PDA

View Full Version : DMZ to a subnet?


barry99705
07-06-2007, 09:16 PM
Is there any way to turn the DMZ port into a separate subnet? For example, I currently use ipcop, with a 192.168.2.X subnet for my wired boxes, and a separate nic and the 192.168.3.X subnet for my two wireless access points. I'm stuck using wep for one of my handhelds so I want to keep the wireless separate from the rest of the network.

dmorris
07-06-2007, 11:36 PM
hi barry...

yes, you can setup router in advanced mode and create a new network space and put the DMZ interface in it...

for example, you'd have your external space (usually DHCP), your internal space (192.168.2.1/24) with NAT enabled, and your other space with the DMZ interface (192.168.3.1/24) with NAT enabled...

that should keep them both seperate, but they both share the same external IP...

let us know if it works!

ps - where is north of everyone here ? :)

barry99705
07-06-2007, 11:49 PM
hi barry...

yes, you can setup router in advanced mode and create a new network space and put the DMZ interface in it...

for example, you'd have your external space (usually DHCP), your internal space (192.168.2.1/24) with NAT enabled, and your other space with the DMZ interface (192.168.3.1/24) with NAT enabled...

that should keep them both seperate, but they both share the same external IP...

let us know if it works!

ps - where is north of everyone here ? :)

Sweet! I'll give that a shot. 99705 is my zip code. :D

barry99705
07-07-2007, 12:31 AM
Okay, I've set the private space to be the internal interface. I've set the wireless space to be the dmz interface. I can't figure out how to set up dhcp for the wireless interface. Is there a way to set a separate dhcp server?

dmorris
07-07-2007, 01:45 AM
no, there is only one dhcp server for the internal subnet...

if you want to run two, it would have to be manually (through the command line configured manually)

barry99705
07-07-2007, 02:56 AM
no, there is only one dhcp server for the internal subnet...

if you want to run two, it would have to be manually (through the command line configured manually)

Crap......