EFW Support

Support => General Support => Topic started by: jr3151006 on Tuesday 03 September 2013, 12:00:08 am



Title: EFC v2.41 - routing not working to 'Source Network' but only for one IP address.
Post by: jr3151006 on Tuesday 03 September 2013, 12:00:08 am
Hi,

we have one Endian FW Community v2.41, it has the following interfaces (physical):

Eth0 = Br0 = Static IP (192.168.0.1/22)
Eth1 = Main = DHCP (behind ADLS Modem with DMZ settings - 10.1.1.2/24)
Eth2 = Uplink1 = DHCP (behind ADLS Modem with DMZ settings  - 10.0.0.2/24)
Eth3 = Uplink2 = Static IP (187.x4.2x5.x3/29)

We have another company in our building, using the following network Ip range for internal usage '200.255.255.0/24'; we provide one IP address (192.168.0.251/24) to they put on their Linux. Just to explain out environment, our company uses the 192.168.0.0/24 to servers, 192.168.1.0/24 to printers, 192.168.2.0/24 to computers and 192.168.3.0/24 to visitors/guest.

The access to their main server (200.255.255.1/24) worked fine after adding an entry at Network/Routing, like:

---------------------------------------------------
Source Network/IP = 192.168.3.10
Destination Network = 200.255.255.0/24
Route via = Static Gateway = 192.168.0.251
Enable = yes
---------------------------------------------------

But we need more servers/computers at our side reaching them; after change the "Source Network/IP" to a IP range, like "192.168.0.0/22" it didnīt work, also not work as "192.168.3.0/24" - even put it at the 'First' position in the 'Policy Routing' menu. In that case, the tracert command show that the packets we forwarded to main uplink (red interfaces).

#######################

Is there anything missing since we are able to route only PC/IP to another company/network but not able allow our internal IP range??