Hello, i am not sure if this question is for this forum, but please let me ask it.

I have a device provided by ISP which is functioning in Modem/Router Mode. It is an Arris device. I can connect to Internet through it. Internet signal is coming from a coaxial cable. That is why Arris is working in a Modem-Mode.
One of the LAN ports of the ISP-Modem/Router is connected to an Asus Router-Internet port. This i could do because i am illiterate in networking.

When I switch Asus device in Router mode, its Internet LED-indication shows there is no connection to Internet. When connecting a laptop to Asus (via LAN cable), it does not have Internet connection.

Another finding is - because of some collision between both routers, also devices connected to ISP-Modem/router are losing Internet connection when Asus is on. (Presumably because of NAT-collision).

That Is why first I have to properly connect Asus to ISP-Modem/Router. That is what is lacking at this point and I am asking everyone for help who has more understanding of that topic.

I would like later to have VPN-Service on Asus device.

Finally devices connected to ISP-Modem/Router will not use VPN and the ones connected to Asus will be using VPN.

I am politely asking you for some solution which is relatively secure, not to expose my stuff directly to Internet. Would it be possible by keeping security to do that? Do i have to configure firewall rules.

Thanks to everyone who lends me a hand!

If the wire from the ISP router was connected to a LAN port of the Asus instead of the WAN or Internet port there could be a problem due to the Asus DHCP server.

Your ISP router subnet should be different from the Asus subnet.

Hi glupa4e,

One way of doing it would be to connect a regular port (not the WAN port) on you Asus to one of the ports on your ISP provided device Arris, and use the Asus as a switch rather than a router. Then you will have to configure your connected devices to use your the Arris their gateway (the LAN ip of the Arris).

Best

Hello beka,
if i run Asus router as a switch, would i be able to use its WiFi? i would like to connect also phone and tablet to Asus (which will be having VPN) so that not mobile devices use VPN but Asus only.

Yes you can still use the WiFi of the Asus. Does you Asus device support VPN? If so I think you can manage a suitable configuration. If you can give us the Models of the Arris and Asus it could help.

Best

If you connect to a regular LAN port on the Asus you will not be able to use its built in VPN client (assuming it has the capability)

If the Asus is connected to a VPN server then any device connected to it should go through the VPN tunnel whether its using WiFi or a direct cable.

Hello Beka, here are the models
Arris TG3492MT
Asus RT AC5300 - it has to be configurable for VPN, i have a subscription to a provider.

best regards

Your router supports the following clients.
Make sure the ethernet cable connects from a Arris LAN port to the Asus WAN/internet port.

Check the LAN IP address on each router to make sure they are not the same.

I concur with michealk (I could not find info on the TG3492MT but I could find the specs for the TG2492S/CE - maybe not to dis-similar?). You should have a different subnet ip for the devices you connect directly to your Arris(eg 192.168.1.0) and those connected to the Asus (eg 192.168.2.0). The WAN port ip on the Asus would be from the Artis subnet. The devices directly connected to the Arris would use its LAN ip as a gateway with those connected to the Asus would be using the Asus' LAN ip as a gateway. What remains is to configure the VPN settings on the Asus as specified by the VPN service.

Hope this helps!

Hello beka,
i thank you for your explanations but i am afraid further and more detailed ones would be needed. :-( I still have difficulties in understanding what i have to do because on the Arris i have very limited possibilites for configuration. There i could assign a fix IP-Address to Asus based on its MAC.

Arris:
It is set to have DHCP and range 192.168.1.0. Asus has fixed IP from that range. DNS are set by ISP.

Asus:
Here there is a lot more that can be configured when it comes the harder part for me. In the previous post you tell me that WAN-port shall have IP from Arris range, e.g. 192.168.1.222 - should this be the same one as the fixed one by Arris?
Then DHCP is also set up here and ranges from 192.168.2.0. What whould be default gateway here? What about DNS, should they be from Arris network or directly again the ones set by ISP (also the ones set on Arris, would they be visible from Asus)? Here i always have to input also subnet masks and i do not know how they should be?

Leave the Arris as is.

Leave the Asus WAN side as is.

If the Asus also uses 192.168.1.0 then change it to 192.168.2.1 subnet 24 or 255.255.255.0. If its DHCP range does not automatically change make it 192.168.2.100 - 192.168.2.200
If it does not use 192.168.1.0 then you do not need to change anything.

The Asus should automatically provide DHCP clients using itself as the gateway address and will automatically use the DNS as provided by the Arris whatever that might be.

Yes, this should give Internet access to your client devices in the manner you want. Next set up the VPN on the Asus from the info provided by the service.

Hello michaelk and beka,

i am very thankful for your help! I could finally configure Asus and VPN service on it. I wish you all the best!

Good to know, all the best!

Hello,

i saw this new ASUS model and was thinking, would it be worth upgrading the hardware? I was wondering if the new one would change the speed for loading pages and so on. I hope on it i could also install VPN profiles. What do you think? Has anybody already experience with that?