This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DMZ Zone and vlan does not work.

I have a DMZ zone created with a static IP. This is connected to a trunk port with some vlans allowed. I have added the vlan 50 on the same dmz zone with static IP.

Assigning the VM an IP on the same vlan 50 does not communicate at all.

I have created firewall rule to allow all communication from dmz to wan (to internet)

But not even ping answer.

Any help on that please?

Regards

Georgios

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 7 years ago

Hi Georgios,

the XG handles VLANs differently to the UTM. To get you DMZ to talk to a vlan on your switch you will need to create a vlan as part of your dmz. Assign a small address range or even just a single address to your dmz and the working IP range you want for your DMZ VLAN.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Georgios Atsigkioz over 7 years ago in reply to rfcat_vk

But this is what i have done. I can ping from wan those IPs but not from DMZ. Both IPs are on the same subnet.

I couldnt find any documentation for XG regarding DMZ and vlan. Is there any to share?

Se image :

thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Georgios Atsigkioz

Hi,

the dmz physical and the dmz vlan need to be on different subnets otherwise the traffic gets lost.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Georgios Atsigkioz over 7 years ago in reply to rfcat_vk

Ok Ian , i will try that with different subnets. But that way we loose a lot of IPs. :(

Is there any way we dont use any IP on the Physical DMZ port? I guess here needs to be public IPs ?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Georgios Atsigkioz over 7 years ago in reply to rfcat_vk

Ok Ian , i will try that with different subnets. But that way we loose a lot of IPs. :(

Is there any way we dont use any IP on the Physical DMZ port? I guess here needs to be public IPs ?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Georgios Atsigkioz over 7 years ago in reply to Georgios Atsigkioz

Just did it on different subnets and the same. No luck.
Cancel
Vote Up 0 Vote Down

Cancel