Here's the deal.
I want to setup a remote user (they access a control panel on the property) on my DMZ. I have done this and it works great. Their IP address in the firewall rule is the main secure point (and specific port). Use of the DMZ blocks any access to my lan (lan to dmz and dmz to lan are both deny). A policy route ensures the DMZ can go both ways.
Question 1. If I put down a local user (a company user name and company password) in the firewall rule, how does this show at their end?? What if they are using telnet?
I just want to play with an extra level of security.
Question2. Further I want to setup a VLAN on the DMZ for their information. The reason being if I sometimes use DMZ for guest accounts, I want to be able to allow this but not have guests access the other DMZ traffic (the control panel traffic).
So DMZ is configured for ex. 192.168.8.1
with IPs from .33 upward.
The IP for the control panel is 192.168.8.80
Now comes the hard part setting up a basic VLAN for this scenario.
See picture
I have decided to use VLAN45. I am stuck on what do I do for IP addresses and DHCP. I also chose internal network at the top, think this is correct.
--
Ain't nuthin but the blues! "Albert Collins".
Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"
LlamaWorks Equipment
↧