Page 1 of 3 123 LastLast
Results 1 to 10 of 21

Thread: dmz bridge mode

  1. #1
    Newbie narrdarr's Avatar
    Join Date
    Jun 2013
    Location
    nv usa
    Posts
    13

    Question dmz bridge mode

    hello,
    im new to untangle. i had had issues with zentyal so figured i would try something new.
    i just need alittle help with my setup for my home.

    i have 3 nics.
    eth0 external static to internet
    eth1 internal static for AP
    eth2 bridge DMZ- external for ps3

    if i'm understanding this correct the dmz bridge will avoid any nat. that is way i want to use it for my ps3.
    i am having trouble connecting to the internet though eth2(DMZ)
    so i'm guessing its and ipaddress issue..?
    what ip address do i use for the ps3? if i need to set one how do i do this?
    Last edited by narrdarr; 06-27-2013 at 11:49 AM.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,700

    Default

    If the PS3 is on the DMZ bridged to the External, your PS3 will need to have an IP address from the device upstream from the Untangle (ISP or ISP modem).

    Another configuration is to have the PS3 on Internal and bypass the IP address of the PS3 so it's not filtered by the Untangle. Bypass rules are in Config -> Networking -> Advanced -> Bypass Rules. This is how I have my PS3 configured.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    Theres really no reason to give your PS3 a public IP, IMO.
    You still need to bypass traffic to/from it whether its on the DMZ with a public IP or one internal with a private IP.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  4. #4
    Newbie narrdarr's Avatar
    Join Date
    Jun 2013
    Location
    nv usa
    Posts
    13

    Default

    ok ty.
    i tried to use the ip address that is upsteam, but it failed to connect.
    so i think the second option would be best,do i need to change the eth2 from dmz to internal? if so how?
    i left it as dmz made it static, set the an ip address, made the bypass rules. i am able to connect now.
    but i still have nat 2 instead of nat 1..?
    the other issue is where are the DHCP setting for the DMZ? i have no idea what the range is. i just happen to make a lucky guess when i chose the ip address for the ps3.
    ty again for the help.

  5. #5
    Newbie narrdarr's Avatar
    Join Date
    Jun 2013
    Location
    nv usa
    Posts
    13

    Default

    sry dmorris i was replying when you posted, i believe you answer. "do i need to change the eth2 from dmz to internal? if so how?"

  6. #6
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    You can't use the same IP address another device is using.

    You could bridge your DMZ to the internal interface, effectively just making it another internal interface.
    Or you could not use the DMZ at all and just plug your PS3 into whatever you plug your other devices into (presumably a switch on the Internal interface)
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Newbie narrdarr's Avatar
    Join Date
    Jun 2013
    Location
    nv usa
    Posts
    13

    Default

    i'll try the bridge. 1 sec

  8. #8
    Newbie narrdarr's Avatar
    Join Date
    Jun 2013
    Location
    nv usa
    Posts
    13

    Default

    so if bridge dmz into the internal what's the ip address of the dmz?

    wouldn't it be easier, just use the dmz with a different ip address.
    example:
    eth1 internal 192.168.1.0 dhcp range whatever
    eth2 dmz 192.168.2.0 dhcp range whatever

    then set a bypass rule for the eth2(dmz) interface begins only the ps3 is connected to it?
    i am able to connect this way.
    just need to fix the nat issue.

  9. #9
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,700

    Default

    If an interface is bridged, it does not need an IP address. Bridging is similar to a network switch, the switch NICs don't need IP addresses.

    You need to bypass the IP of the PS3, not the interface.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  10. #10
    Newbie narrdarr's Avatar
    Join Date
    Jun 2013
    Location
    nv usa
    Posts
    13

    Default

    yea i got connection through the bridge. ty guys!
    however i still can't get the bypass rule set correct to change the ps3 from nat 2 to nat 1.
    so i guess, i'm asking what rule(s) should i be setting for the ip address of the ps3 to make this happen?

Page 1 of 3 123 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2