Welcome to the Sophos User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
Junior Member
Join Date: Aug 2001
Location: USA
Posts: 17
#21 (permalink)  
Old 09-06-2012, 01:34 AM
Default

Got it to work! I think it was defining a static ip on the wan interface. It automagicly grabbed the default gateway ip in my range using dhcp. I will assign the others and test

I did take the realtek it of the mix but it was originally assigned to the lan interface
Reply With Quote
Junior Member
Join Date: Aug 2001
Location: USA
Posts: 17
#22 (permalink)  
Old 09-06-2012, 02:01 AM
Default

Not too shabby

Reply With Quote
BAlfson's Avatar
Grandis Professorem Astaro
Join Date: Mar 2007
Location: Oklahoma City
Posts: 20,663
#23 (permalink)  
Old 09-06-2012, 02:51 AM
Default

Hey Max, you need to post a bit more! That's the first linked image I've seen here.

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
SCA/UTM - Sophos Gold Solution Partner
www.MediaSoftUSA.com
Addicted to my iPhone!
Reply With Quote
Senior Member
Join Date: May 2010
Posts: 106
#24 (permalink)  
Old 09-06-2012, 04:06 PM
Default

No, I didn't.
If the C1000A is in transparent bridge mode, it shouldn't have an IP. Which is why you can't really admin it after bridging.
Glad you got it working! Gratz!

Your WAN interface on the UTM should grab an IP as part of it's PPPoE process. And it looks like it did!
Reply With Quote
Junior Member
Join Date: Aug 2001
Location: USA
Posts: 17
#25 (permalink)  
Old 09-08-2012, 03:39 PM
Default

I have a web server that has to use an external ip address. Does that mean I need to setup pppoe on the server to have it sit next to the UTM?

I have attached a diagram of what I think I need. Can anyone confirm?
Attached Images
File Type: jpg Drawing1.jpg (14.5 KB, 11 views)
Reply With Quote
Moderator
Join Date: Jul 2001
Location: southern California
Posts: 12,060
#26 (permalink)  
Old 09-08-2012, 11:18 PM
Default

Hi, you can use DNAT (and SNAT if needed) to forward external traffic to the server.

Barry
__________________
http://BlogSec.net
http://JobOyster.com
http://DealBert.net
IT Consultant specializing in high-performance Web Infrastructure and Security.
Astaro End-user since v1.x
  • ASL 9.2x, HP DL360G5 - FW, IPS, VPNs
  • ASL 9.2x, 2 Dell 1950's as WAF/proxy w HA
  • UTM 9.1x, Atom n270, 2GB RAM, 2 Intel GigE
    Netgear GS108T gigE switch & Astaro AP30 Access Point with 4 VLANs.
    60/60mbit FiOS internet.
  • Pending - UTM 9.2x, i5-4670, 4GB RAM, 2 Intel GigE
    Needs new NIC drivers before deploying
Reply With Quote
Junior Member
Join Date: Aug 2001
Location: USA
Posts: 17
#27 (permalink)  
Old 09-08-2012, 11:26 PM
Default

I wish it was that easy. That is what I would like to do, but cpanel requires the server to have the public ip assigned to it.
Reply With Quote
Moderator
Join Date: Jul 2001
Location: southern California
Posts: 12,060
#28 (permalink)  
Old 09-09-2012, 02:58 AM
Default

OK.

Unless your router and ISP allow 2 devices, then your plan won't work.

Also, you might try Proxy ARP on the firewall first.

Barry
__________________
http://BlogSec.net
http://JobOyster.com
http://DealBert.net
IT Consultant specializing in high-performance Web Infrastructure and Security.
Astaro End-user since v1.x
  • ASL 9.2x, HP DL360G5 - FW, IPS, VPNs
  • ASL 9.2x, 2 Dell 1950's as WAF/proxy w HA
  • UTM 9.1x, Atom n270, 2GB RAM, 2 Intel GigE
    Netgear GS108T gigE switch & Astaro AP30 Access Point with 4 VLANs.
    60/60mbit FiOS internet.
  • Pending - UTM 9.2x, i5-4670, 4GB RAM, 2 Intel GigE
    Needs new NIC drivers before deploying
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 10:06 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.

These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.