Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 349 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help needed at configuring a simple Ethernet connection over 2 Interfaces

fgesch
Hello together,

this week i started testing the ASG 7.0. Today, i've just updated it to v.7.008.

My Setup:

ASG v.7.008 on a 1GHz Desktop Machine with 256MBs of Ram and 3 NICs added in the PCI slots. All of them are connected to the Network (172.28.0.0/16).

The problem:

So, on installation, i've configured "eth0" as the configuration interface for the ASG. (192.168.2.1/24)

After reboot, i could access the WebAdmin from my Virtual Machine (192.168.2.16)

The Basic configuration worked fine.
Then I've created the "WAN Interface" on "eth1" and set the IP on 172.28.6.45 (I checked the Standart GW Check-Box and typed my GW in (172.28.2.4))

Just for testing the internet connection, i "disabled" the firewall with an "Any - Any - Any" Rule.
Nevertheless, the Firewall drops all DNS Requests and logging the reason named "action="DNS request"".  Why does it do that?!

09-13-2007 12:52:42 Daemon.Info 192.168.2.1 2007:09:13-12:52:53 ulogd[2581]: id="2014" severity="info" sys="SecureNet" sub="packetfilter" name="DNS request" action="DNS request" fwrule="60011" initf="eth0" dstmac="00:01:02:f5:84:20" srcmac="00:03:ff:01[:D]b:6b" srcip="192.168.2.16" dstip="192.168.2.1" proto="17" length="68" tos="0x00" prec="0x00" ttl="128" srcport="1155" dstport="53"


I tried to configure Routing and NATing but didn't solve the Problem.

Apart from those facts, I can reach 192.168.2.1 and 172.28.6.45 by ICMP but everything whats behind of 172.28.6.45 is not reachable.

May anyone knows any special/additional needed settings?

Greetz
FG


This thread was automatically locked due to age.
  • 0
    Looks like you may have your routing a bit phased. You can only route between different networks. 

    So for example 192.168.1.4/24 can be routed to 192.168.2.4/24 but you cannot route 192.168.1.4/16 to 192.168.2.4/16 because they are both on the same network.

    Is there a specific reason you need a class B address space?
  • 0 in reply to Buggrit
    Did you make a Masq rule:
    Internal network -> External Interface?

    Network/DNS/Forwarders filled in?

    Is the GW address: 172.28.2.4 active?
    Is this your modems GW?

    All of them are connected to the Network (172.28.0.0/16).
    Throe 1 switch/modem ?

    Look at this site for manual: http://www.astaro.com/kb/