Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[kris999]

I received from my ISP IP public class for use example: 193.55.55.232 / 29 but first i must config internal comunication with ISP and they give me another class 193.55.55.76 /30 so 193.55.55.78 is for my router and 193.55.55.77 gateway to my ISP.

Is it possible to create something like that on DFL-210 or any other DFL firewall? Anybody can help?

Thanks,
Kris

[danilovav]

Every DFL support that schema - routing subnet thru single IP
For example, lets make DMZ with public IP

1) Objects > Address book > InterfaceAddresses
wan_ip = 193.55.55.78
wan_gw = 193.55.55.77
wannet = 193.55.55.76/30
dmz_ip = 193.55.55.233
dmznet = 193.55.55.232/29

2) Rules > IP rules > dmz (make new folder)
# allow outbound traffic
Allow dmz/dmznet wan/all-nets all_services
# allow inbound traffic - you can limit it by services to get more high security
Allow wan/all-nets dmz/dmznet all_services

[scrubsguy]

sweet

[kris999]

Thanks for help. But is it possible to use for browsing Internet IP address from 193.55.55.232/29 pool? Or only 193.55.55.78?

Thanks
Kris

[danilovav]

You told your subnet is routed thru 193.55.55.78. Because of it, this IP should be assigned on WAN side
What you want? Privide to LAN IP addresses from 193.55.55.232/29 or just use one IP from this pool for NAT from LAN instead of 193.55.55.78?
First i already described
Second... try set new source IP in NAT rules as dmz_ip

[scrubsguy]

 

Dude you good

[kris999]

Great! Thanks for help!