Router ar 410, wan port is eth0 with statick ip, public, and switch port 1 is on vlan2 with pirvate ip address 192.168.18.253. how tu add default route for acces to internet eth0 is connected on shdsl router ov ISP...I can ping from router both side, but not from local net...from my pc I can not ping outside...

You shouldn't have to configure anything except the PC's should have IP and gateway set to auto.

Here is how it works:

A router connects two separate networks and manage the traffic between them.

In most home network applications the router connects your local group of computers and devices known as the LAN with the Internet, commonly called the WAN or Wide Area Network.

The router usually assigns unique Local IP addresses to all of the devices connected to it via a service known as DHCP. The addresses assigned by your router are private addresses http://en.wikipedia.org/wiki/Private_net... and are not routable across the Internet.

Dynamic Host Configuration Protocol (DHCP) is an auto configuration protocol used on IP networks. Computers that are connected to IP networks must be configured before they can communicate with other computers on the network. DHCP allows a computer to be configured automatically, eliminating the need for intervention by a network administrator. It also provides a central database for keeping track of computers that have been connected to the network. This prevents two computers from accidentally being configured with the same IP address. http://en.wikipedia.org/wiki/Dynamic_Hos...

Your cable or DSL modem will get a Public WAN IP address from your ISP's DHCP service. These public IP addresses are leased in blocks by your ISP and are Internet routeble. The modem is connected to the WAN port on your router. The router will manage the traffic between the devices on the LAN and the Internet.

If your 5 port switch is connected to one of the router's LAN ports and router's DHCP is on then it will configure the clients attached to It automatically.

http://www.netopia.com/support/hardware/technotes/NQG_025.html
Server List (Port Forwarding) NQG_025 With NAT enabled, the IP addresses of nodes on your LAN are private since they are hidden from the Internet. IP Servers let you pass specific types of network traffic through the Netopia router's NAT interfaces. Once configured, selected types of network traffic, such as FTP requests or HTTP (Web) connections, will be forwarded to a specific host or server behind the Netopia router. Please Note: From the LAN (Local Area Network), you will also be able to access the servers that are responding to requests from the internet, but only using the internal private IP address. Access via the public IP address is not supported from a local ethernet connection. If your ISP is routing you multiple public IP addresses, you can also configure the router to forward all ports in one public IP to a designated private IP address on your LAN via Easy PAT List entries. For those instructions, see Quick Guide NQG_024: IP Mapping (Address Forwarding).
Please Note: If your router is currently running Netopia Residential Firmware with a web "GUI" configuration menu, this technote is not applicable to you. Most 3300 Series Netopia Gateways can be upgraded to Enterprise level firmware. Click Here! to purchase the upgrade key.
Related documents: NQG_039 NAT and the Basic Firewall
Firmware References:

• v8.2 R1 (and up) - 3300 Enterprise Series
• v5.3.7 (and up) - 4000 Series
• v4.8.2 (and up) - R-Series

Before You Start
Telnet into the Netopia router's Main Menu at 192.168.1.1 (if using the default IP setting). If your network has a different IP addressing scheme, modify this accordingly. Click Here! for instructions on using telnet and Hyperterminal (serial connection).
Login with the user name and password. The Superuser login is required to save changes. If you are unsure of this, contact your network administrator.
Don't forget to press the Enter key to save any entries. Hitting the back space, delete or tab without first hitting enter will undo any changes.
The Esc key will take you back towards the main menu screen.
Once you have completed your configuration, you should reboot the Netopia to save and apply your changes.

The Netopia Main Menu Interface

Server List Configuration

1. From the Main Menu of router console screens, go to Quick Menus, and select Network Address Translation.
2. Select Show/Change Server List.
3. Select Easy-Servers.
4. From the Show/Change NAT Server List screen, select Add Server.
5. Select Service and the service and port you want to allow. If your service and port are not available in the pull-down menu, select Other. Selecting Other will allow you to enter a specific service port or a range of ports since fields are provided for both a First Port Number and a Last Port Number. To allow a specific service port, the First Port Number and Last Port Number should be the same. Select Okay.
6. Next, enter the Server Private IP Address, or the private IP address of the host/server you are forwarding the service to, and the Public IP Address you want to associate with the same host/server. This value can be left set to 0.0.0.0 if you are using the WAN IP as the Public IP address. Note: If your ISP is routing you multiple static IP addresses, other then the one used for Internet access, you may create more than one server for specific service as long as all servers have a different Public IP Address specified. For example, with two web servers on your LAN you would need to create two Server List entries for TCP 80 (www-http). Since each specific port (service) can only be mapped once using any given Public IP Address, a distinct public address must be used for each TCP 80 server list entry. It is not necessary for you to specify more than one Local WAN IP Address or Public IP Address in your router's configuration. As long as you are connecting to your ISP via a public IP address used for NAT, they are responsible for routing all other IP addresses via that connection.
   

