shmish

I have set up two routers in my home network, the reason being that i want a division between my network and the tenant's (we share the internet access). The set up is as follows:

external IP -> router 1 (192.168.0.1) -> DHCP and 192.168.0.254 DMZ -> router 2 (192.168.10.1) -> DHCP

router 1 is using DHCP, and I set 192.168.0.254 as a DMZ

router 2 is given static IP 192.168.0.254, LAN from router 1 is connected to WAN of router 2

router 2 has gateway of 192.168.10.1 and does DHCP for my network

For the most part I have this working. I'm able to RDP into my network by port forwarding 3389 on router 1 to 192.168.0.254, then on router 2 I port forward 3389 to 192.168.10.x

The problem is that I can't ftp into my network when I'm remote. I've tried forwarding port 21 the same as RDP, as well as forwarding extra ports for passive ftp. I also temporarily put my ftp server (actually it's a NAS) into a DMZ and that didn't help.

I believe that the handshaking is not working and is hitting a timeout. The ftp server tries to report its gateway and I don't know if the gateway is 192.168.10.1 or 192.168.0.1.

I have two questions. First, other than the problems with ftp is there anything fundamentaly wrong with how I setup up the network? Secondly, any suggestions on what I could do to fix the ftp?

Lastly, I've read where other people disable the dhcp on router 2 and go from the router 1 LAN to router 2 LAN. Would this also bypass the firewall in router 2 (NAT?) and therefore not prevent my tenants from accessing my network?

thanks