This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing between interfaces

Hi,

I’m in need of some assistance with configuring my UTM 9 router. It’s configured with a total of 3 interfaces. The first one is to the WAN / External / Internet, second interface is wired lan , and the third interface is wireless lan. The Wired lan is attached to a physical switch and the wireless lan is attached to a wireless router in AP mode. I have DHCP active on the wired lan and another DCHP on the wireless lan.

What I’m attempting to do is allow the wired and wireless lan talk to each other when necessary and allow both interfaces access to the WAN / External / Internet. In addition, I’m trying to isolate traffic from my wireless router from my wired switch when the traffic is only going to the internet. Some examples would be, but not limited to, allowing a desktop on the wired access the router admin interface, allow a laptop on wireless access a share on a computer located on the wired lan, allow a laptop on wireless RDP to a computer on the wired LAN, devices on the wired lan should be able to access the WAN / External / Internet, and devices on the wireless lan should be able to access the WAN / External / Internet.

From what I’ve seen, there’s different types of routing that may meet my requirements… however do I configure a static route or policy routes? Should it be an interface route, or gateway router, or maybe a blackhole route? Or is there another option that I’m not familiar with.

Any assistance with this would be greatly appreciated.

My Firmware version is 9.404-5.

I appreciate anyone who is taking the time to review my post and responding with a working solution.

 

 



This thread was automatically locked due to age.
Parents
  • Hi, Christopher, and welcome to the UTM Community!

    First, try #1 in Rulz.

    You didn't say why you think you have a routing problem, so I bet it's because you only tried to ping because WebAdmin automatically creates routes between subnets defined on its interfaces.  In general, pinging is regulated on the 'ICMP' tab of 'Firewall', but pings into a LAN must be allowed by an explicit firewall rule.  Given what I see here and on the other thread you started, I would make a firewall rule like:

    [LAN-Wired, LAN-Wireless] -> [Any, Ping] -> [LAN-Wired, LAN-Wireless] : Allow

    Cheers - Bob

Reply
  • Hi, Christopher, and welcome to the UTM Community!

    First, try #1 in Rulz.

    You didn't say why you think you have a routing problem, so I bet it's because you only tried to ping because WebAdmin automatically creates routes between subnets defined on its interfaces.  In general, pinging is regulated on the 'ICMP' tab of 'Firewall', but pings into a LAN must be allowed by an explicit firewall rule.  Given what I see here and on the other thread you started, I would make a firewall rule like:

    [LAN-Wired, LAN-Wireless] -> [Any, Ping] -> [LAN-Wired, LAN-Wireless] : Allow

    Cheers - Bob

Children
No Data