Hi,

Thanks for your answer, I currently have DSL.

My idea is to use two asus routers to create a mesh network, and use the RT-AC86U as the main router.

Do you know if the VMG8825-T50 router can open the DMZ for the Asus router? this way it would be my main router.

Many Thanks!

@despotars 

For DMZ log in to the Zyxel via 192.168.1.1, log in credentials on the back of your modem.

Go to menu, netwerkinstelling, thuisnetwerk, under LAN configuratie adjust the DHCP pool to 192.168.1.10 - 192.168.1.254 for example and save the settings.

Now go to menu, netwerkinstelling, NAT, DMZ and select under apparaat informatie the IP given to your Asus, all other fields will be filled in automatically.

192.168.1.2 to 192.168.1.10 can be used as static ip addresses, give your Asus a static ip address.

Hi again! I have more questions:

• Do you think this is the best configuration I can have to use my Asus router?
• Do you recommend doing something else?

Many thanks!

My internet works fine, but i can't access my router from outside. Before having tmobile if I could connect using DDNS but not now. Any idea how I can access?

I opened the DMZ port for my Asus router as you told me, but in the Asus roputer configuration, the WAN IP is 192.168.1.6 and not the real public IP, so the DMZ function is not working well. Any ideas to fix this?

@despotars 

Your Zyxel will get the public IP, DMZ works as a portforwarding for all ports to your Asus.

It's correct that your Asus doesn't have a public IP.

So, the router is not working good right? Because in my old house I had TMobile with the Huawei HG659 router and after opening the DMZ to the Asus router, everything worked perfectly, and my Asus router had the Public IP of my house.

I want the same for the ZYXEL router, I want Asus to handle everything without an outer layer, is this possible with the ZYXEL router?

Btw, the purpose of opening DMZ to a secondary router is to expose that router to outside (internet in this case) without the main router intervening in anything (firewall, security settings ...)

Hi again, Any idea to help me?

Hi @despotars, my apologies for the delayed response! I've asked one of our specialized users to help you out. You can expect an answer within the coming two days. 

I'm pretty sure the Asus will not receive a public IP; the Zyxel pretty much handles those duties. I don't think it's possible to have your desired setup as is. Hopefully our specialist can offer you a more solid answer!

Hi @Jason and thanks for your answer.

It is a bit strange that that router (Zyxel) cannot give the public IP to my Asus router, all the routers that I used in the past (company routers, for example the last one was Huawei brand, T-Mobile in my old house) it gave the public IP to my Asus router, and therefore, the company's router was of no use other than to give the Asus router internet.

In case this is not possible (we are waiting for your expert), could you change this router for another than can gave the public IP to my Asus router (using the DMZ option)?

@despotars 

What is a DMZ? (Demilitarized Zone)

My first question is still following this thread .. why you want a public IP i.s.o. a private IP but with all ports passing?

What is to according you the advantage of getting a public IP i.s.o. a private IP?

In ‘Bridge Mode’ (not supported on TMT routers), would give you a public IP, but a DMZ will give you a private IP in this case.

Hi @Pieter_B and thanks for your answer.

I know what DMZ is and how it works. I need a public IP becuase my Asus router can create a DDNS associated with the public IP of my home, so I have control of my router away from home when I need it. As Asus doesn't receive the public IP, I dont have access to my DDNS, so I don't have access to my router from outside my house. This has an impact on my life because I can't edit my ports in real time (open or close them), create a guest network, control my home automation...

This did not happen to me with the previous router that I had from T-Mobile (Huawei router), and for that reason I would like to know if it is possible to do that with my current router (Zyxel), becuase its important for me.

@despotars

I notice that you are more or less a network engineer yourself, but why you do not put your DDNS pointing to your Zyxel public IP .. do port forwarding via the Zyxel to get to your ASUS WAN?

Give the WAN of your ASUS a fixed IP and a dedicated port that it can be accessed from outside?

It is like building a server, but now this server is the ASUS Webinterface, that is then ‘the Server’.

Let me see how to setup DDNS in the Zyxel, or maybe some other customers did this already

Hi @Pieter_B again, the problem is that is the Asus router who create the DDNS for me, so as you can see in the Asus tutorials below, is not possible to create it with a private IP:

Btw, this is the configuration I made in the router Zyxel for open the DMZ, but is not working, I mean, Asus don´t have the public IP:

but it doesn't work, the Zyxel router is still ahead of the Asus.

It is very strange that with this router I cannot do what I did with many routers previously.

@despotars

Inside de Zyxel you can also setup your DDNS, by clicking on the right corner ‘hamburger’ menu under DNS

Then opens the page where you can setup your DDNS 

Fill in the data of your DDNS account and press apply

After the connection is ‘Accepted’ and it reads back your WAN IP on the Zyxel, you then can forward any traffic through the Zyxel via port forwarding.

Hi @Pieter_B. so, you think it is not possible config the DMZ in that router to send the public IP to my Asus router as I have done in the past with other routers, right? as I told you before, I need to bypass the Zyxel router and be able to work only with the Asus to be able to control everything outside my house

@despotars

No, this will not give you a public IP on your ASUS, but lets your DDNS system work again. The thing you have to do is, move your DDNS out of the ASUS towards the Zyxel. 

So the Zyxel will keep your DDNS alive, while the port forwarding in the Zyxel will allow you to control the ASUS.

So what things you should do:

1. Move your DDNS from the ASUS to the Zyxel
2. Assign a fixed Private IP for your ASUS
3. Create port forwarding rules from the Zyxel WAN towards the fixed IP of your ASUS
4. Enable external WAN access on your ASUS

This is a very common setup in networking, to be able to get access to a device/server behind a router.

Try to setup point 1 first on the Zyxel to see if that works with your DDNS. 

Hi @Pieter_B and thanks for your comments.

How can I get my DDNS to the Zyxel router? My DDNS is created by my Asus router. I am not sure how I should do this.

The problem I see here is that there is double NAT, right? and this does not let me work well some services in my network, in addition to the DDNS of my router dont work.

@despotars

A few posts ago, i showed you where to find the settings page inside the Zyxel. Couldn't you find that page?

There you need to set the DDNS service provider, your DDNS host name, username and password. All this information you should have, or did someone else put it in the ASUS?

If you then click apply, the connection should be saying Accepted and your WAN IP is shown.

About Double NAT, indeed that will occur. But i worked for years with a Double NAT setup, never had any issues what so ever.