Solved

How Can I access to the DMZ from behind TMG?

Posted on 2013-06-20
5
571 Views
Last Modified: 2015-01-21
Hello I have Zywall USG 100:

wan connected to ISP, ip from dhcp.
Lan1 with a pc and a network behind a TMG
dmz with a NAS.

I can access to the NAS from Internet and LAN1 pc1, but I can't access behind the TMG.

I think I need to configure the TMG to route to the NAS / DMZ but I don't know how to do.

Zywall
0
Comment
Question by:limmontreefree
  • 2
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
Cyclops3590 earned 500 total points
Comment Utility
i don't know the exact commands you would need to do since I don't have experience with either of those devices, but you're on the right track.  I would do the following

1) on TMG, configure a default route 0.0.0.0/0 to forward all traffic to 192.168.4.1
2) on Zywall configure a route for 192.168.1.0/24 to go to 192.168.4.2

That should solve your routing problem
0
 

Author Comment

by:limmontreefree
Comment Utility
You help me with your answer.

really TMG takes Routes With RIP but the Zywall firewall Drop the DMZ packets to inform the DMZ Route.
Thanks
0
 
LVL 25

Expert Comment

by:Cyclops3590
Comment Utility
why are you using RIP?  looks like a fairly small network, I would just use static routes and simply things.
0
 

Author Comment

by:limmontreefree
Comment Utility
It's easier check the RIP checkbox.

Thanks
0
 

Expert Comment

by:victorguillen
Comment Utility
I have a similar problem. I'm using ZyWall USG 50 and I can successfully access the FTP server, from inner LAN (behind TMG in your case) and from the Internet to the DMZ; what I cannot access, is the Web UI of the Cloud Drive. I use WD My Cloud.

I don't want to do a port forwarding to 80 as I did for the FTP (I'm doing port forwarding on 21 to My Cloud), because I plan to use My Cloud only as FTP; and for a Web Server, I'm planning to use a full Windows Box, and I will forward my HTTP 80 traffic to that Box, but at the same time I want to be able to get access to the web UI in My Cloud; my setting is exactly the same as yours.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now