Results 1 to 5 of 5

Thread: New Design

  1. #1
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default New Design

    We are thinking about adding another Untangle box to our network as a core router. Our current Untangle does both filtering and a good majority of our routing. I would like to implement a 2nd Untangle before the 1st Untangle, in order to provide routing, DHCP and captive portal.

    Lan -> 2nd-Untangle -> 1st-Untangle -> Internet

    I am thinking that all the traffic ariving to the 1st-Untangle will have the IP of the external interface of the 2nd-Untangle, causing issues with filtering and reports. I appreciate everyone's input!

    We are doing this to reduce the amount of traffic on the first Untangle to allow it to concentrate on filtering instead of routing within our network. I know there are better devices for situations like this, but I like the idea of sticking with Untangle as most of the guys in the department know how to administer it.
    Last edited by AdamB; 04-16-2013 at 07:34 AM.

  2. #2
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default

    Never-mind, tested this out myself, not going to work.

  3. #3
    Untangle Ninja
    Join Date
    Jan 2011
    Posts
    1,327

    Default

    ought to work fine, just turn off NAT on the new "2nd Untangle" (uncheck "Is WAN Interface" on the one that connects to "1st Untangle"). Then just add needed static route(s) to "1st Untangle" so that it knows that any LAN subnets are reached via the "2nd Untangle".

  4. #4
    Untangle Ninja jcoehoorn's Avatar
    Join Date
    Mar 2010
    Location
    York, NE
    Posts
    1,943

    Default

    Why not just let the existing untangle handle both jobs?
    Five time Microsoft ASP.Net MVP managing a Lenovo RD330 / E5-2420 / 16GB with Untangle 16.5 to protect a 1Gbps fiber link for ~450 residential college students and associated staff and faculty

  5. #5
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default

    Quote Originally Posted by jcoehoorn View Post
    Why not just let the existing untangle handle both jobs?
    Just to large of a LAN. I would prefer to have one doing our internal routing and one doing the scanning.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2