I switched my WRT firmware from dd-wrt to Tomato (with hardc0re's mod to enhance performance) yesterday afternoon. Throughout last night and this morning, no loss of connection (calls are fine, no reauth issues). So far, so good.
If things go well with Tomato for the next week or so, I'll assume that the reauth issues potentially come from the NAT/firewall within the RT. Running Tomato and hooking up the WRT to the RT WAN port was problematic (at least for me).
Updates coming later...
-Craig
A quadruple NAT setup to get it to workIt's amazing this setup is working without any problems. Personally, I would be hesitant to ever recommend such a setup.
If it's really necessary to have such a complicated setup, then it's either:
1) a bad ATA or
2) a bad ATA configuration/provisioning issue or
3) a bad router or
4) router setup problem.
It should be as simple as modem - ATA - router, or modem - router - ATA with a preferred single NAT at the most. Any other setup indicates a problem component and/or setup issue.
Last edited by tritch; 01-17-2010 at 04:23 PM.
With modem -> router -> ATA, how does one get single NAT? Turning NAT off on the RT makes it not get Phone 1 lit.
And where are my "4 NATs"? Not knowing what happens internally, I believe that having the RT entirely on the 172.20.0 network, it's not doing NAT at all. I thought NAT happens when going from 172 to 192, or public to private.
-Craig
Last edited by ctaranto; 01-17-2010 at 06:07 PM.
Assuming your modem is bridged, there's only one IP change from your public IP through your DHCP router to ATA ......thus single NAT.
If your ATA is attached directly to a bridged modem, there's no NAT at all since the ATA is seeing your public IP. Only the device's attached to the LAN port of the RT31P2 experience NAT.
My apologies, it looks like there is less than 4 NAT's since you turned off the DHCP server in the RT31P2. I'd have to study your setup a little closer to get a better idea of how many NAT's are going on.
There's still a problem somewhere in your setup if you are having to go to this trouble.
Having the ATA directly attached to the modem is a no-go. The RT is an insecure device - it's firewall, in a single word, sucks. When I had it directly connected, a run of ShieldsUp at grc.com showed ports were closed, not stealth. And a few ports were open.
Having the ATA behind the WRT caused reauth issues when the WRT was directly connected to the WAN port of the RT.
Which brings me to the topology in the first post of this thread.
-Craig
Bookmarks