Zen Internet Support Forum

Hi

We have just purchased zen adsl broadband for a small office of around 12 people we have a linux based firewall which acts as email web security vpn device and intrusion protection system - Astaro .  We have a block of 8 IP addresses to allow for some services to be available over the internet

I believe we need an adsl modem in front to connect to the astaro device and the modem will need to be in bridge mode.  We can then set up the interface on the astaro to use a pppoa connection to obtain it's IP addresses. 

A.  Does anyone know if either of the above two modems will be able to fit in to our scenario?

B. Can this be done on Zen Internet?

We have been trying to do this with the DMP111P without success :-(

I have set up the above scenario with another adsl provider and by using a pppoe client with success but can't seem to get this up and running with Zen.

Any suggestions?

Thanks

Stray 

The only way i can think of doing this would be to  put the Hot interface of the firewall into router, and use NAT on the router ( I am assuming you have only 1 public IP address, also your router doesn't support anymore than that), so that 192.168.0.5 is your firewall ip address, and then assign this ip address to the DMZ on the router.  This will allow you to do what you are wanting.  It's not the best way to do this, but it's the only solution i can think of with your hardware.  Otherwise i would suggest something like a Cisco 857 or 877 which would work perfectly, and also you could use VPN's for remote access for teleworkers etc....

Hi Stray

The DG834 should work fine for you (make sure it is either a V3 with the new firmware on or a V4 though as there are some compatibility issues with Max lines). You can give the router a static IP address, set it in routed mode i.e. turn off NAT - the newer versions also have an option to 'turn off firewall' which is a good idea as you don't want the router filtering your traffic. If you haven't got that option just set some rules to allow all traffic through to the Astaro IP. Give your Astaro box a static real world IP and you should find it will work without any problems (you may find you have to bounce the netgear as the arp tables aren't the best on them)

Good luck