Conclusion
You have now configured your router for TCP/UDP port forwarding. If you have a switched connection (ISDN or Analog), you will need to either disconnect and reconnect your Internet connection, or restart your router for the Nat Server List changes to take effect. If you wish to filter traffic for your static IP mappings, please see the following Netopia Technote:
NQG_039: NAT and the Basic Firewall

Open a web browser like internet explorer or Netscape. Enter the ip address of your router in the address bar of your browser. By default the IP address should be set to 192.168.1.1.

You should see a box prompting you for your username and password. Enter your username and password now. By default both the username and password are blank. Click the Ok button to log in to your router.

Click the Firewall button near the top of the page. Use the Protocol drop down box to select the protocol type of the ports you are forwarding. If you are forwarding a single port, enter that port number into the LAN port range, Left WAN port range and the Right WAN port range boxes. If you are forwarding a range of ports, enter the lowest number of that range into the LAN port range, Left WAN port range box. Then enter the highest number of that range into the Right WAN port range box. Enter the IP address to forward these ports to into the LAN IP Address box. If you are forwarding ports so you can run a program on your computer, you should enter your computer's ip address into that box. When you are finished, click the Add button.

When you're finished, click Save near the bottom of the screen to save your changes.

And that's it! You're done! Hope this helps.

Normal 0 MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman";} Configuring router for Cable Internet

To configure your router for Cable you will need to set your router's WAN (INTERNET) port to 'Dynamic IP' (DHCP) option. The router is set to this option by default.

Configuration steps:

Step 1 Connect the cable modem to the WAN (INTERNET) port of your router. If the modem has USB connection make sure that it is NOT connected to any computers via the USB cable and that the modem is switched to Ethernet (not USB). Only the modem's Ethernet port should be connected to the router's WAN (INTERNET) port.
Connect your computer(s) to the router's LAN port(s) or establish connection to it wirelessly.

Step 2 Open your Internet Explorer and log into your router by typing in its IP address (in most cases the default IP is http://192.168.0.1 ). Note that you do not have to be on the Internet in order to access this address because you are just connecting to your router's address. Specify username and password for your router, default is `admin' for both.

Step 3 After logging into the router select Setup. Set Internet Connection to 'Dynamic IP (DHCP)' option.
Setup'.

- Select the MAC Cloning option. Click on Clone MAC Address button. Do this from the computer which the cable modem was directly connected to the last time. This will place the MAC address of your computer into the router. Save settings and reboot the router. Reboot your cable modem as well.

- Log in to the router and go to Status page. Note what IP address it is getting on the WAN (INTERNET) interface. If the IP address you see under WAN (INTERNET) appears to be in the same range you are using on your network (e.g. 192.168.0.x), you will need to change the range you are using on your LAN to something different, e.g. 192.168.88.x. You can do this on your router under Setup > LAN Setup. Note that after changing the IP of your router you will only be able to access it through its new IP, e.g. 192.168.88.1.

- Uninstall your antivirus/firewall software (sometimes disabling or closing the software is not enough) and reboot your PC. After establishing the Internet connection through the router, reinstall your antivirus/firewall software.

A. Determining the IP Address and MAC Address of a Computer:

Note: Please use the computer for which the Ports are to be opened:

For Windows 2000/XP users:

1. Please click on Start and select Run.
2. Type in cmd and click on OK.
3. In the Command Prompt, please type ipconfig/all then press Enter or Return key.
4. Please make sure that the Ethernet adapter has an IP Address that is the same range as the router (e.g. 192.168.1.2 for the computer and 192.168.1.1 for the router).
5. Please note down the IP address and Physical address.

B. Reserving an IP Address:

1. Please open any web browser like Internet Explorer or Netscape Navigator.
2. Connect to the router by typing http://routerlogin.com/basicsetting.htm or http://192.168.1.1 in the address field and click Enter or Return key.
3. A window will prompt for a user name and password. The default username is "admin" and the default password is "password".

Note: If it does not take password as the password, you might have changed it when you have run the NETGEAR Setup CD so please try other passwords. If you cannot remember the password, you need to reset the router and run the Setup CD to reconfigure it.

4. When the setup page opens, click on LAN IP Setup under Advanced tab.
5. Click on Add under Address Reservation.
6. Under Address Reservation window, please select the radio button of the computer you wish to add from the Address Reservation Table.
7. If the computer you want is not on the list, please click on the Refresh button to update the table.
8. If the computer is still not on the Address Reservation Table, please type in the IP Address, MAC Address (Physical Address), and Device Name of the computer you wish to add.
9. Click the Add button when done.

C. Opening Pre-Defined Ports for Internet Services:

1. Click on the option with the name Port Forwarding/Port Triggering under the Advanced menu.
2. Please select the service type Port Forwarding. The router pre-defined services are listed there.
3. From the Service Name pull down list, select the service that needs to be hosted.
4. Enter the IP address of the computer in the Server IP Address box.
5. Click the Add or Apply button.
6. Repeat all steps to open more ports.

