TomatoUSB

Good day!

I require some configuring my ASUS RT-N16 with Tomato.

My main router is a FritzBox that is connected to my ISP. From LAN1 on my main router I go into WAN on my second router, the ASUS, which acts purely as a VPN router. I run two networks with each their own subnet (192.168.178.x and 172.16.1.x). Devices connected to my ASUS Tomato router will have a VPN IP, devices connected to my main router use the IP assigned to me by my ISP. I set it up so that devices in the networks can see each other, for example my Apple TV on my main network can stream from the XBMC library on my Synology NAS which is behind the ASUS Tomato router. I deliberately have my NAS behind my ASUS Tomato router for downloading.

Here's my problem: I want to reach my NAS through my ISP IP. I use several ports for different services on my NAS which I want to forward. I have tried forwarding those ports on my main router to the IP it gives to my Tomato router. Then the same ports on my Tomato router to my NAS. I thought this would work but it doesn't. My Tomato router is on 'Router' mode, have also tried 'Gateway' but that didn't seem to work either and I believe it has to be on 'Router' for my setup to work in the first place.

I have also tried directly forwarding ports on my main router (192.168.178.1) to the IP of my NAS (172.16.1.2). Also didn't work.

Can anyone give my a definitive answer on how to set this up?

Thanks

What services are you wanting to make public from the Synology NAS?

You have a second netcard on the NAS, why not set it up in the 172.16.1.x range and plug in to the Fritz.

The usual. Specifically the manager and SABnzbd.

How would that work? I don't see how my NAS internet traffic will go through the OpenVPN client on my ASUS.

You said: "Here's my problem: I want to reach my NAS through my ISP IP."
So use the Synology built in SSH, VPN, or other add on modules, not sure but probably a OpenVPN module for it.

I agree what your doing should work. I assume OpenVPN to other devices behind the Tomato have been established, and work fine.
I believe port 80 and port 5000 need to be forwarded for the web config.

Correct. Thanks for your replies by the way, much appreciated.

I was hoping someone had done this before and could rule out certain setups because of how NAT et cetera work with the Router and Gateway modes. Or could point out a technical limitation in my current setup. I've been running my NAS for years on my main network and have always been able to reach it by just forwarding the ports on my main router. So I figured it had something to do with the setup and forwarding on my Tomato router. I can access my NAS everywhere in my local network. And OpenVPN to devices behind the second router work great, indeed. With all the services on my NAS working locally.

How did you get your devices to see each other with separate subnets and separate routers. Can you please, please explain that to me in a step by step fashion.

I have a very similar setup, but my d-link router (for standard ip) and my asus router (vpn ip) can't communicate with each other. I want my rokus connected to my asus to be able to access the plex server on my d-link…….

thank you!