Hướng dẫn cấu hình tính năng DMZ cứng - Vigor3300

8/2/2019 Hng dn cu hnh tnh nng DMZ cng - Vigor3300

1/7

T

AN PHAT FORUM - Dien dan DrayTek VN> H tr k thut> Cc chc nng khcHng dn cu hnh tnh nng DMZ cng (Physical DMZ)

K danh K danh Ghi Nh?

Mt m ng Nhp

ng k Hi/p Thnh vin Lch Bi trong ngy Tm kim

Cc chc nng khcDynamic DNS, NAT, DMZ, Bind IP to MAC, Printer Server...

Ln c: 2553 - Tr li: 5 iu Chnh Tm trong bi Xp bi

24-07-2008, 10:48AM

#

adminAdministrator

Tham gia ngy: Apr2008

Bi gi: 626S ln cm n: 791c cm n 377ln trong 158 bi

Hng dn cu hnh tnh nng DMZ cng (Physical DMZ)

Hng dn cu hnh tnh nng DMZ cng (Physical DMZ)Dng Vigor3300 h tr chc nng DMZ cng ngi truy cp vo cc server trong mi trng Intenetmt cch bo mt. C 2 ch h tr trong chc nng ny l ch NAT v ch Routing. Sau y lhng dn ng dng lin quan v cu hnh.M t tng qutTrong chc nng ny chng ta s dng giao din WAN nh 1 DMZ cng. Ngi dng ch c th s dng 1WAN lm DMZ trong 1 thi im. Mc khc ngi dng phi kch hot tnh nng Load Balance v kchhot giao din DMZ trc.Di y l 2 v d m t ch NAT v ch Routing1. Cu hnh ch NAT:M hnh ng dng

Trn WAN 1 ca Vigor3300, ngi dng phi cung cp IP tnh (IP public ca nh cung cp). Mc khcngi dng cn nhn 1 nhm IP tnh (bng subnet mask) cho ng dng ny. Trong trng hp ny, dyIP s t 210.243.230.32 n 2140.243.230.39. IP u tin (network IP) v IP cui cng (broadcast IP) skhng c s dng. Chng ta s cu hnh i ch IP 210.243.230.33 cho giao din WAN 1, subnet mask

ng d n c u hnh tnh nng DMZ cng (Physical DMZ) - AN PHAT... http:/ /forum.draytek.com.vn/showthread.php?t=85

7 10/04/2012 6:51 CH


2/7

l 255.255.255.248.Chng ta cu hnh WAN 4 lm DMZ cng, a ch IP l 172.16.1.1/255.255.255.0.Lp mng ny phi khc vi lp mng LAN ca Vigor3300. Chng ta cn s dng 3 server trong vngDMZ, 3 server ny c kt ni n switch hoc hub.Sau , chng ta cu hnh 3 IP khc trong nhm IP ca nh cung cp vo trong IP Alias. 3 IP ny cnh x ring vo 3 server.

210.243.230.34 nh x vo 172.16.1.2210.243.230.35 nh x vo 172.16.1.3210.243.230.36 nh x vo 172.16.1.4

ch NAT hot ng tt chng ta cn cu hnh tnh nng DMZ.Cc bc cu hnh- Cu hnh giao din WAN 1 trn V3300.

- Cu hnh WAN 4 lm DMZ cng.

- Trang cu hnh WAN chnh:


7 10/04/2012 6:51 CH


3/7

- Cu hnh DMZ Hosta) 210.243.230.34 => 172.16.1.2

b) 210.243.230.35 => 172.16.1.3

c) 210.243.230.36 => 172.16.1.4

Sau khi hon thnh cc bc trn, tnh nng DMZ c th hot ng tt.2. Cu hnh ch Routing:M hnh ng dng


7 10/04/2012 6:51 CH


4/7

Trong ch ny, c 1 im khc so vi ch NAT l ngi dng khng cn a ch private lm DMZtrong WAN 4 v IP Alias trong WAN 1.Tuy nhin, vn cn nhn 1 nhm IP tnh t nh cung cp (IP Public). Ngi dng t bn ngoi c th truycp trc tip vo server m khng s dng tnh nng NAT. 3 server s c cp 3 IP tnh (IP Public).i ch IP gateway t i cc my server tng t a ch gateway ca WAN 1.Cc bc cu hnh

- Cu hnh WAN 1 trn V3300.

- Cu hnh WAN 4 lm DMZ. Nh cu hnh a ch IP ca cc server trong DMZ.


7 10/04/2012 6:51 CH


5/7

- Trang cu hnh WAN chnh:

Sau khi hon thnh cc bc trn, tnh nng DMZ c th hot ng tt.Chc cc bn thnh cng. Mi kin thc mc vui lng lin h vi chng ti

C 2 ngi cm nadmin cho bi vit ny:

taolatao01 (26-03-2009), vuanh (25-07-2008)

25-03-2009, 10:05 PM #2

draytek_networkThnh vin mi

Tham gia ngy: Mar 2009Bi gi: 3S ln cm n: 1c cm n 3 ln trong 2 bi

routing mode

xin cho hi , ti mun cu hnh ch routing mode trn vigor 3300 B+ vi

yu cu nh sau :- Nh cung cp cho chng ti a ch 210.245.49.47 khai bo cho cngWAN. Sau nh cung cp cp cho chng ti thm 8 a ch na nhngkhc segment. C th l 210.245.63.32/29.

Vy ti phi cu hnh trn con vigor 3300 B+ nh th no vn kt ni vinh cung cp qua a ch 210.245.49.47 v s dng c 8 a ch publickia.Xin gip , chn thnh cm n!

C 1 ngi cm n

draytek_network cho bivit ny:

taolatao01 (26-03-2009)

26-03-2009, 10:48 AM #3


7 10/04/2012 6:51 CH


6/7

vuanhThnh vin tch cc

Tham gia ngy: Apr 2008Bi gi: 1,019

S ln cm n: 1,509c cm n 702 ln trong 337 bi

Anh vo mc LAN >> Enable 2nd IP Address, sau add network210.245.63.32/29 vo l xong

C 1 ngi cm nvuanh cho bi vit ny:

taolatao01 (26-03-2009)

26-03-2009, 12:14 PM #4


Tham gia ngy: Mar 2009Bi gi: 3S ln cm n: 1c cm n 3 ln trong 2 bi

routing

Trch:

Anh vo mc LAN >> Enable 2nd IP Address, sau add network210.245.63.32/29 vo l xong

Trong vigor 3000 B+ khng c mc LAN >> Enable 2nd IP Address

Ch c LAN >> IP RoutingSau mnh mun dng cng WAN2 th mnh enable ln v t 1 a ch l

210.245.63.33 subnet mask l 255.255.255.0

Sau mnh cu hnh DMZ cng cho WAN 2 nhng khi cm mt my tnhvo WAN v khai bo l 210.245.63.34 th khng th ping n WAN vi ach 210.245.63.33. Vy l cha c..

Vy mnh phi lm th no.

VuAnh c th hng dn c th hn c ko ? vi yu cu nh sauWAN 1 : user, mt khu v a ch 210.245.49.478 a ch public 210.245.63.32 /29 Mnh s phi cu hnh trn vigor nh thno c mt LAN sau vigor c th s dng 6 a ch(bao gm c a chkhai cho ip interface LAN trn vigor) trong 8 a ch ny (1 dng chomng v 1 cho broadcast)

Mnh ang rt cn, xin chn thnh cm n

C 2 ngi cm ndraytek_network cho bivit ny:

taolatao01 (26-03-2009), vuanh (26-03-2009)

26-03-2009, 02:16 PM #5


Tham gia ngy: Mar 2009Bi gi: 3S ln cm n: 1

c cm n 3 ln trong 2 bi

routing

, mnh lm c ri, cm n mi ngi rt nhiu

26-03-2009, 02:48 PM #6


7 10/04/2012 6:51 CH


7/7

vuanhThnh vin tch cc

Tham gia ngy: Apr 2008Bi gi: 1,019

S ln cm n: 1,509c cm n 702 ln trong 337 bi

Ah, trn V3300B+,Bn vo mc LAN, IP Routing, trong phn WAN 1, nhp vo range IP210.245.63.33/29 (255.255.255.248)

Mc WAN >> Wan 1>> cu hnh PPPoE bnh thng, ng s t gn IP v,khng cn phi add 210.245.49.47.

C 2 ngi cm nvuanh cho bi vit ny:

concopmap (29-03-2009), draytek_network (26-03-2009)

Ti Trc | Ti K

Quyn hn ca bn

Bn khng c quyn gi bi vit miBn khng c quyn gi bi tr liBn khng c quyn gi file nh kmBn khng c quyn sa cha bi vit

vB code ang MSmilies ang M[IMG] ang MHTML ang Tt

Chuyn nTip Tc

Mi gi GMT +8. Hin ti l 06:37 PM.

Lin Lc - Lu Tr - Tr ln trn

Powered by: vBulletin v3.6.8 Copyright 2000-2012, Jelsoft Enterprises Ltd.Copyright by An Phat Co., Ltd - 2007 All rights reserved


Documents

Hướng dẫn cấu hình tính năng DMZ cứng - Vigor3300