View Full Version : DMZ to a subnet?
barry99705
07-06-2007, 09:16 PM
Is there any way to turn the DMZ port into a separate subnet? For example, I currently use ipcop, with a 192.168.2.X subnet for my wired boxes, and a separate nic and the 192.168.3.X subnet for my two wireless access points. I'm stuck using wep for one of my handhelds so I want to keep the wireless separate from the rest of the network.
dmorris
07-06-2007, 11:36 PM
hi barry...
yes, you can setup router in advanced mode and create a new network space and put the DMZ interface in it...
for example, you'd have your external space (usually DHCP), your internal space (192.168.2.1/24) with NAT enabled, and your other space with the DMZ interface (192.168.3.1/24) with NAT enabled...
that should keep them both seperate, but they both share the same external IP...
let us know if it works!
ps - where is north of everyone here ? :)
barry99705
07-06-2007, 11:49 PM
hi barry...
yes, you can setup router in advanced mode and create a new network space and put the DMZ interface in it...
for example, you'd have your external space (usually DHCP), your internal space (192.168.2.1/24) with NAT enabled, and your other space with the DMZ interface (192.168.3.1/24) with NAT enabled...
that should keep them both seperate, but they both share the same external IP...
let us know if it works!
ps - where is north of everyone here ? :)
Sweet! I'll give that a shot. 99705 is my zip code. :D
barry99705
07-07-2007, 12:31 AM
Okay, I've set the private space to be the internal interface. I've set the wireless space to be the dmz interface. I can't figure out how to set up dhcp for the wireless interface. Is there a way to set a separate dhcp server?
dmorris
07-07-2007, 01:45 AM
no, there is only one dhcp server for the internal subnet...
if you want to run two, it would have to be manually (through the command line configured manually)
barry99705
07-07-2007, 02:56 AM
no, there is only one dhcp server for the internal subnet...
if you want to run two, it would have to be manually (through the command line configured manually)
Crap......