EFW Support

Support => General Support => Topic started by: megatronstl on Wednesday 18 September 2019, 11:59:17 am



Title: Pinging the red interface
Post by: megatronstl on Wednesday 18 September 2019, 11:59:17 am
I have a vswitch with 2 port groups
I have an efw appliance with 2 nics, 1 in each port group.

green gateway is default 192.168.0.15
red uplink is set as gateway 10.110.1.101.

I connect my laptop any my vmware host to a standard dell switch 1gb no configuration..no dhcp.

give laptop static ip address of 192.168.0.17, GW-blank.... Additional IP of 10.110.1.190. 

Can ping my vmware host at 10.110.1.252
Can ping my efw green interface at 192.168.0 15

*** ???Cannot ping red interface gateway of 10.110.1.101 ???  ****

I was under the impression that my laptop would hit the vmware host nic, enter the standard vswitch, and ping the red gateway via the vswitch?

Because all ive done is the basic config I'm sure I'm missing something... I wouldn't mind routing through the green interface if needed but I gotta reach that red gateway somehow.  Also I'm a routing newb.


Title: Re: Pinging the red interface
Post by: megatronstl on Thursday 19 September 2019, 03:18:12 am
Found this in the install support tab.

the icmp and also the web access is closed by default, if you want to open it you need to open the icmp and the web interface port under "Firewall > System Access"


Title: Re: Pinging the red interface
Post by: megatronstl on Friday 20 September 2019, 06:03:54 am
Ok. Now I want to ping through the Firewall... meaning... I want it to route from outside the green interface to the inside of the red interface.... eventually I will want to ping through the red interface to a VM on the other side....and... that vm application wants to use a vlan for the 80, 443 and 5900-x ports ... so... it will have to route from the native vlan to vlan 2(for example).

So... Laptop....port1-(physical config 1g switch-Native-vlan)-port2......VMHostNic1{Virtual Networking}....Vswitch1....Portgroup(native-Vlan)....EFW(Green-interface).....EFW(Red-interface)......Portgroup(Vlan-2).....VM-Application.    


Title: Re: Pinging the red interface
Post by: toka on Wednesday 08 January 2020, 02:43:33 am
Why do you want to check communication with 10.110.1.101?