Hello everyone! I bought a Syno MR2200 few months ago to take advantage of SRM features I like. Unfortunately my ISP doesn’t let me by-pass it’s own modem and doesn’t communicate settings for my MR-router. I couldn’t find this information on the web either. So I am stuck with my ISP’s box, followed by MR2200 in bridge-mode, and then my LAN.
It took me a while to understand (yeah, I am very enthusiastic about network technology, but also a complete newbie… ) why I lost remote access to my NAS, but I think it’s actually quite clear: my ISP’s box has DHCP server activated, providing a “192.168.x.x” address to the MR. But the MR has also DHCP server activated, distributing 10.0.x.x address to my LAN clients. I could live with it for all my basic internet traffic, but when it comes to remote access (e.g. off-site backup, Quickconnect, etc.) nothing works.
I see two potential solutions to my problem:
Thanks’ a lot for you help and enjoy your easter week-end!
It took me a while to understand (yeah, I am very enthusiastic about network technology, but also a complete newbie… ) why I lost remote access to my NAS, but I think it’s actually quite clear: my ISP’s box has DHCP server activated, providing a “192.168.x.x” address to the MR. But the MR has also DHCP server activated, distributing 10.0.x.x address to my LAN clients. I could live with it for all my basic internet traffic, but when it comes to remote access (e.g. off-site backup, Quickconnect, etc.) nothing works.
I see two potential solutions to my problem:
- On the ISP’s box, forward all ports to MR, and then finetune firewall rules and port forwarding to the LAN clients from there. Question is: how would you write a single forward route applying to all ports (which range would you set?). Would that be safe? But I would prefer a solution allowing to get a single IP range for all my devices, from the ISP’s box to the clients…
- Second option could be to deactivate the DHCP server on one machine. Would this be a solution? On which box would you then deactivate? I would prefer to keep the one on the MR side, but not sure if that is possible or not… Would I still benefit from SRM services like threat control, control access etc. if the IP address are managed by the ISP’s box?
Thanks’ a lot for you help and enjoy your easter week-end!