need help setting up EFW for additional public IP range

[Guest]

[npereira]

Hi All,

Note : all IP's are ficticous...

i finally changed ISP and have a DSL which is connected to a TP link model in bridge mode.

TheISP game me an IP address to assign the router 69.168.200.220 /

They also provided me with a range of 206.248.100.200 /29

I will configure the 69.168.200.220 on the RED interface facing the DSL router for internet connection.

My question is where and how do I setup the /29 range in order to forward requests from one of the ip in the range to a public (GREEN) private IP on the inside network?

How is this 1:1 NAT setup in EFW ?

Thanks for your help in advance.

[asifbaloch]

hey there.

I am going to talk about the concept. I am not an expert but according to the concept, its fairly easy.

You can use your EFW red interface as a PPoE to dial via your DSL modem / router so the RED interface gets the ip 60.168.200.200.
Assuming you have an ORANGE interface for your other IPs for the DNAT rules. Assign IP addresses such as 192.168.200.1 to 192.168.200.x ( x being the last ip and its for easy reference).
Assign your 60.168.200.20x/29 IPs on RED and proceed to Firewall tab on EFW. Click Port forwarding/Nat on the left side of the interface and add your public IP lets say 60.168.200.201 translation to 192.168.200.1 ( allow port 80 or whatever you want dnatted) . So the same for other public IPs.
In the end, set rules for outgoing traffic on ORANGE interface and the destination zone should be RED.

I hope this clears the concept.

Experts: If i screwed it up then correct me and the original poster

Happy firewalling!

[npereira]

good explanation but where and how do i add the ORANGE interface?

If I understand correctly, once I have the orange interface, I assign the other IP's to it, then go to firewall and add the 1:1 NAT in there pointing to a Static Private IP.... So this adding an Orange interface, do I simply add a static interface from the interface screen?

[npereira]

anyone?

[pdingle]

Im just about to set this up with a USB DSL Modem with multiple public IP's so will let you know how I get on

[npereira]

I actually got it all working, but yesterday, my DSL started to act up. So they need to get the underline carrier to test my line. was getting 61.5db on upstream... pretty bad.... Probebly to far from the CO.

[pdingle]

Ill come back to you then if I have issues setting it up