Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[smoko]

This is my network

Code: [Select]

LOCALIZATION1 - DFL-210

Object -> Adress Book -> InterfaceAddress

 lan_ip   192.168.1.1
 lannet 192.168.1.0/24
 port2 192.168.1.4 Port2 redirect
 port1 192.168.1.3   Port2 redirect
 wan_dns1 xxx.xxx.xxx.xxx  
 wan_dns2 xxx.xxx.xxx.xxx  
 wan_gw 83.xxx.213.32
 wan_ip 83.xxx.213.33  
 wannet 83.xxx.213.31/29

Object -> Services -> port1_service_2710

NAME: port1_service_2710
TYPE: TCP/UDP
SOURCE: 0-65535
DESTINATION: 2710

Object -> Services -> port1_service_2711

NAME: port1_service_2711
TYPE: TCP/UDP
SOURCE: 0-65535
DESTINATION: 2711

Object -> Services -> port2_service_all

NAME: port2_service_all
TYPE: TCP/UDP
SOURCE: 0-65535
DESTINATION: 0-65535


Rules -> IP Rules -> my_rules

NAME: port1_SAT_2710
ACTION: SAT
SERVICE: port1_service_2710

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip

on SAT Tab:

Translate the DESTINATION IP to New IP Address: port1

i check " All-to-One Mapping: rewrite all destination IPs to a single IP "


NAME: port1_SAT_2711
ACTION: SAT
SERVICE: port1_service_2711

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip

on SAT Tab:

Translate the DESTINATION IP to New IP Address: port1

i check " All-to-One Mapping: rewrite all destination IPs to a single IP "


NAME: port2_SAT_all
ACTION: SAT
SERVICE: port2_service_all

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip

on SAT Tab:

Translate the DESTINATION IP to New IP Address: port2

i check " All-to-One Mapping: rewrite all destination IPs to a single IP "


NAME: port1_2710_allow
ACTION: ALLOW
SERVICE: port1_service_2710

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip


NAME: port1_2711_allow
ACTION: ALLOW
SERVICE: port1_service_2711

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip



NAME: port2_allow
ACTION: ALLOW
SERVICE: port2_service_all

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip


Code: [Select]

LOCALIZATION2 - DFL-210

Object -> Adress Book -> InterfaceAddress

 lan_ip   192.168.1.1
 lannet 192.168.1.0/24
 port2 192.168.1.4 Port2 redirect
 port1 192.168.1.3   Port2 redirect
 wan_dns1 xxx.xxx.xxx.xxx  
 wan_dns2 xxx.xxx.xxx.xxx  
 wan_gw 91.xxx.14.25
 wan_ip 91.xxx.14.26  
 wannet 91.xxx.14.24/29

Object -> Services -> port1_service_2710

NAME: port1_service_2710
TYPE: TCP/UDP
SOURCE: 0-65535
DESTINATION: 2710

Object -> Services -> port1_service_2711

NAME: port1_service_2711
TYPE: TCP/UDP
SOURCE: 0-65535
DESTINATION: 2711

Object -> Services -> port2_service_all

NAME: port2_service_all
TYPE: TCP/UDP
SOURCE: 0-65535
DESTINATION: 0-65535


Rules -> IP Rules -> my_rules

NAME: port1_SAT_2710
ACTION: SAT
SERVICE: port1_service_2710

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip

on SAT Tab:

Translate the DESTINATION IP to New IP Address: port1

i check " All-to-One Mapping: rewrite all destination IPs to a single IP "


NAME: port1_SAT_2711
ACTION: SAT
SERVICE: port1_service_2711

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip

on SAT Tab:

Translate the DESTINATION IP to New IP Address: port1

i check " All-to-One Mapping: rewrite all destination IPs to a single IP "


NAME: port2_SAT_all
ACTION: SAT
SERVICE: port2_service_all

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip

on SAT Tab:

Translate the DESTINATION IP to New IP Address: port2

i check " All-to-One Mapping: rewrite all destination IPs to a single IP "


NAME: port1_2710_allow
ACTION: ALLOW
SERVICE: port1_service_2710

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip


NAME: port1_2711_allow
ACTION: ALLOW
SERVICE: port1_service_2711

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip



NAME: port2_allow
ACTION: ALLOW
SERVICE: port2_service_all

INTERFACE SOURCE: any
SOURCE NETWORK: all-nets

INTERFACE DESTINATION: core
DESTINATION NETWORK: wan_ip


Code: [Select]

LOCALIZATION2 - DFL-210

Object -> Adress Book -> InterfaceAddress

 lan_ip   192.168.1.1
 lannet 192.168.1.0/24
 wan_dns1 xxx.xxx.xxx.xxx  
 wan_dns2 xxx.xxx.xxx.xxx  
 wan_gw 91.xxx.14.17
 wan_ip 91.xxx.14.18  
 wannet 91.xxx.14.16/29


Code: [Select]

LOCALIZATION2 - DFL-210

Object -> Adress Book -> InterfaceAddress

 lan_ip   192.168.1.1
 lannet 192.168.1.0/24
 wan_dns1 xxx.xxx.xxx.xxx  
 wan_dns2 xxx.xxx.xxx.xxx  
 wan_gw 91.xxx.14.9
 wan_ip 91.xxx.14.10  
 wannet 91.xxx.14.8/29




Computer 1 on HEADQUARTER Network1 have installed program for cameras on LOCALIZATION1 and LOCALIZATION2 in 192.168.1.3 (port 2710 and 2711).

When Computer1 on HEADQUARTER Network1 have connect to the DFL-210 on program for cameras watch cameras from LOCALIZATION2 but no video from LOCALIZATION1, when Computer1 have connect directly for modem dsl program for cameras watch video from LOCALIZATION1 and LOCALIZATION2

Sorry for my English, but please about indicators for me on this situation

With greetings
Smoko

[Fatman]

VPNs and using the same network ID at all locations do not mix.

I appreciate the amount of information your presented, but it is all a little confusing.  Lets resolve this first issue then we can work on what remains.

[smoko]

In log i can found this

Code: [Select]

2010-03-02  11:09:14 Warning CONN   600012 LogOpenFails TCP lan     192.168.1.2  /   91.xx.14.26    1299 / 2711   no_new_conn_for_this_packet  reject


[smoko]

upgrade firmware on server cameras was solved the problem


thanks for a helping me