Firewall rules - manage modem on external side?

Hi,

This is my setup:
- internet to modem known as 10.1.1.1
- modem to Astaro Security Gateway PC on NIC known as 10.1.1.2 (external)
- the internal side NIC of the ASG is 10.1.1.3
- my wireless DLink router is working as a switch and is plugged into the ASG and is known as 10.1.1.4
- my SBS 2008 server is 10.1.1.5 and is also the DHCP server

The ASG DNS forwarders are specified as my two ISP DNS servers followed my by SBS box - is that right?

But my question for now is: how do I access my modem (10.1.1.1) from my laptop for config purposes? Is the a packet filter rule I can write, or do I actually have to plug it into the modem?

Thanks,

Warren
warrenrapsonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

russell124Commented:
You need to put the modem and external NIC on a different subnet than your internal LAN subnet.  Right now both sides of your firewall are configured to use the 10.1.1.0 Subnet.

Assuming you are using a 255.255.255.0 subnet mask, I would keep the 10.1.1.0 subnet for your internal network, and use a 10.1.2.0 subnet (Or whatever Number you like, as long as it isn't 10.1.1.0) for your DMZ subnet.  Change the modem IP to 10.1.2.1 and your external Astaro interface IP to 10.1.2.2.

Then change the internal Astaro IP to 10.1.1.1 so that it is the default gateway for your internal network.  If you have these subnets properly configured, the routing should be taken care of automatically, and you will be able to access the modem via it's new IP address of 10.1.2.1.

Your DNS settings should be ok, I typically use my windows DNS server as the listed DNS forwarder,  and then set the windows DNS to use the ISP forwarders, just make sure to add a packet filter rule to allow the DNS traffic from the ISP servers to your SBS server.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
warrenrapsonAuthor Commented:
Mate, that is fantastic!

Those are some of the best instructions i've read. Thank you thank you thank you!!! Exactly what I needed!

I've got more questions re firewalls, ports and DNS - if you like, check this out: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/SBS_Small_Business_Server/Q_24568129.html


Thanks again,

Warren
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.