9
votes
Accepted
IIS LAN and WAN separate SSL certificates for the same server
You can use single public certificate for both, external and internal clients. There is no need to use separate certificate for internal clients. Keep things simple.
- 7,117
9
votes
Accepted
Multiple Public IP's in One Network
The "correct" solution is to configure your router with the public IP addresses and use 1:1 NAT so web traffic entering the network is properly translated to the private IP addresses of your web ...
- 3,154
4
votes
Accepted
How do I allow access to a web server on an ISP that shares one IP address among all customers?
You generally don't. These systems use something like carrier grade NAT to share a single public IP meaning you would need ISP assistance to configure this. You're unlikely to get that.
- 15.5k
3
votes
IIS LAN and WAN separate SSL certificates for the same server
You can't use different certificates for the same website (*). Use a public certificate, internal clients will trust it just fine.
(*) There are workarounds, but they are quite cumberstome and you ...
- 71.3k
3
votes
How are VPS connected directly to WAN?
The physical interface of the host machine acts as a virtual switch (a bridge, really) where the virtual interfaces of the VPS are connected to. This way, you can connect multiple virtual interfaces ...
- 99.6k
3
votes
Why can't I connect to the internet when my server is down?
When your Windows 7 machines start up, they go through a DHCP discovery process to obtain an IP address and (most importantly for you) DNS settings.
DNS is used to resolve domain names (e.g. google....
- 171
3
votes
In ISP network when assign my own Static IP to Network adapter Why I am not able to ping even nearest router
Most likely your ISP configures their network equipment according to PPPoE authentication. Only PPPoE authenticated users have access to the network, other IP packets are dropped.
When you change to ...
- 37.6k
3
votes
Accepted
How should I configure properly my LAN to use IPv6 for communication on LAN and WAN?
Finally I have found the answer. Let's see what I have:
pfSense is being used as a router/firewall on my LAN.
I got Global Unicast IPv6 address from my ISP on my WAN interface. (GUIPv6 is routable on ...
- 96
2
votes
pfsense: all interfaces up, but all non default gateways down
I have almost the same issue on pfsense ver 2.3.2-RELEASE-p1
After hours of googling I found this.
https://forum.pfsense.org/index.php?topic=105644.0
Sometime gateways do not want to response to ping.
...
- 1,531
2
votes
Accepted
Connect multiple corporate partner private networks
The easiest way would be a hub-and-spoke IPsec network, where you'd stand up a Linux/BSD server somewhere and then configure IPsec (using Strongswan) associations from that server to each LAN site. ...
- 110k
2
votes
I have 6 wan connections, what's the best way to load balance them?
Unless these companies merge, you should let each companie use their own router with their public IP
That will allow them to create their own VPN tunnel and most importantly they will be separated.
...
- 17.1k
2
votes
Accepted
Routed IPv6 range and WAN IPv6 range in different subnets
You divide the /48 range into standard /64 networks for use on your LAN networks (you have 65,536 /64 networks you can derive from the /48 network). The WAN /64 network should be used on your router ...
- 3,273
2
votes
Accepted
Two or more hosts in traceroute answer
This means that there are two (or more) redundant physical links between points 4 and 6. If used, each of them will show up at point 5. Traceroute by default sends three probes. In this case one of ...
- 248k
2
votes
Accepted
How do I route all public traffic through Wireguard but not local traffic?
Found it in a comment on a Reddit thread.
AllowedIPs needs to have the following list in addition to the CIDR block of your Wireguard configuration. In my case, I've prepended 10.1.0.0/16 to this list....
- 31
1
vote
How to configure port forwarding a public IP to private IP in Windows 10 pro?
In WAN Settings, instead of using IP Address choose Interface option. Now in WAN interfaces section enter interface on which your WAN cable is connected.
As refered in datasheet at https://www....
- 11
1
vote
Need help setting up traefik over WAN and LAN
You're assumptions are right, so
first, the request will travel to a dns server, which is pointing to your public ip address
Your router will forward the incoming request to your docker host on port ...
- 23
1
vote
IIS LAN and WAN separate SSL certificates for the same server
I would agree with the other comments that if a simpler setup works for you, go simple. But to answer your original question, you can have multiple site bindings - you would setup one with the ...
- 121
1
vote
MySQL query is very slow over internet
Try disabling DNS reverse resolving from the MySQL server by adding or un-commenting the skip-name-resolve option on the MySQL configuration file like so:
# Skip reverse DNS lookup
skip-name-resolve
- 111
1
vote
Accepted
Puppet over WAN to implement configuration changes to linux clients
Puppet, chief, ansible etc. could always be wrapped by VPN. Every host you need to control you have to provision with vpn client which connects to your server and then you can manage all your client ...
- 328
1
vote
carp single wan address
You should be able to accomplish this with alias interfaces.
The rc.conf on host 1 would look something like this:
ifconfig_fxp0="inet 10.0.0.1/24"
ifconfig_fxp0_alias0="inet 1.2.3.4/24 vhid ...
- 1,054
1
vote
Accepted
SonicWall TZ205 Route traffic back to WAN IP
In your "forward rule", as a incoming NAT rule on the firewall, you need to tick the "Create a reflexible rule". That will create a loopback NAT rule.
That loopback rule detect your app want to talk ...
- 17.1k
1
vote
Accepted
Bypass Managed Router to allow External Access to Security System DVR
To reiterate what joeqwerty said, yes this can be done as he described. Or you can place a 2nd router between the switch and DVR as you described.
IF you have traditional coax cams this is ok so ...
- 66
1
vote
Accepted
Any detectable difference between traffic from HTTP browsing and HTTP downloads?
Your solution would probably come in the form of a firewall, used in conjunction with your device (or the device may have pseudo-firewall features). The firewall could differentiate the traffic with ...
- 576
1
vote
Accepted
Tunnel SSH and database ports via WAN2 in a dual WAN router
So I got this done using a USG-Pro-4.
A custom rule needs to be implemented for this via SSH as the UI for it is not complete at this stage to manage these rules.
The idea is to Send port 22,5432 ...
- 121
1
vote
Sonicwall NSA 5600 Dual Wan / HA + Dual Switches how to setup fault tolerance and VLANs
Following the comment, there is a better preview of what you need.
You miss one detail, does you have bought the Active/Active for the HA ?
With it you need two interface mapped to make the HA. One ...
- 17.1k
1
vote
Accepted
Bridge multiple LAN ports to a WAN
Simply use brctl addif br0 ethN to add all the ethernet ports to the bridge along with the WAN port. Your interface identifiers may vary.
- 37.6k
1
vote
Accepted
RADIUS/802.1x Latency Guidelines
You're nowhere near cause for concern. A typical RADIUS access server has a configurable timeout of several seconds (e.g. Brocade switches have a 3 second timeout, Cisco switches have a 5 second ...
- 248k
1
vote
Routing multiple WAN subnet on a single interface SonicWall NSA 2400
This is old, but it took me a while to find a solution so I'm posting here for the sake of others. I just faced a similar situation and I resolved it by adding a Route Policy following the ...
- 223
1
vote
Accepted
Forward Error Correction for WAN optimization
UDPSpeeder
One that showed up on HN recently was UDPSpeeder and may have what you were looking for. UDPSpeeder implements FEC. Apologies for answering several years late.
- 2,859
1
vote
Route to specific server over a single IP address
The firewall/NAT box may be able to do it and it will only take you several hours to come up with the rule-syntax to achieve it...
It may be more straightforward, if these "special" clients accessed ...
- 2,387
Only top scored, non community-wiki answers of a minimum length are eligible