EFW Support

Support => General Support => Topic started by: fdelval on Sunday 18 July 2010, 11:57:21 pm



Title: cant get to configure orange DMZ
Post by: fdelval on Sunday 18 July 2010, 11:57:21 pm
Hello, i have been trying and exploring EFW for some days,

So far it has been great experience, but i have a problem

I have 2 NICs. My EFW is connected to an ethernet cable, and i get the external IP from there (CABLE CONNECTION ISP).

So far, in the SYSTEM -> NETWORK CONFIG , i can only select the ETHERNET BY DHCP option, and follow up the instructions to configure red and green zones, but, there is no way i can config orange... what am i doing wrong????


Title: Re: cant get to configure orange DMZ
Post by: DFen on Monday 19 July 2010, 04:28:12 pm
fdelval

To configure Orange or Blue you must have at least 3 interfaces (Ethernet, WiFi or ADSL).
You may alternertatively be able to configure one of your Ethernet interfaces with VLANS - giving additional VLAN interfaces.

Note: I havn't tried VLANS myself.

From the point of view of a firewall with 2 interfaces -
One must be RED - The unsafe area you are protecting from
One must be GREEN - The internal area you are trying to protect.


Title: Re: cant get to configure orange DMZ
Post by: fdelval on Thursday 22 July 2010, 01:34:34 am
ok, i listened to you and bought a new interface, but i got an offer 2 x 1 so now i have 4

Now i wanted to go one step further and,,, i want to configure a DMZ, GREEN, RED, RED zone

So i should plug a cable for each ADSL connection

(~~~ adsl router ==== ==\
............................................endian box)
(~~~2nd adsl router ====/
Is it possible? my main concern is wan failover, QoS, load balancing etc


Title: Re: cant get to configure orange DMZ
Post by: mrkroket on Thursday 22 July 2010, 06:10:45 am
I have used VLAN's, and if your NIC supports it, it works very well. With 2 NIC's I have 5 interfaces (2 REDS, GREEN, BLUE and ORANGE).

You need a second RED. Endian offers WAN failover, QoS, and static routing (but doesn't have load balancing). You can send some traffic via WAN1 and other traffic via WAN2, with static routes.