2 routers on a switch thru Untangle

[Legendrd]

Hi,
We have an untangle server that has been setup as a bridge, and is currently connected to 1 NetGear VPN Firewall Router which that connects to the ISP (RR Business Service)

My question is: if I introduce a 10/100 ethernet switch between the Untangle and the Netgear Router can I add a 2nd Firewall Router and have the untangle monitor that as well?
My reason for this is we have 5 IP addresses with our ISP and have setup different routers on each IP which have different services running thru them, such as FTP, Email, HTTP, and so on, and I would like the Untangle to be able to monitor both the HTTP and Email traffic but want to keep them on separate IPs...

thanks

[gotkimchi]

Welcome to the forums. Sorry, I am unable to follow your network. Do you have a network diagram? If not, could you describe it something similar to this:
WAN-Netgear router (5 IP addresses)-Untangle (bridgemode)-LAN

I think, you are trying to do this:
WAN-Netgear-Switch-other Router on one of the ports, other port Untangle (bridgemode)-LAN

Please correct me, if I am not understanding your network.

[richie]

welcome. it will filter traffic as long as the hosts are behind and passing through untangle.
are you using the vpn on the netgear? if not, i would just make the untangle the router and use the dmz interface for your other routers.

[Legendrd]

Sounds like you have got it spot in, The 5 IP addresses are supplied by ISP.
SO connection would look something like this:

WAN - Router 1
WAN - Router 2

Router 1 - Port 1 on Switch
Router 2 - Port 2 on Switch
Untangle (External NIC) - Port 3 on Switch


hope this helps..

[dwasserman]

Not sense, put a real router (not a NAT box) and manage all public ip whit it, otherwise you are incoming in a nightmare of routing because have 2 default gateways.

[itcinc]

Originally Posted by Legendrd

My reason for this is we have 5 IP addresses with our ISP and have setup different routers on each IP which have different services running thru them, such as FTP, Email, HTTP, and so on, and I would like the Untangle to be able to monitor both the HTTP and Email traffic but want to keep them on separate IPs

quote emphasis added....

If I read this correctly you are saying you have 5 IPs AND 5 routers for a single data connection. Seems like a lot of trouble that could be handled in a much simpler manner.

I second Richie's suggestion that you use Untangle as the router if you are not using a VPN connection on the Netgear. Untangle has the ability to handle multiple public IP addresses and forward them to the desired private address. You can even do this with different port numbers on a single IP address - e.g - 1.2.3.4->port 80->192.168.1.4 and port 21->192.168.1.5

Basically your first public IP would be assigned as the external IP address and the next four addresses would be configured as aliases. You then decide where you want to forward them to on the LAN. You will need to establish NAT rules if you want the traffic to go back out on the same IP as it came in on. There is another thread that has a discussion of that subject that we could find if you need it.
e.g.
1.2.3.4 -> internal mail server @ 192.168.1.4
1.2.3.5 -> internal ftp server @ 192.168.1.5
1.2.3.6 -> internal web server @ 192.168.1.6

Would that work for you? It would sure be simpler.

[Legendrd]

While I appriciate everyone suggestions on how to change my network, it is not awnsering my question.
We cannot change the setup for a number of reasons, one being VPN connections to different parts of the network, and the other for security reasons.
SO - Will the untangle server in its current setup monitor 2 WAN connected routers via a switch?

thanks

[dwasserman]

I am not sure, download, install and try yourself.

[itcinc]

If I understand what you want to do it will look something like this:

router1--->switch port 1

router2--->switch port 2

................switch port 3--->UT--->LAN switch--->workstations

You will have one input and one output and Untangle will be scanning everything that goes through it. I think the short answer to your question is "yes" - you should be able to do this with Untangle this. You can download the ISO and get busy installing.