Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 377 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG-120 "Drop-in mode"?

gdiscenza
I have a network that uses the IP address range of 192.168.168.0, which was set up by the ISP.

I need to install a firewall behind the router (which I have no authority over) and I'd really rather not double-NAT or renumber the entire network.

Does anyone have any experience with this situation? I have looked through the forums and found nothing applicable.

I currently have all 4 interfaces operating in bridge mode, but I'm not sure that is the right way to do it. Right now, web browsing is spotty, sometimes being quick, sometimes so slow as to time out entirely. the other problem I'm having is that Skype will not connect to the Skype servers.

Any help would be greatly appreciated.

G. Discenza


This thread was automatically locked due to age.
  • 0
    I too, would avoid double-natting.  Simply setting up a pair of bridged ports, with appropriate packet filter rules, should do the job.  You should not need to define any NAT rules whatsoever.  THe HTTP Proxy can be configured to run in transparent mode, it too should work fine.  I have a commercial customer that, due to various reasons, runs their Astaro in just this manner.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Cookie Information Banner