ZyWall310/USG310 setup a VM in a DMZ zone
Hi there,
we have ZyWall310 and USG310 that are set up with identical config, where one is on stand by. Right now USG310 I on a stand by but we want to make it our main gateway. We are implementing a SecureLink solution which is gonna be a virtual machine that should be in the DMZ zone. We have configured failover for the WAN1 and 2 on ports 1 and 2. On port 4 we have our main network and that's where the virtual servers are connected. Port 5 should be the DMZ zone, but since we gonna use VM(virtual machine) nothing is connected. On port 6 we have another network for segmentation and port 7 is our IMPI network. port 8 is available. I thought this would be a straight forward way to do it but my attempts so far can't even get me to be able to ping port 5 from my VM. Any help would be greatly appreciated.
Thanks,
Mladen
we have ZyWall310 and USG310 that are set up with identical config, where one is on stand by. Right now USG310 I on a stand by but we want to make it our main gateway. We are implementing a SecureLink solution which is gonna be a virtual machine that should be in the DMZ zone. We have configured failover for the WAN1 and 2 on ports 1 and 2. On port 4 we have our main network and that's where the virtual servers are connected. Port 5 should be the DMZ zone, but since we gonna use VM(virtual machine) nothing is connected. On port 6 we have another network for segmentation and port 7 is our IMPI network. port 8 is available. I thought this would be a straight forward way to do it but my attempts so far can't even get me to be able to ping port 5 from my VM. Any help would be greatly appreciated.
Thanks,
Mladen
0
All Replies
-
Your VM is connected to DMZ zone.What is the setting on DMZ interface and the IP address and gateway IP of VM?It would be helpful if you can share the settings of DMZ in this post.0
-
the DMZ setting on the interface is internal and the IP is set to 192.168.42.1. As for the VM the IP is .5. Which settings of the DMZ would you like me to share? I was trying to find a guide on how the DMZ should be set on the ZyXEL to confirm if what i did is the right thing.0
-
Im attaching a network diagram of what and how things are currently connected
0 -
Does the IP 192.168.42.5 of VM get from dhcp of DMZ? Or is the IP configured manually?On zywall, you can capture packets for dmz interface. On VM, ping 192.168.42.1 continuously. Then check icmp request and reply packets and see which side doesn't respond.0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 90 Nebula Status and Incidents
- 5.4K Security
- 171 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 235 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight