Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[dryeah80]

Good morning,

I am asking for your help, please, in order to disable NAT on my Dir-655.
I have another Firewall which NAT all my requiests and I do not want that my Dir-655 do this work.

Thank you in advance

Regards

[FurryNutz]

I dont think NAT can be diabled on these routers, youll need to use the DMZ option maybe.

[dryeah80]

Thank you for your answer.

Realy I need to disable Nat because in my Firewall, I can not control internet users because they all use the router IP adresse to get Internet.

[FurryNutz]

Have you turned off SPI and set NAT to Endpoint Independent?

Are you using the 655 as a router and gateway or do you have another server that is handling the firewall and other services?

[dryeah80]

Yes but it is not working.

I use TMG (Microsoft) as Firewall, all requests are routed to this server.

I tried tu put my PC in DMZ, but TMG still get request from Router IP

[FurryNutz]

So is the 655 doing any IP addressing services like DHCP or is that being done else where as well? And is the 655 handling Internet gateway services?

Not really sure if having this 655 running with a external FW services is going to work for you in this configuration.

[dryeah80]

Yes, it is a DHCP server too, the router receives requests from Wifi clients then it will transfert all these requests to TMG using it external IP (which is in reality, a private IP address)

[FurryNutz]

Might help if you could type us a diagram if how your set up looks like:
Example:
ISP Modem>DIR-655<>Clients

[dryeah80]

OK, below my configuration :
ISP (VSAT) --> Connected with RJ45 to TMG Server (External NIC)
TMG Server (Internal NIC) connected to Switch
DIR-655 (Internet Port) connected to Switch (Gateway point to the internal IP adress of TMG Server)
Wireless Clients conncted to Dir-655

Thanks again for your help.

[FurryNutz]

Only thing I might suggest is set up static IP addresses on the devices and turn the DIR-655 in to an AP if your going to have external NAT and Firewall before the 655, it might work if you use the 655 as a AP and disable DHCP and all options on the 655 except wifi and connect the 655 using the LAN Ports in back and don't use the WAN port is about the only thing I might suggest.

[dryeah80]

I thank you for your suggestion but I can not do this kind of configuration, for the simple raison that I don't want to configure each time the IP address on the Devices or the new ones.

Thank you again for your help

[FurryNutz]

You may want to instead of using a dedicated router, use a wireless access point instead that also has LAN ports on the back, i.e. DAP 1360, 1522, 1525 or 1533 models are dedicated APs. Good Luck.

[dryeah80]

Could you please help me in order to turn my DIR-655 as an Access Point.
Just one question, this configuration will allow to wifi devices to get an IP address + GW + DNS from my internal DHCP server which is installed on an other serveur.

[FurryNutz]

Follow this: Turning a router into an AP.

[dryeah80]

Thank you so mch, I got what I need.