EFW Support

Support => General Support => Topic started by: dcampo81 on Wednesday 19 September 2012, 06:01:49 pm



Title: Connect to GREEN interface from other subnets
Post by: dcampo81 on Wednesday 19 September 2012, 06:01:49 pm
Hi. I'm testing Endian Firewall regarding VPN configuration, and I'm a little bit in trouble...

My wish is to allow internal LAN clients (from different subnets) to connect, using VPN, to another internal LAN subnet. This subnet is behind a firewall, and only one IP/Port is allowed to communicate with the rest of the LAN. I assigned this IP/Port to Endian's GREEN interface.


The problem is that GREEN interface is reachable only from clients that belong to its same subnet. How can I configure Endian to allow clients form ANY of my LAN subnets to establish a VPN connection through GREEN interface? What should be RED interface configuration?

Thank you very much


Title: Re: Connect to GREEN interface from other subnets
Post by: fqureshi on Thursday 20 September 2012, 07:10:01 am
Assign multiple IPs of each subnet on your green interface.


Title: Re: Connect to GREEN interface from other subnets
Post by: mzoz on Thursday 04 October 2012, 09:48:38 am
Sorry for the simple question but I'm confused :\ Can you provide me with an example IP given that I've subnet as the following 192.168.1.0 (the one the EFW is in), 192.168.3.0, 192.168.3.0


Title: Re: Connect to GREEN interface from other subnets
Post by: fqureshi on Thursday 04 October 2012, 10:12:05 am
Suppose your EFW green interface IP is 192.168.1.254. You can assign one more IP to the green interface under the network configuration such as 192.168.3.254.

So now your green interface will have two IPs on one green NIC:

192.16.1.254
192.168.3.254