Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[bandit69]

Hi Guys,
Would very much appreciate your help. This is the scenario:
I have a public IP 196.x.x.x from my ISP which has been configured as the WAN1 IP on my DFL-1660. Now we requested for more public IPs and we were given two: 41.x.x.1 and 41.x.x.2. My ISP says these two IPs have been routed to me statically. In order to use them, I configured WAN2net as a subnet for them and gave WAN2 the first IP 41.x.x.1. Now the prolem is I have configured my SAT, NAT and other rules but cannot get to this IP from outside. Am thinking I should add another route but isn't the DFL meant to know where to route requests for 41.x.x.1 since its configured on an interface? Also how do I create loopback interfaces on the DFL? Thanks

[danilovav]

If you need to add this IP addresses to DFL, it's possible
1) Objects > Address book > InterfaceAddresses
Add wan1_ip2=41.x.x.1, wan1_net2=41.x.x.y/z, wan1_ip3=41.x.x.1, wan1_net3=41.x.x.y/z
You can calculate networks via http://www.subnet-calculator.com/
If wan1_net2 is the same with wan1_net3, don't make duplicates
2) Interfaces > ARP
Add ARP publish wan1_ip2, wan1_ip3 on WAN1
3) Routing > Routing tables > main
Add routes
core wan1_ip2 <no gateway> 0
core wan1_ip3 <no gateway> 0
wan1 wan1_net2 <no gateway> 100
wan1 wan1_net3 <no gateway> 100

Next, make necessary IP rules

But... if you want to assign this IP addresses to some PC in local network or you have PPPoE instead of just IP - logic will be different

[bandit69]

Hi Alexander,
Must say a big thank you for your response (which I am just reading). I must commend you for a good job on this forum. I have read a number of your posts. Would try this out and let you know how it went. Thanks

[bandit69]

But just out of curiousity, how do I assign these IPs to a server on my network?  (from your last paragraph). Thank you

[danilovav]

Haha, I'm glad to listen my replies help

My example was about publishing IP on DFL itself and make additional port mapping (SAT+Allow) to internal server

Do you need to have possibility to assign additional public IP to servers inside your network?
For better making of example, can you assign DMZ port for this task to separate public systems from your network?

[bandit69]

Hi Alex,
Thanks for your response and so sorry am just responding. You are indeed an asset onn this forum. Yes it is possible to assign DMZ port to public systems on my network (But why only DMZ and why not WAN2?). So please how do I go about giving these public systems public IPs from my ISP? Thank you

[danilovav]

DMZ is because it will be internal interface. You can use any ethernet or VLAN interface as you want.

One more question before howto - does your ISP provided 41.x.x.0/30 network or more wide? If it's /30, you will lose one IP because it will be assigned to DFL.

[bandit69]

Hi Alex,
Thanks for your response. My ISP is providing me with 4 more IPs (41.x.x.x/29) so I don't mind loosing one. Thank you and waiting the How-to.

[danilovav]

Objects > Address book > InterfaceAddresses
Set values to
dmz_ip = 41.x.x.y (for example, first IP from your pool)
dmznet = 41.x.x.x/29

Intrefaces > Ethernet > dmz
Disable option Automatically add a route for this interface using the given network

Routing > Routing tables > main
Add route dmz/dmznet/100, enable proxy ARP to wan1 (your WAN interface)

Rules > IP rules > dmz
Add necessary rules. For example, allow all traffic
Allow wan/all-nets dmz/dmznet all_services
Allow dmz/dmznet wan/all-nets all_services
If you need to give access from LAN to DMZ, add rule
Allow lan/lannet dmz/dmznet all_services

[bandit69]

My man Alex,
You are a genius. Everything just works and am so grateful for all your help. Sorry am just responding. I have been away from work. Thanks and thanks again

[chechito]

Hi Guys,
Would very much appreciate your help. This is the scenario:
I have a public IP 196.x.x.x from my ISP which has been configured as the WAN1 IP on my DFL-1660. Now we requested for more public IPs and we were given two: 41.x.x.1 and 41.x.x.2. My ISP says these two IPs have been routed to me statically. In order to use them, I configured WAN2net as a subnet for them and gave WAN2 the first IP 41.x.x.1. Now the prolem is I have configured my SAT, NAT and other rules but cannot get to this IP from outside. Am thinking I should add another route but isn't the DFL meant to know where to route requests for 41.x.x.1 since its configured on an interface? Also how do I create loopback interfaces on the DFL? Thanks

i think to get this wan1_ip from outside you need to configure PBR using routing rules

[danilovav]

bandir69, you are welcome!

chechito, it's not necessary because all IPs are present at main routing table
Additional IP is published via ARP proxy

Alternative routing tables mostly ised if you have multiple WANs

[bandit69]

Chechito and Alex,
Thanks for both your replies. BTW what is PBR? From danilovav's description I know it has to do with creating alternative routing tables. Thanks

[danilovav]

PBR is Policy Based Routing
Usually it's used to change direction (i mean, interface or gateway) of traffic by some rules

Best example is incoming connection from second WAN intreface. If PBR is not configured, DFL will try to send ICMP reply via default route (e.g. WAN1) - as result, WAN2 will be not reachable. Via PBR you can change intreface/gateway for traffic from WAN2 - thru WAN2/wan2_gw