EFW Support

Support => General Support => Topic started by: ekelley on Monday 14 April 2014, 01:50:18 pm



Title: isolate an IP Address
Post by: ekelley on Monday 14 April 2014, 01:50:18 pm
So I was wondering if it was possible on the Green network to isolate 1 IP Address. I want it so it cannot talk to any other systems on the green network or servers and the only thing it can get to is the Internet. Has anyone tried this and if so how did you configure it??

Thank you
Eric


Title: Re: isolate an IP Address
Post by: dda on Wednesday 16 April 2014, 08:29:07 am
Sounds like you need to put it in another zone.


Title: Re: isolate an IP Address
Post by: kieronrob on Wednesday 16 April 2014, 05:52:11 pm
Hi,

I agree with dda - why not put the machine into the Orange (DMZ) zone? You can then use the interzone firewall to allow machines from the green zone to access it but block access from it to the green network.


Title: Re: isolate an IP Address
Post by: ekelley on Friday 18 April 2014, 11:53:20 am
I agree I have all my zones filled! I have my servers on my orange zone and Blue is my Wireless network.

Ok so maybe you guys can give me a suggestion here is what I have going on this is a small office-
 
I have my green network that connects to a switch that is connected to few more systems and then connects to another switch that connects to 3 more systems that I want to isolate. I was thinking about putting a router in place instead of the second switch and maybe give that an ip address that is isolated. I don't have a managed switch with L3 so vlans could be a issue and I cannot run lines. I do have a small ddwrt router that I can use any suggestions are welcome! I have thought of different things but just cant decide.  



What do you guys think??

Eric


Title: Re: isolate an IP Address
Post by: ekelley on Friday 18 April 2014, 11:53:47 am
dropbox.com/s/m0rsyb1jseiedfc/network.JPG