm that when in dmz plus mode the 3600hgv does a decent job of allowing IP phone traffic, as well as VPN traffic through, which is good enough for most small businesses.

Only big downsides are it being necessary for it to be in DHCP mode (although i feel its more a peculiarty of the netgear that allows devices behind it to ocasionaly get DHCP from the 2wire gateway). And it also appears to have dificulty negotiating 10mbs full duplex with older devices (but i cant see many people running into that problem, and gave me a good excuse to buy the newer model fvs318n to replace my fvs318(older model). 

[jamesvdale]

Hi SomeJoe7777.

Spent a lot of time reading this thread but could not find what I was looking for exactly.  It seems to be a combination of 13 and 2 and something else perhaps.  Let's see.

So, I have a Linksys behind my 2wire.  I want the linksys for 2 reasons.  1) my desktop (upstairs) has no wireless interface and so I connect via ethernet to the linksys  2) I want to use the access control features of the linksys which the 2wire does not have for my children.

I also have two other laptops in the house that need to 1)connect to 2wire (both laptops and the 2wire are downstairs)  2) connect to the desktop upstairs.

So, if I configure the linksys so that it is just another static ip and a wireless access point on the same subnet (192.168.1...) by connecting LAN port to LAN port, then everyone gets internet, all computers can see each other, BUT the access controls do not work.  My children can get to the internet via a wireless connection to the linksys regardless of any controls that are in force.  I don't understand why the access controls don't seem to be working.  Is it because they only work if the linksys is acting as a router, and in this configuration it is only acting as a wireless access point / switch?

If I make it a dhcp server to issue ips to my children's laptops on 192.168.2..., the access controls work but now I cannot get to my desktop.

Thanks, James

[JefferMC ACE - Professor]

---

jamesvdale wrote:

...

So, if I configure the linksys so that it is just another static ip and a wireless access point on the same subnet (192.168.1...) by connecting LAN port to LAN port, then everyone gets internet, all computers can see each other, BUT the access controls do not work.  My children can get to the internet via a wireless connection to the linksys regardless of any controls that are in force.  I don't understand why the access controls don't seem to be working.  Is it because they only work if the linksys is acting as a router, and in this configuration it is only acting as a wireless access point / switch? 

...

---

Exactly.  Doing IP filtering is a layer 3 activity, opening and looking at the IP routing information in the packet and deciding whether to allow it or not.  Switching operates at layer 2, the MAC/Hardware layer.  The data has to be routed out the WAN port for firewall/access filtering to work.  In the AP/Switch configuration, hardware layer switching is occuring between the ports and the wireless interface.

---

jamesvdale wrote:

...

If I make it a dhcp server to issue ips to my children's laptops on 192.168.2..., the access controls work but now I cannot get to my desktop. 

...

---

Do you have the Linksys connected via the LAN port still?  You might could make this work by changing the SUBNET mask from 255.255.255.0 to 255.255.251.0  on all your devices that are interested in talking this way.  This allows them to talk directly on the same LAN without routing.  You can probably set up the Linksys to give out this netmask.  I don't think you're going to get the 2WIRE to, so you'd have to switch your PC to a static IP address with this mask set up.

[ncinsguy1]

I have my belkin router setup behind the ATT router and all is working but when streaming video from the internet, my slingbox or playing xbox live the signal stutters every so often and even times out sometimes losing connection.  On xbox live i get dropped from games and can never finish a game on Madden.  Hooked up to the ATT router this does not happen any ideas what going on?