This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Access to one IP address or service only

Hello,

Here is my situation. I have a Linksys router that I gave a static IP address 192.168.1.200. I defined it as a host "Linksys Router". What I want is for users connected to that router to be able to connect to the VPN gateway ONLY. Lets just say the IP address is 212.126.210.204. What I want is for "Linksys Router" to have access to 212.126.210.204 only, or Checkpoint services only. The problem that I have is that "Linksys Router" is in a DMZ defined as 192.168.1.0 which say any access to any. Am I going to have to install another NIC, or is there a way to add a rule that overrides the ANY ANY for 192.168.1.0 for "Linksys Router" so that it can only access the IP address 212.126.210.204 or Checkpoint Services only? Thanks in advance.

This thread was automatically locked due to age.

Parents

0 bce over 19 years ago

$ldmz = dmz any allow any
$linksys1 = Linksys Router any drop any
$linksys2 = Linksys Router vpn allow 212.126.210.204

organize your packet filter rules in following order:

1. $linksys2
2. $linksys1
3. $dmz

then your linksys router would be able to connect only to the vpn gateway. but the rest of your dmz will be able to connect to any destination.
Cancel
Vote Up 0 Vote Down

Cancel
0 astrogreen over 19 years ago in reply to bce

Thanks BCE. That worked great, but now I have a problem with peer to peer connectivity. As in, I don't want to allow it. Check out my post "AP Isolation". Thanks again.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 astrogreen over 19 years ago in reply to bce

Thanks BCE. That worked great, but now I have a problem with peer to peer connectivity. As in, I don't want to allow it. Check out my post "AP Isolation". Thanks again.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data