This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SETTING A SERVER TO USE SECOND WAN ONLY

Hi,

I have two WAN addresses I would like all of the internal LAN to use WAN1 only and a single server VM to use WAN2 only. I have a 105w and two ports are used for the WAN1 and WAN2 one is used to connect to a switch on the LAN and the other is connected to the server. The tricky bit is that the server runs two VMs one for the LAN for storage etc (x.x.x.25) and the second for public access (x.x.x.35).

How do I allocate WAN2 to have exclusive access to the second VM (x.x.x.35). Whether this is the right way I do not want to advertise the WAN1 address for public access and do not want the second VM to have access to the LAN.

Thanks in advance.

Dan

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 5 years ago

Do you have two WAN interfaces or one WAN Interface with a Gateway and a Alias?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan Reed1 over 5 years ago in reply to LuCar Toni

Hi,

Thanks for the response. I currently have it set up as an alias.

Cheers

Dan
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Dan Reed1

Could you quickly draw a picture of your network plan? I cannot quite follow you.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan Reed1 over 5 years ago in reply to LuCar Toni

Hi,

Please see the "sketch" below.

The office users need to have access to the file server VM and the internet using the WAN 1 IP. I would like the public server to access the internet via the WAN 2 IP and not have access to the File Server or Office Users.

The router manages / acts as a gateway to distribute the 5 IP addresses we have. I have set an alias on Port 2 which goes to the router as the WAN 2IP.

The server has two network connections one used in the file server VM connected to the LAN and works great. The public access server is connected to the firewall as a DMZ. The public access server cannot connect to either of the WAN connections. Below is my firewall rule but doesn't seem to work.

If you can advise a better way or where I have gone wrong that would be greatly appreciated.

Cheers

Dan
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Dan Reed1

And this DNAT Rule does not work?

Seems like the Traffic does not work at all.

Would suggest to dump the traffic and take a deeper look.

https://community.sophos.com/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 5 years ago in reply to Dan Reed1

And this DNAT Rule does not work?

Seems like the Traffic does not work at all.

Would suggest to dump the traffic and take a deeper look.

https://community.sophos.com/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data