Configure the correct IP ranges to enable a VPN Firewall to work in conjunction with an existing Router.

Transcription

1 Cnfigure the crrect IP ranges t enable a t wrk in cnjunctin with an existing Ruter. This dcument describes the steps t undertake in cnfiguring an existing ruter t wrk in cnjunctin with a (fr example FVX538v1/v2, FVS318, FVS336G, FVG318, FVS338). The dcument is t be cnsidered as a guideline and the User will need t adapt the infrmatin prvided t his/her specific requirements. Table f Cntents Existing cnnectin t the... 2 Cnsideratins when intrducing a in the existing setup A netwrk including the and all the LAN devices behind the A netwrk including the and the Ruter LAN interfaces... 3 Versin 1.0

2 Existing cnnectin t the It is assumed that the User already has a setup that allws a cnnectin t the as per belw diagram: Data Flw frm the LAN t the LAN Devices Private IPs x/24 Default Gateway = LAN Interface Private IP /24 (LAN Default Gateway) Ruter Data Flw frm the t the LAN Diagram 1 In the Diagram 1 scenari we have an ruter cnfigured t access the, with the LAN devices wrking n the range x (where x can have a value frm 2 t 254). This is a scenari where single-nat (Netwrk address translatin) takes place. Cnsideratins when intrducing a in the existing setup When intrducing a (ruter) sme cnsideratins will need t be made with Regards t the cnfiguratin f different IP ranges. The User will be presented with the fllwing generic scenari: Data Flw frm the LAN t the LAN Devices Private IPs (Static r DHCP frm Firewall) Default Gateway = IP Private IP (Static r DHCP frm Ruter) Default Gateway = Ruter LAN IP Ruter Ruter LAN Diagram 2 Data Flw frm the t the LAN Effectively having tw different netwrks t cnfigure: - A netwrk including the and all the LAN devices behind the NOTE t Diagram 1: the ntatin /24 is related t the subnet mask (in this case a 24 bits subnet mask = ) Versin 1.0

3 LAN Devices Private IPs (Static r DHCP frm Firewall) Default Gateway = IP - A netwrk including the and the Ruter LAN interfaces Private IP (Static r DHCP frm Ruter) Default Gateway = Ruter LAN IP Ruter Ruter LAN Due t the nature f ruting the IP ranges used in each f the tw netwrks has t be unique and dependant n the subnet mask used. The User has therefre tw ptins: Recnfiguratin - Optin 1 Maintain the exiting setup n the Ruter LAN interface (in this example with IP and subnet mask ) and cnfigure: The Interface with an IP address in the same range (fr example and subnet mask, and default gateway (matching the Ruter LAN address) The DNS servers (primary and secndary) will be cnfigured depending n the User s requirement either t be the Ruter LAN address r the Public DNS IPs btained by the ISP The Interface with a private IP address in any range except the range already used (in this case will be used with subnet mask ) The LAN devices will be cnfigured either statically with an IP address in the range x with subnet mask and default gateway (matching the address) r dynamically t receive DHCP settings frm the Firewall Versin 1.0

4 The btained netwrk will shw as: Data Flw frm the LAN t the LAN Devices Private IPs (Static r DHCP frm Firewall) Default Gateway = IP Private IP (Static r DHCP frm Ruter) Default Gateway = Ruter LAN IP Ruter LAN devices IPs = x IP = IP = DNS = depending n requirements Ruter LAN IP = Diagram 3 Data Flw frm the t the LAN Recnfiguratin - Optin 2 The user might require t maintain the current range f address used n the LAN devices (see Diagram 1) n the new LAN the. In this case the fllwing cnfiguratin will need t take place: The Ruter LAN Interface will be cnfigured with an IP address in a different range than the previusly used ne ( /24 as per Diagram 1). Fr example the Interface will be cnfigured with an IP address as with subnet mask. The Interface will be cnfigured with an IP address enabling it t cmmunicate with the new Ruter LAN interface IP. Fr example and subnet mask, and default gateway (matching the Ruter LAN address) The DNS servers (primary and secndary) will be cnfigured depending n the User s requirement either t be the Ruter LAN address r the Public DNS IPs btained by the ISP The Interface with a private IP address in any range except the range already used between the and Ruter LAN (in this case will be used with subnet mask ) The LAN devices will be cnfigured either statically with an IP address in the range x with subnet mask and default gateway (matching the address) r dynamically t receive DHCP settings frm the Firewall In this scenari therefre the IP range x which was used in the netwrk between the and Ruter LAN has nw been shifted t the netwrk between the interface and the LAN devices. Versin 1.0

5 The btained netwrk will appear as: Data Flw frm the LAN t the LAN Devices Private IPs (Static r DHCP frm Firewall) Default Gateway = IP Private IP (Static r DHCP frm Ruter) Default Gateway = Ruter LAN IP Ruter LAN devices IPs = x IP = IP = DNS = depending n requirements Ruter LAN IP = Diagram 4 Data Flw frm the t the LAN Versin 1.0