D-Link Forums
The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: kris999 on August 23, 2011, 02:08:37 PM
-
I received from my ISP IP public class for use example: 193.55.55.232 / 29 but first i must config internal comunication with ISP and they give me another class 193.55.55.76 /30 so 193.55.55.78 is for my router and 193.55.55.77 gateway to my ISP.
Is it possible to create something like that on DFL-210 or any other DFL firewall? Anybody can help?
Thanks,
Kris
-
Every DFL support that schema - routing subnet thru single IP
For example, lets make DMZ with public IP
1) Objects > Address book > InterfaceAddresses
wan_ip = 193.55.55.78
wan_gw = 193.55.55.77
wannet = 193.55.55.76/30
dmz_ip = 193.55.55.233
dmznet = 193.55.55.232/29
2) Rules > IP rules > dmz (make new folder)
# allow outbound traffic
Allow dmz/dmznet wan/all-nets all_services
# allow inbound traffic - you can limit it by services to get more high security
Allow wan/all-nets dmz/dmznet all_services
-
sweet
-
Thanks for help. But is it possible to use for browsing Internet IP address from 193.55.55.232/29 pool? Or only 193.55.55.78?
Thanks
Kris
-
You told your subnet is routed thru 193.55.55.78. Because of it, this IP should be assigned on WAN side
What you want? Privide to LAN IP addresses from 193.55.55.232/29 or just use one IP from this pool for NAT from LAN instead of 193.55.55.78?
First i already described
Second... try set new source IP in NAT rules as dmz_ip
-
;D
Dude you good
-
Great! Thanks for help!