Note: If the name of the Internet service does not appear in the drop down list, you may manually open the ports for that Internet service. Please follow the steps below:

D. Opening Ports for Games, Applications or Custom Ports:

1. Click on Add Custom Service button.
2. Type the service name in the Service Name box and the lower range numbers in the Starting Port box.
3. If the application uses only a single port; type in the same port number in the Ending Port box.
4. If the application uses a range of ports; type in the higher range numbers in the Ending Port box.
5. Type the IP address of the computer in the Server IP Address box. Click Apply button.
6. It will then refresh to the Port Forwarding page, and will show the list of all ports opened in tabulation.
7. Repeat all steps to add more ports for more services.

E. To Edit or Delete a Service Entry:

1. Click on the Radio Button that needs to be Edited /Deleted, under the Port Forwarding page.
2. Modify the information from the Service Name, Starting Port, Ending Port, and the Server IP Address, and then click the Apply button.

Just a bit of explanation. E0 interface is for inside network (LAN interface). E1 is for outside (ISP or WAN physical interface). Dialer1 is for PPPoE (the "actual"/logical WAN interface). The 1.0.0.13 is ISP provided static IP address for the use of the server. This configuration example is for running FTP server, which uses the standard TCP port 20 and 21.

The LAN uses 10.10.10.0 network with 255.255.255.0 subnet for both servers and workstations. All servers within the LAN use static IP address. The router is configured as DHCP server to give out IP info (IP addresses, subnet mask, DNS) to workstations that are configured as DHCP client.

Basically I suggest that you deploy NAT (Network Address Translation) and PAT (Port Address Translation) to setup your own servers behind Cisco router. The NAT is used to translate the ISP's given static IP address to your local IP address. The PAT is used to translate TCP ports (the port 20 and 21) between the two IP addresses.

When using NAT/PAT, keep in mind that the Internet-accessible servers are seen from the Internet as their NAT/PAT-ed IP address (the Public IP address) and not the local IP address (not the Private IP address). This understanding is very important when you or someone need to test connectivity to the server and/or when you need to create filter (access list or ACL for short) to allow only certain incoming traffic from the Internet and block others.

Side Note:
For more info on NAT/PAT concept, check out the following FAQ
»Cisco Forum FAQ »NAT and PAT; Introduction and Implementations

Instruments used in this illustration are pretty much standard for running your own servers. Please note that IP addresses, username, and password are changed. However, you could always modify the configuration to suit your situation.

This sample configuration assumes that you have a block of IP from ISP. There is a dedicated Public IP address for the router WAN interface (the Dialer1 interface) and another dedicated Public IP address for the server PAT IP address. If you only have a single Public IP address for both router WAN interface and server PAT IP address, there are several ways to configure the router.

One way is to use the same command as shown in sample configuration.

view plaincopy to clipboardprint?

1. ip nat source static tcp 10.10.10.2 21 1.1.1.14 21 extendable

ip nat source static tcp 10.10.10.2 21 1.1.1.14 21 extendable
This one configuration way is suitable when you have static IP address from your ISP and you know exactly what the IP address is. In this case you have the 1.1.1.14 single static IP address for both the WAN interface and Public server IP address.

When you are unsure which IP address you receive from the ISP, or when your Public IP address keep changing; then another way to configure the static PAT is following

view plaincopy to clipboardprint?

1. ip nat source static tcp 10.10.10.2 21 interface Dialer1 21 extendable

ip nat source static tcp 10.10.10.2 21 interface Dialer1 21 extendable
With situation of dynamic IP address, at some point you still need to know the exact Public IP address you receive from your ISP for server connection testing and production time. To find out, you can issue show ip interface brief command on the router. You will then see the associated WAN interface Public IP address.

Remote Management allows the device to be configured through the WAN (Wide Area Network) port from the Internet using a web browser. Step 1 Log into the web based configuration of the router by typing in the IP address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (nothing). Step 2 Click the Tools tab and click the Admin button. Step 3 Select the Enabled button to enable Remote Management. In the IP Address field type in the public IP address you wish to manage the router. Note: If you don´t know the IP address or wish to allow more than one IP address to manage the router then put an asterisk (*) in the IP Address field. You cannot enter an IP range. Step 4 By default the port used to Remote Manage the router is set to 8080. Change the port number by selecting the down arrow next to the Port Number drop down menu. Step 5 Click on Apply and then click Continue to save the changes. To Remote Manage the router you will need to type in the Public IP Address of the router in your web browser along with the Port Number (separated by a colon) you selected in Step 4.

Step 1 Open a web browser (Internet Explorer for example) and type in the LAN IP Address of the router (default:192.168.0.1). The username is admin (all lowercase) and the password is blank (nothing). Step 2 Click the Status tab and click the Device Info button. Step 3 The Public IP address will be listed under the WAN heading in the IP Address field.