Assistance with static routes between multiple downstream subnets

emiljan

Hello,

I have a issue with my SG-1100 where I cannot reach the subnets that are on the downstream routers connected to my firewall.

I have 3 devices, the SG-1100, one AC-68U router and one EdgeRouter-X and I need some assistance in setting up routing between the different subnets.

SG-1100
-WAN => Connected to my cable modem
-LAN => Connected to my AC-68U (IP 192.168.5.1/24)
-OPT => Connected to my EdgeRouter-X (192.168.7.1/24)

RT-68U
-WAN => Connected to LAN on SG-1100 (IP 192.168.5.10/24)
-LAN => 192.168.1.0/24 Network for all my home devices

EDGEROUTER-X
-ETH0 => Connected to OPT1 on SG-1100 (IP 192.168.7.10)
-ETH1 => 192.168.10.0/24 NETWORK
-ETH2 => 192.168.20.0/24 NETWORK
-ETH3 => 192.168.30.0/24 NETWORK
-ETH4 => 192.168.40.0/24 NETWORK

Both LAN and OPT1 on the SG-1100 have default rules setup to allow all IPv4/IPv6 Traffic between ALL to ALL

From devices on the 192.168.1.0/24 Network I am able to reach the Internet
From the networks on the ERX router I am not
From the 192.168.1.0/24 Network I can ping the Gateway of OPT1 (192.168.7.1) but not the downstream router gateway of 192.168.7.10

On the ERX Router i have a default route 0.0.0.0/0 to ETH0 to send all traffic out the 192.168.7.10 gateway.

Im not sure how to setup routing on the SG-1100 to be able to reach all of the networks downstream of the LAN and OPT1 interfaces.

I know I need to setup gateways and static routes to let the SG-1100 know about the downstream subnets but im not sure how. Do i create a gateway with the IP of the interface of the SG-1100 or the downstream connected router?

viragomann

Static routes on the SG-1100 are only needed if the downstream routers do not do outbound NAT / masquerading on the upstream interface.

To add static routes go to System > Routing > Gateways and add a new gateway:
interface: LAN
Gateway: 192.168.5.10 (RT-68U)
enter a proper name
Also add the ERX IP as gateway to OPT1 interface.

Then switch to the "Static Routes" tab and add a route:
Destination network: 192.168.1.0/24
At Gateway select the RT-68U GW

Add additional static routes for all the networks behind the ERX with Gateway: ERX GW