EFW Support

Support => General Support => Topic started by: wilddoktor on Sunday 31 January 2010, 05:40:37 am



Title: Connect two subnets together behind Endian
Post by: wilddoktor on Sunday 31 January 2010, 05:40:37 am
For testing purposes, I have setup a small lab consisting of an old linksys befsr11 router (wan port is not plugged in; lan port plugged into a small switch), a windows 2008 domain controller (w/DHCP and DNS), a 2008 terminal server, and a few thin clients.

I would like to hook this into my exisitng LAN to get internet access, without disrupting the current internet access.

Where in my endian 2.2 rc3 configuration would I set this up?  Under "Firewall"?  Port Forwarding?  Source NAT?  Somewhere else? 

Maybe I need to add a 3rd NIC to the EFW and plug the test network in there?

I'm not terribly brilliant with this stuff, so specific directions would really help!  :)  Here's a visual:

(http://www.thatcomputergeek.com/images/ARRR.jpg)




Title: Re: Connect two subnets together behind Endian
Post by: wilddoktor on Sunday 31 January 2010, 01:43:19 pm
So, um...yeah...decided to throw a third NIC in my EFW, call it BLUE, give it an IP address, and plug it into my test lab switch. 

I now have internet access.

*sheesh*  Sometimes, I just don't get to see how dumb I am until it's all out in public like that...  ;D

So, the next question is:  When I need to drop this test lab into a potential client's site, and they don't have a router capable of this, what then?  Guess I'll cross that bridge when i get to it (hopefully soon!!).


Title: Re: Connect two subnets together behind Endian
Post by: acecombat on Monday 01 February 2010, 06:52:44 pm
So, um...yeah...decided to throw a third NIC in my EFW, call it BLUE, give it an IP address, and plug it into my test lab switch. 

I now have internet access.

*sheesh*  Sometimes, I just don't get to see how dumb I am until it's all out in public like that...  ;D

So, the next question is:  When I need to drop this test lab into a ial client's site, and they don't have a router capable of this, what then?  Guess I'll cross that bridge when i get to it (hopefully soon!!).

If the client's site is a remote then you will need to create some kind of VPN gateway between the remote site and your site.  You can setup something like that with another Endian box, or a switch with VPN module or etc.