This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Router -> UTM

Hi,

Probably been asked a dozen times before. I've been searching for a few hours and can't pin down how to setup what I want. I have a VPN connection through openVPN on my DDWRT router.

I'd like to have my traffic flow through that router. So I'm looking for the following

Internet -> Modem -> router -> UTM -> LAN (wifi) etc. I understand that I can bridge the UTM. However what I'm not sure of is if the router or the UTM will manage DHCP. What I'd really like is to have the router just pass the VPN / WAN IP to UTM and have the UTM manage the rest. (I have the UTM running mint and currently setup without the router in place.) I just want the VPN for anonymity... it's to a VPN provider and not site to site...

If this has been answered at nausea, my apologies, please just point me in the right direction.

This thread was automatically locked due to age.

0 apijnappels over 11 years ago

What you want is your modem (or your router) to be bridged so that your UTM gets the public IP-address instead of the modem (or router) who will most likely get the public address now.
This will also prevent the double-NAT that you probably have in place now.
Cancel
Vote Up 0 Vote Down

Cancel
0 jrlrocks over 11 years ago in reply to apijnappels

Thanks, no double NAT as I don't currently have the router inline.

Anyone know a good TUT on bridging the DDWRT router to accomplish my task? I'm looking but can't seem to find one.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi,

I would do:

Modem
    |
UTM (non-bridged)
    |
DDWRT
    |
anonomized PCs

You should be able to do this with no NAT or bridging needed on the DDWRT if you only use internal addresses on it.
Have the anonomized PCs use the DDWRT as their gateway for all internet traffic, and local traffic to printers, etc. would still work.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 jrlrocks over 11 years ago in reply to BarryG

thanks for the feedback Barry, just for clarification; I would have DHCP running on both UTM and DDWRT (DDWRT would have openVPN setup/running too)

I think I get it.

One thing I really like about UTM managing IP addy is that I can shut my kids off from NAS video library as well as the internet. Would I not disable dhcp on DDWRT?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi,

Only run 1 DHCP server; UTM is normally preferred.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 jrlrocks over 11 years ago in reply to BarryG

alright, this is a bit beyond my networking skills... I understand only one DHCP server. I disabled DHCP on DDWRT. However now I've just got a switch. I need to know how to run the UTM (LAN) through the WAN port on DDWRT?? i believe to have the VPN work... and I need to enable the firewall port in UTM as well.

Barry, and community, thanks for all the help!
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi,

I'm hoping the VPN in the DDWRT can listen on the admin (internal) address without using the WAN port.

You'll need a DNAT and firewall rule on the UTM for the SSL VPN port.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisBaksa over 11 years ago

Why not use the VPN in the UTM and decommission the DDWRT router?
It support SSL VPN. Works very well.
UTM will create the required IP Pools for VPN IP Addressing.
You can create DHCP pools for each vlan if you want.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi Chris,

He wants a Site-to-Site VPN using OpenVPN; there are some difficulties using the UTM's site-to-site SSL VPN with commercial providers.

See
http://feature.astaro.com/forums/17359-utm-formerly-asg-feature-requests/suggestions/715890-ssl-vpn-convert-ovpn-to-apc-epc-for-site-to-si
for some details.

Barry
Cancel
Vote Up 0 Vote Down

Cancel