VMG devices bridge mode not accessible via it's management IP
In this support article:
https://support.zyxel.eu/hc/en-us/articles/360001482220-Setting-the-VMG-as-Modem-Bridge-Mode
...it says after setting the VMG as Modem Bridge Mode…
"The VMG can still be accessed via it's management IP."
But it doesn't seem to work.
For example, if I want to use it VMG3925-B10 in Bridge Mode, and the primary router already has 192.168.1.1 as it's IP address, then Ineed to change the default IP address for VMG3925-B10 from 192.168.1.1 to something else.
I changed mine to 192.168.1.253, turned off DHCP, and firewall, turned on bridge mode, and connected from LAN1 to the WAN port on my primary router.
Now I cannot reach it's configuration management / GUI pages from any device on the primary LAN.
Pinging 192.168.1.253 results in "Destination host unreachable".
The only way I can get to it is connecting directly via it's Wifi (which I want to turn off, so it doesn't interfere with the main WiFi APs in the network).
What settings in the VMG3925-B10 do I need to configure to be able to be able to reach it through the primary LAN router?
Accepted Solution
-
I was finally able to resolve it with the help of Synology support who suggested adding a policy route.
In case anybody finds this post with a similar issue, the set-up is as follows:Primary router is Synology RT6600ax, with default IP address 192.168.1.1
VMG3925-B10C set with an IP address for the configuration pages outside the subnet of the primary router, in my case IP 192.168.5.1 (set under Networking > Home Networking > LAN IP Setup)
VMG3925-B10C set to bridge mode, set under Networking > Broardband > VDSL > Modify (pencil icon) > Mode "Bridge". My ISP (Onestream) also requires VLAN set to 0 and 101.In the Synology router I had to add a manual entry under the internet connection
…then switch back to PPPoE (where the broadband account username and password details are included).
Finally, I had to add a policy route like this:
Network Center > Internet > Smart WAN > Policy Route
Source IP 192.168.1.0/24
Destination IP 192.168.5.0/24
Interface: PPPoE-WAN
Now I can access the VMG3925-B10C configuration pages at 192.168.5.1 from any PC / device on the primary LAN 192.168.1.x
0
All Replies
-
@Serhii Boiarynov, you are apparently the author of the article, can you please help
0 -
Can anybody confirm they can reach their device on the management IP through another router?
0 -
Hello @k1s
If you connect a standalone computer to LAN1 with a crossover cable and give the computer the IP address of 192.168.1.1 and subnet mask of 255.255.255.0 can you then ping 192.168.1.253 ?
Kind regards,
Tony
0 -
Yes. the VMG3925-B10 can be pinged with a regular ethernet cable (I don't have a cross over), from any of the VMG3925-B10 LAN ports if the Pc connected directly to it has an IP address in the same range 192.168.1.x.
But when the VMG3925-B10 is connected from any of its LAN ports to the primary router, then no, it can't be pinged from across the LAN
0 -
Thanks for your reply @k1s .
This suggests that it is a routing issue.
If you do a tracert command then seeing where it stops might help you know where to fix the routing issue?
- It might be that the primary router needs a static route adding to it, so that it can find the VMG3925-B10 via a specific Ethernet port on the primary router.
- The primary router might not be able to find it otherwise.
Kind regards,
Tony
PS: If you want to say what make and model the primary router is, then I might be able to find you the command syntax for adding a static route.
0 -
Thanks for the reply Tony.
The primary router is. Synology Rt6600ax
1 -
You can create a new interface group with an other Lan port and create a new home net with another ip adress . Then you can reach it with an external device on this newly defined Lan Port . When you install a second Lan cable to your Router you access it permanently .
-I dont know why you dont readressed your Router to 192.168.1.2 and let the modem default adress .
0 -
Thanks for your reply Peter. I have 60+devices connecting to the router, so makes more sense to leave that default and change the modem.
I don't follow the 'create a new home net ' suggestion. Is there a tutorial somewhere or would you mind describing the steps?
0 -
You are welcome @k1s
https://kb.synology.com/en-uk/SRM/help/SRM/NetworkCenter/lan_static_route?version=1_3 explains how to add a static route.
I think that you will need to enter which interface the VMG3925-B10 is connected to.
Hopefully it helps. Please let me know what you think.
Kind regards Tony
0 -
You could start with making a new interface group if this function is available on the device . Interface group modem including only Lan1 and the WAN . Then define the adress in the section home net .
Here is an example :
0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 146 Nebula Ideas
- 96 Nebula Status and Incidents
- 5.7K Security
- 262 USG FLEX H Series
- 271 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 40 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 387 News and Release
- 84 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.5K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 73 Security Highlight