PortForwarding not working as expected

[pcc3]

Hi,

I have a fios-quantum-gateway modem/router. One of the routers port is connected directly to my Netgear-prosafe (firewall). I have not configured this with static IP as as I see some other issues when I configure it that way. However the Netgear is set to grab the required IP with fios-Quantum-gateway (say 192.168.1.aa).

When I try to VPN from my home network with IP 192.168.1.bb to 192.168.1.aa , I am successfully able to VPN into the Netgear network. However if I try to VPN on 192.168.1.1 , then it fails

 I have created a portforwarding rule trying to make it more liberal

Rule:

VPN_external

TCP Any -> 500 TCP Any -> 4500 ESP GRE AH UDP Any -> 500 UDP Any -> 4500

PortForwarding:

NGFirewall

192.168.1.aa.    -> VPN_external

In additon to this, I have created routing rules

Name.                                  Entry          Destination             Gateway        Netmask

network Home/Office.     IPv4             192.168.1.1                192.168.1.aa.   255.255.255.255

network Home/Office.     IPv4              192.168.1.aa             192.168.1.1       255.255.255.255

my final goal is to VPN from external IP. A couple of years ago, I was able to do so. I am not sure way caused the external VPN to not work. Unsure if it was because of the change of router (from Actiontec MI424WR to Fios Quantum gateway).

I would appreciate some help.

Thank you in advance.

Prakash

[dslr595148]

This is my educated guess and two cents.

Have each router in a different subnet.

For example:

One at 192.168.1.1 and the other at 192.168.2.1

[pcc3]

Hi,

thanks for your response.

My Netgear is alredy on a different subnet. 

The earliear mentioned IP 192.168.1.aa is the public IP for the Netgear. 

Unsure if it is doable & that is what you are advicing -

Do you want me set the IP distrubution on fios quantum to

something like the following?

from 192.168.1.100

to      192.168.2.50

& then set the public address of netgear as 192.168.2.1.  ?

There is one more observation that I should have mentioned earlier.

the ip 192.168.1.aa cannot even ping from the FiOS console.

All the othere devices connected, even on wireless, can be pinged from the GUI-console.

If I ping  192.168.1.aa from a laptop on the wifi (network 192.168.1.0), then I see the ping response.

Regards,

Prakash