Connect to GREEN interface from other subnets

[Guest]

[dcampo81]

Hi. I'm testing Endian Firewall regarding VPN configuration, and I'm a little bit in trouble...

My wish is to allow internal LAN clients (from different subnets) to connect, using VPN, to another internal LAN subnet. This subnet is behind a firewall, and only one IP/Port is allowed to communicate with the rest of the LAN. I assigned this IP/Port to Endian's GREEN interface.


The problem is that GREEN interface is reachable only from clients that belong to its same subnet. How can I configure Endian to allow clients form ANY of my LAN subnets to establish a VPN connection through GREEN interface? What should be RED interface configuration?

Thank you very much

[fqureshi]

Assign multiple IPs of each subnet on your green interface.

[mzoz]

Sorry for the simple question but I'm confused :\ Can you provide me with an example IP given that I've subnet as the following 192.168.1.0 (the one the EFW is in), 192.168.3.0, 192.168.3.0

[fqureshi]

Suppose your EFW green interface IP is 192.168.1.254. You can assign one more IP to the green interface under the network configuration such as 192.168.3.254.

So now your green interface will have two IPs on one green NIC:

192.16.1.254
192.168.3.254