EFW Support

Support => General Support => Topic started by: dantunes on Saturday 30 October 2010, 01:29:26 am



Title: Can Endian manage several Public IPs?
Post by: dantunes on Saturday 30 October 2010, 01:29:26 am
Hi,

I have currently 5 public IP, and 2 of them are used for LAN-to-LAN VPN with customers. At the moment these 2 VPN routers are not behind a firewall, and I wanted to know if I can use static NAT to keep them behind ENDIAN, but still having their dedicated public IP.

Can this be done, or do I have to setup these VPN's in Endian? How does Endian manage different Public IPs?

Thanks


Title: Re: Can Endian manage several Public IPs?
Post by: alvaroarb on Saturday 30 October 2010, 05:30:12 am
dantunes
If you want to put the vpn routers behinf endian then you have to :
1- Give both of your vpn routers LAN ip addresses
2- Then configure all your public ip's in your WAN or RED interface (Network --> interfaces --> Uplink Editor --> click on the pencil icon in you NIC then click Add additional addresses (one IP/Netmask or IP/CIDR per line) checkbox an add your additional IP's one per line using CIDR notation ... that in case you didn't do it in your initial setup)
3 - Now you have to NAT each of your public IP's to their respective vpn router : Firewall --> Port forwarding / Destination NAT -->click on 2Add a new Port forwarding / Destination NAT rule" --> on "incoming ip" select the ip you want to NAT, on "Incoming Service/Port" if you know the ports you need then state them, if you don't leave service and protocol in ANY (not really a good idea but it works), on "transate to" type your vpn router's LAN ip address (leave port/range blank), make sure the NAT droplist says NAT and the "enabled" check box is on, click on "Create rule" then apply and you're done ! repeat for the other vpn router.

Hope it helps