Results 1 to 6 of 6
  1. #1
    Untangler
    Join Date
    Jan 2019
    Posts
    39

    Default Setup untangle through ISP routers DMZ zone

    Hello,

    I am moving to a different ISP in the UK (vodafone) and just realised the router they provide does not support modem mode. I also require the ISP router to be the gateway for the ISP provided VOIP to work.

    They suggest to avoid double NAT i can connect the untangle device to the ISP routers DMZ zone. Will this cause any issues or break some functionality within untangle, i mainly use web filter, application controls and VPN.

    Thanks

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,236

    Default

    In this cases I prefer to run Untangle as a NAT'less router, assuming the ISP device can at least do static routes it leaves you in the easiest to troubleshoot configuration without double NAT.

    If that isn't possible that's what bridge mode is for, though I don't prefer it because brouting is just strange sometimes.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Untangler
    Join Date
    Jan 2019
    Posts
    39

    Default

    Thanks for the quick reply.

    Is that just a case of disabling option of ‘Nat traffic existing this interface’

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,236

    Default

    Quote Originally Posted by kkw98 View Post
    Thanks for the quick reply.

    Is that just a case of disabling option of ‘Nat traffic existing this interface’
    Yes! But once you do the Internet will die if the border device doesn't have a route for any network "inside" Untangle. So you have to configure that first.

    Untangle won't need any routes for stuff beyond it because that default gateway already on External will take care of it.
    kkw98 likes this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  5. #5
    Untangler
    Join Date
    Jan 2019
    Posts
    39

    Default

    Hi

    Just learnt that the ISP router is very basic and will not even have an option to add static routes.

    Will this work if the whole setup is on a flat vlan. Currently I only have 2 Vlans, one is for Guest network which is isolated but I can still achieve it being on same Vlan.

  6. #6
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,236

    Default

    Then you're stuck... tell your ISP to get rid of its device. You cannot really use bridge mode with VLANs at all, and to get what you need otherwise you're stuck with double NAT.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2