Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 4 subscribers
  • Views 2944 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Staging UTM 9 for PPPoE on eth7

MarkCoveny

Hello,

 

So I'm looking to setup PPPoE on eth0 for a remote site. While I have it at the main site I have connected eth0 and eth7, assigned both a different IP, and can log into either IP to get to the management webpage. However when I disconnect eth1 I can no longer get to the assigned IP setup for eth7. I want to configure eth1 for the remote site's PPPoE, but I'm just not seeing how that's possible. As I can get to the IP for eth7 when eth0 is connected I feel like I have the firewalls and connection setup correctly, but for some reason pulling the cable out of eth0 removes the ability to use eth7. Any suggestions?

Thanks,

Mark

PS does anyone have a better article than this - https://community.sophos.com/kb/en-us/119003 for setting up PPPoE?



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Mark, and welcome to the UTM Community!

    Sorry, your description lost me.  A diagram might help, but it sounds like you're talking about trying to set something up for a remote site on a machine in use at your site - color me confused.

    Cheers - Bob

  • 0 in reply to BAlfson

    I'm not really sure how I could do a diagram of how to stage something for a remote site. Does this help?

     

     

    I want to setup the UTM 9 at a staging site in such a way that when it the remote site plugs it in there is no configuration necessary. However currently I can't configure eth0 for the remote site. When eth0 is plugged in I can get to the web managment at either 10.0.0.1 or 10.0.0.2 but if I disconnect eth0 I can't get to 10.0.0.2 even though it's still connected to eth7.

     

    Does that make sense?

  • 0 in reply to MarkCoveny

    Honestly, all but one of the installations I've done over the years has not been onsite or on a device drop-shipped to my client. Where I don't think the local admin will be able to do the five-minute initial-setup wizard, I've done an initial configuration in a VM and then sent a backup and a license to the site where it's then easy to restore the backup to their device and apply the license.

    WebAdmin is a GUI that manipulates databases of objects and settings.  A single change there can cause the Configuration Daemon to rewrite hundreds of lines of the code used to run the UTM.  There's a lot happening under the covers that isn't apparent.

    You're probably creating a routing nightmare by having two interfaces with 10.0.0.x defined as WebAdmin creates routes automatically based on the subnets defined on its interfaces.  Just configure eth0 for 10.0.0.1/24 and delete the Interface defined on eth7.  You will want them to use eth0 for their LAN at the new site.

    My usual recommendation is for internal subnets to be in the 172.16.0.0/12 range.  Reserve 192.168.0.0/16 for public hotspots and home users.  Reserve 10.0.0.0/8 for giant multinationals, ISPs, etc.

    Any better luck now?

    Cheers - Bob

  • 0 in reply to BAlfson

    There are on routing problems having both interfaces on the same subnet. The remote site's subnet isn't the same as the staging site. The client would rather not pay to have me fly to Amsterdam for the 5 minutes of work required to do the configuration. If this was a Cisco FW I could setup up without problems, and have it configured based on my needs. It blows me away that no one has thought to set this up to allow it to be staged before being sent out to a remote site...

  • 0 in reply to MarkCoveny

    You have a PM, Mark.

    Cheers - Bob

Reply Children
No Data