Data Center

Data Center

View Stats:
Firewall
Hi there, i wanted to do a Service Request. Service Request with Router only are working fine.
I have build up Make Mie with router perfektly fine
Progress:
Subnetzroute done
Firewall-Allow-Rule for Port 443 missing
Internetdevice reachable from Custuomer done
I have made a Subnet (VLan555) for communication between firewall and Router. Firewall is connected to ISB (tried it with every vlan allowed and every vlan disallowed) and Router.
Route from Client Subnet to Firewall and from Firewall to Subnet runs.
Firewallrule is created (didn't know if its needed from wan to lan or from lan to wan so i did both)
Any to 5.5.5.0/24 Port 443 TCP No Bidirectional Allow
5.5.5.0/24 to Any Port 443 TCP No Bidirectional Allow
the Deny any after these is temporarily deleted for testing

Also what is meaning Customer-App 0-3? are these 0 for yellow servers, 1 for blue
< >
Showing 1-4 of 4 comments
The "app" is are subnets listed for each server model on the customer panel. There is no mention anywhere what an app isso had to figure it out myself like everything else in the game :)
has anyone gotten the 'fake news daily' service request for the router and firewall and internet thingy working?

as above, i have step 1 and 3 working, cant' get the firewall to clear.
Originally posted by NetraaD:
has anyone gotten the 'fake news daily' service request for the router and firewall and internet thingy working?

as above, i have step 1 and 3 working, cant' get the firewall to clear.

reposting what I sent to another discussion:

This took a bit for me to sort out, but what I found works best is to do the following:

1. Make sure you have opened up the DMZ zone. This is where Internet access comes from. The customer closets are direct to customer connections and are not Internet facing.
2. Make sure you have unlocked the router and firewalls within the shop.
3. Connect your server switches into the router via the QSFP ports or via the other SFP/SFP28 inputs.
4. Connect the Internet into the firewalls QSFP ports, or into a switch that can take those ports and then use the other SFP/SFP28 ports to connect it to the firewall.
5. Connect the firewall into the router like you would connect a server switch into it or via one of the other ports.
6. Connect the router directly to the customer closet. The firewall is not the connection point between the customer and their servers, the router is. The firewall is only meant to connect the Internet to your routing fabric that in turn is linked to the customer.

There are potentially other ways to do this, but this is what I found works.
Originally posted by Terran:
Hi there, i wanted to do a Service Request. Service Request with Router only are working fine.
I have build up Make Mie with router perfektly fine
Progress:
Subnetzroute done
Firewall-Allow-Rule for Port 443 missing
Internetdevice reachable from Custuomer done
I have made a Subnet (VLan555) for communication between firewall and Router. Firewall is connected to ISB (tried it with every vlan allowed and every vlan disallowed) and Router.
Route from Client Subnet to Firewall and from Firewall to Subnet runs.
Firewallrule is created (didn't know if its needed from wan to lan or from lan to wan so i did both)
Any to 5.5.5.0/24 Port 443 TCP No Bidirectional Allow
5.5.5.0/24 to Any Port 443 TCP No Bidirectional Allow
the Deny any after these is temporarily deleted for testing

Also what is meaning Customer-App 0-3? are these 0 for yellow servers, 1 for blue

I have not gotten to this client yet. I started from scratch post-patch, so I have yet to have to deal with this one

Can you post a screenshot of the requirements so I have some context?
< >
Showing 1-4 of 4 comments
Per page: 1530 50