ActionTec + second router = port forwarding issue

Question

I'm having an issue with port forwarding (or maybe routing) across a pair of routers with different subnets. I know just enough about networking to be dangerous, but I can't figure this out. Hopefully someone more knowledgeable here can assist me.
Here's how my network is currently setup:
1) Standard FIOS ActionTec MI424-WR Rev D router, using default 192.168.1.* subnet.
2) Added a second router (D-Link Wireless-N w/ Gigabit Ethernet) using the 192.168.2.* subnet.
3) A patch cable connects an ActionTec LAN port to the D-Link WAN port. 
4) Most of my computers connect to the D-Link router for faster network speeds (desktop PC, NAS, etc.)
5) Both routers are running DHCP and broadcasting different SSIDs. This is so I can have a private network for my personal data (192.168.2.*) and a guest network (192.168.1.*) that friends/family/guests can use. Basically, from the 192.168.2.* network, I can access any network resource on either subnet; the 192.168.1.* network, however, cannot (easily) access the resources on the other subnet. 
6) This setup works perfectly and has met all of my needs so far.
Now, the problem I'm running into:
I purchased a security camera to monitor my home over the internet while away. It is connected to the D-Link router and I can access the camera without issue while on the 192.168.2.* network. Everything works fine locally. However, I cannot access the camera from the internet.  For sake of ease, let's use the following example setup:
Internet IP = 74.1.2.3
Router 1 = 192.168.1.1
Router 2 = 192.168.2.1
Camera = 192.168.2.2
Camera Port = 12345
Accessing the camera locally via http://192.168.2.2:12345 works fine, but accessing it remotely via http://74.1.2.3:12345 does not. I assume a route or port forward needs to be set on Router 1 (the FIOS ActionTec)? Any help is greatly appreciated.
Thanks,
-Patrick
Solved!
Go to Solution.

Answer 1

For future viewers, I will throw this out there. You don't normally want two routers with two port forward rules. The best practice is to give the second router a static ip on the lan of the first router and then put the second router in the dmz of the first router, and then apply port forward uses to the dmz'd router.