It might be a simple task, but I fail to get my DHCP / IP traffic right.
In my old network setup my server was running with the Astaro/Sophos UTM as a VMWare appliance. The UTM was one of the three VMs on the server and all IP traffic ran through the switch in-and-out of the UTM.
The UTM was setup as a DHCP-server on the Internal NIC. So all systems and laptops could recieve an IP from the UTM.
The internetrouter was directly (patchpanel not included) connect to the port 24 of my switch. The router is also my WiFi-AP. And this where the problems start.
In my old scenario, laptops and pc's (connected to the router) were able to get an IP address from the DHCP. Eventhough the router running on a differtent subnet.
Now my setup changed drasticly.
I closed the UTM on de VMWare server. Have set up a new server with the software UTM. Connected the router directly to the External NIC on the "new" UTM. The Internal NIC has still the DHCP server configured.
But now the WiFi / CAT connections on the Router do not get any IP address or networkconnection from the UTM.
I tried many things allready, but still fail to get that part of the network running again.
- tried to bridge
- tried to relay the UTM-DHCP onto the External NIC
- tried to bridge clients over relay
- tried to route the External onto the Internal network.
When I set a new DHCP server on the External NIC the clients get an IP address from within the Outside-scope But fail to connect to the Inside Network.
I also have tried to use the CAT lines to connect to the Internal LAN, but this fails also.
I think I overlook a tiny setting. Maybe it could be a Firewall Rule I forget to set on the UTM for the inbound traffic. I know that there where changes in de Firewall Rules, so I have changed a few. With the best deleting of the Any->ANY->ANY rule
NOTE: Normal traffic outbound and inbound for port 80 / 25 / 21 / 8080 work perfect. Hence the fact that I have 4 protforwarding rules set on the router pointing to the External NIC of the UTM.
Schematicly both situations look like:
OLD = Laptop (DHCP Client IP 192.168.x.106) -> WiFi router (10.0.0.1) -> External NIC (10.0.0.200) -> Internal NIC 192.168.x.254 (DHCP server scope 192.168.x.100 - 192.168.x.150) -> Internal Network 192.168.x.0/24
OLD = Laptop (STATIC client IP 192.168.x.105) -> LANport router (10.0.0.1) -> External NIC (10.0.0.200) -> Internal NIC 192.168.x.254) -> Internal Network (192.168.x.0/24)
NEW = Laptop (DHCP client IP gets 169.x.y.z (fails to get IP)) -> WiFi router (10.0.0.1) -> External NIC (10.0.0.253 new IP) -> DROP all traffic.
NEW = Latop (STATIC client 192.168.x.105) -> LANport Router (10.0.0.1) -> External NIC (10.0.0.253) -> DROP all traffic
In Flow design it looks like the attachment. Left OLD Right NEW
This thread was automatically locked due to age.
