Hi,
Well I have decided to scrap the idea of trying to get it working in transparent [bridging] mode, at least for the time being, and I'm now going for regular Routing mode. I thought I had the settings right, but the LAN side NIC is not getting an IP from DHCP, so I think I've set something wrong here. I'm hoping that there's someone here that's set it up in VMWare that can lend me a hand or, if nothing else, confirm that the settings look right in Astaro. Setting up a gateway, especially in VMWare, is a bit new to me. I'm confident with a lot of other types of servers, but not this.
Right now the firewall is on a separate network from my normal network, a test environment to get it going.
(I hope this isn't so much info as to be overwhelming, but I want to make sure I'm not leaving anything out.)
First of all, this is what I’m trying to achieve:
Internet -> [Inet IP - DSL Modem – 192.168.0.1] -> [192.168.0.4 – Router – 192.168.1.1] -> [192.168.1.2 – Firewall – 192.168.2.1] -> Clients, 192.168.2.xxx
(right now the clients would be the host machine and a single laptop)
Here's where it stands right now:
The firewall is Astaro Security Gateway running within VMWare Server. I am using the pre-made VMWare “Virtual Appliance” image. The host computer is running Windows XP Pro (32 bit, SP2 w/ all updates), it’s an AOpen XC-Cube (mini form factor) with SiS chipset, AMD 64 2800+, 2 GB DDR 400, 160 GB SATA (150) HDD, onboard video, NIC, & sound, also has a PCI modem installed (for my voicemail software) and a Linksys USB2.0 10/100 Ethernet Adapter and an AOpen CD & DVD burner. VMWare is set to dedicate 512MB RAM to the VM.
Actiontec DSL modem, LAN IP: 192.168.0.1 (static routing set to router)
Linksys BEFSR41, WAN side IP: 192.168.0.4, LAN side IP: 192.168.1.1
Physical adapters (on the firewall box):
Linksys USB 10/100 - WAN side, properties has no protocols checked except for vmware bridging protocol, tcp/ip, client for ms networks, etc., are all unchecked (the theory is to pipe the internet connection directly into the vm)
Realtek gigabit adapter (on-board) - LAN side nic, set to obtain IP by DHCP
VM virtual adapters:
Ethernet - Host Only
Ethernet1 - Bridged
Ethernet2 - Custom (bridged to vmnet2)
Virtual Network settings:
VMNet0 - Bridged to WAN NIC
VMNet1 - VMWare Virtual Network Adapter on subnet 192.168.150.5
VMNet2 - Bridged to LAN NIC
(DHCP, NAT, etc. all disabled for all devices)
Astaro Security Gateway v6.202 (VMWare virtual appliance image): Routing Mode
Network Interfaces:
Eth0 "Internal" - 192.168.150.5/255.255.255.0, Gateway: None
Eth1 "WAN" - 192.168.1.2/255.255.255.0, Gateway: 192.168.1.1
Eth2 "LAN" - 192.168.2.1/255.255.255.0, Gateway: None
(Using Eth0 as a private virtual network to access Astaro admin interface)
NAT/Masquerading:
Rule Type: Masquerading
Network: LAN (Network)
Interface: "WAN" (Eth1)
DHCP Service:
Interface: LAN
Range Start: 192.168.2.100
Range End: 192.168.2.254
DNS: 205.171.2.65 & 205.171.3.65
Gateway: 192.168.2.1
Packet Filter, Rules:
Group: None - Source: LAN (Network) - Service: Any - Action: Allow - Destination: Any
(Just a temporary rule to allow all traffic until I get it working properly)
Packet Filter, ICMP:
ICMP Forwarding enabled
ICMP on Firewall enabled
Ping settings all enabled
Proxies, HTTP:
Status: Enabled
Operation Mode: Transparent
Log Level: Full
Anonymity: None
Allowed Networks: Any
Content Filter: Disabled
Parent Proxy: Disabled
Advanced: Caching enabled, Block CONNECT method on HTTP port disabled, allowed target services are set to defaults
Everything else left on default settings.
Thank you very much in advance for any advice you can give.
This thread was automatically locked due to age.