Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 710 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

dmz output by second wan

susana
Hi!
We have Astaro v 7.402.
We have a pool of public IP addresses, xx.xx.xx.66-67-68-69, and gateway is xx.xx.xx.65.
I want to use the primary external interface configured with the ip xx.xx.xx.67 and with the default gateway (xx.xx.xx.65) to exit the LAN traffic and another external interface with the ip xx.xx.xx.66 for the DMZ.
The Astaro is configuring acording the article of the knowledge base second to Route Policy WAN Connection (236926), but it does not work correctly.

The configuration is:
WAN INTERFACE
Address: xx.xx.xx.67
Netmask: / 29
Default GW: enabled
Default GW IP: xx.xx.xx.65

WAN 2 INTERFACE
Address: XX.XX.XX.66
Netmask: / 29
Default GW: Disabled

Definitions>>Networks
Definition for the WAN gateway address: xx.xx.xx.65

Create the policy route:
Route Type: Gateway Route
Source Interface: DMZ
Source Network: DMZ(network)
Service: Any
Destination: Any
Gateway: Gateway (xx.xx.xx.65)

NAT masq for second network:
Masquerading Rule
Network: DMZ(network)
Interface: WAN2 

Any idea?


This thread was automatically locked due to age.
Parents
  • 0
    I'm confused by the overlapping definitions in DMZ (Network) and External (Network); I think that would cause routing problems.

    I suggest you use the "standard" approach of creating a DMZ with private IPs.  Then, put Public-IP 'Additional Addresses' on your WAN interface and create DNAT rules to connect them to the private IPs of the servers in your DMZ.

    Cheers - Bob
Reply
  • 0
    I'm confused by the overlapping definitions in DMZ (Network) and External (Network); I think that would cause routing problems.

    I suggest you use the "standard" approach of creating a DMZ with private IPs.  Then, put Public-IP 'Additional Addresses' on your WAN interface and create DNAT rules to connect them to the private IPs of the servers in your DMZ.

    Cheers - Bob
Children
No Data