DMZ Setup issues

[TSG]

Dear All

Im having some issues with my DMZ setup, basically i have configured my lan setup ok.

And im now setting up and testing my DMZ.

Ive assigned the Address 192.168.200.148/24  to my DMZ port

I have also set up a laptop for testing purposes with the IP 192.168.200.140/24

Ive configured allow all rules in both directions.

And have connected the laptop to the DMZ port but I cant even ping the DMZ port address (192.168.200.148) let alone try testing NAT or any advanced rules.

Any ideas what i may be missing..?

Many Thanks

P

[muttbarker]

OK - Dumb question time - did you configure the DMZ I/F to allow for ping?

[TSG]

Rule is set as ANY-ANY alow and enabled for the DMZ

Network > Interfaces > list>DMZ>ping box is checked

I have no idea why this is failing all in the same network and same subnet....

Paul

[SSHSSH]

have you enabled the manageble option  under Network > Interfaces > list>DMZ>

[TSG]

Hi

No i haddnt enabled the Management option is that a requirment..?

[SSHSSH]

yes ,  for ex to enable ping on that intarface :

check managable box

check ping

[TSG]

Hi There,

Not sure if you misunderstand but i have a PC connected DIRECTLY to the port, and i cant ping the DMZ address from that PC.

Would that be classed as external, every other device ive encountered will ping immediatly when connected in this way.

Paul 

[SSHSSH]

Hi TSG

 i 'm just speaking about the following case

"  you are directly connected to the port & cannot ping its ip "

you need to do the following under the interface :

#check the box beside ping

#check the box named manageable beside the ip pf the interface

[TSG]

Hi There

Thanks for claryfying

Yes that is my situation.

Yes both of those options are sellected.

Still times out..Even tried it with old faithfull X-over cable still nothing.

Paul

[SSHSSH · Accepted solution]

ok

can you check if you have permitted ips configured

if permiteed ips confiured , these ips only can access the firewall

check if your configuration have  lines like that :

set admin manager-ip 172.16.40.42/32