I have two networks that I'd like to connect with a router/firewall to filter traffic between the two. One network is on a public subnet, let's say
220.127.116.11/27 and the other network is on a private subnet
192.168.0.0/24. The are connected via a router which has three Ethernet ports, one connected to the internet, the other two connected to the public and private subnets and are on their own VLANS. How do I make the private subnet visible to the public network? Here's the network diagram:
- Router1 >eth0 --- Connected to Internet
- Router1 >eth1 --- 18.104.22.168/27 Connected to VLAN 64 Subnet 22.214.171.124/27
- Router1 >eth3 --- 192.168.0.1/24 Connected to VLAN 192 Subnet 192.168.0.0/24
I tried static routing
126.96.36.199 on the router
I also tried routing it to
I want traffic between the two subnets to pass through the router because I want to be able to setup firewall rules on the router between the subnets.
I tried static routes but couldn't get it to work, am I doing something wrong?
I realize I could use NATing but in order to access individual private IP machines, I would have to set up a one-to-one NAT which would eat up my precious limited public IPs
Do I have to setup a Tunnel to accomplish this? Wouldn't a tunnel bypass the firewall rules?
IP route show:
default via 188.8.131.52 dev eth0 proto zebra 192.168.0.0/24 dev eth3 proto kernel scope link src 192.168.0.1 184.108.40.206/27 dev eth1 proto kernel scope link src 220.127.116.11 18.104.22.168/29 dev eth0 proto kernel scope link src 22.214.171.124 127.0.0.0/8 dev lo proto kernel scope link src 127.0.0.1