Configuration of DMZ

Forum|Forum|18 years ago
November 5, 2007
9 replies
6147 views

I am having trouble setting up the a DMZ. I believe the confgiguration is correct but I can not able to get out onto the internet from the DMZ. Internetcoms into wan1 Internal system connects to several computers. DMZ only connects to one computer. I tried two systems on DMZ. both are able to connect on the working network fine. I configured the network DMZ interface to manuel and options for DMz to forward DNS The Primary DNS is my ISP SERVER same as my WAN I created firewall policy to allow wan1 to DMZ DMZ to Wan1 wan1 to internal All are wide open

rwpatterson

New Member

Make sure NAT is enable on any policy facing the Internet. Private IP addresses are not able to be routed across the Internet. If that doesn' t help, run a traceroute from the command prompt and see how far your traffic gets before it dies.

UkWizard

New Member

If the above doesnt resolve it, as you say you only have one host, i am presuming that its a direct cable to the dmz port, is it? and if so, check the duplex settings and cable in case the link between the DMZ port and the servers lan interface isnt quite working properly.

A

Anonymous_UserAuthor

Contributor III

First thanks for the help. I guess I should have given the model. It is a FGT 60ADSL. Nat is enabled on the policies. Running a tracert does not go anywhere. Nor can I ping anything but the loopback I do have a cable running direct from the fgt to the computer. DMZ port to NIC card on CPU I am not sure what you mean by checking the duplex setting because I believe that this unit does not have duplex settings. I have tried other cables and I did at one time try a crossover cable. The ip adress the computer gets as configured 169.254.231.54/255.255.0.0

rwpatterson

New Member

What that IP address is, it' s the Microsoft auto configure address (range). This basically means that DHCP is turned off (or is not working correctly) on the DMZ port and that the work station does not have a valid IP address. No communication will take place on that port until this is resolved. Hard code in a valid IP address and see if the situation changes any. Let us know.

Sign up

Login with SSO

Login to the community

Login with SSO