ProSafe FVS318G Between TWC Cable Modem and Linux Server

Question

Hello and thanks for reading my post. &nbsp;I'm switching over to TWC Business Class with 5 Static IP's. &nbsp;I had them put their modem in Bridge Mode. &nbsp;So I have TWC Modem &gt; ProSafe FVS318G &gt; ETH0 (Linux Server w IPTables FW) ETH1 &gt; LAN. &nbsp;I want to add the ProSafe as an extra layer of security before my Linux Server. &nbsp;Although I have a Linux background, I'm not familiar with the Netgear VLAN firewalls. What's the correct way to get my Static IP through the ProSafe to my Linux Server. &nbsp;Thank you in advance for your&nbsp;suggestions!

JohnRo · Answer

Hello kj6eo,&nbsp;

&nbsp;

Welcome to the community!&nbsp;

&nbsp;

The FVS318G does not have VLAN functionality (the&nbsp;FVS318Gv2&nbsp;does). For you to achieve your goal, VLAN is not necessary what your.&nbsp;Instead, use&nbsp;Classical Routing&nbsp;(see page 33) in which you will have to specify the entire IP, subnet and gateway to the server. Doing this setup will kill the NAT so there will be no protection. The main question will be, do you really need to have a public IP on the Linux Server or not. Because, if your goal is to let the Linux Server control the traffic coming in and out then my suggestion is just to use&nbsp;DMZ&nbsp;(see page 49) instead.&nbsp;

&nbsp;

I hope this helps, let us know.&nbsp;

&nbsp;

Thanks,&nbsp;

DaneA · Answer

Hi kj6eo,

&nbsp;

I currently do not have an FVS318Gv2 to check. &nbsp;However, kindly check if the FVS318Gv2 has the capability to add secondary WAN Addresses just like in the image below:

&nbsp;

Note: The image above is from the web-GUI of the FVS336Gv3.

&nbsp;

I look forward to your response.

&nbsp;

Regards,

&nbsp;

DaneA

NETGEAR Community Team

kj6eo · Answer

JohnRo - Thank you for replying to my post. I do have the FVS318Gv2. My Linux Server has an IP Tables Firewall running on it. I could connect the cable modem directly to the Linux Server. However, I bought the FVS318Gv2 as an extra layer of security. I have 5 static IP's. They are currently set up as follows:

64.xxx.xxx.73 TWC Cable Modem

64.xxx.xxx.74 FVS318Gv2

64.xxx.xxx.75 Linux Server

64.xxx.xxx.76 Future Use

64.xxx.xxx.77 Future Use

64.xxx.xxx.78 Future Use

Yes, once I put the WAN Settings of the FVS318Gv2 into Classical IP mode, I did notice that NAT was disabled and I could no

longer surf. I'm using a Laptop right now in place of the Linux Server for testing. I need to get 64.xxx.xxx.75 through the FVS318Gv2 to the Linux Server. Not just a pass through, I want to use the packet filters in the FVS318Gv2 also. I've read the

manual, but I don't seem to be having any success. Would you have any more suggestions?

kj6eo · Answer

Hi DaneA - Thanks for your help. &nbsp;I have made some progress on this end by calling NetGear Business Support. &nbsp;If one is going to use this Router at home, it's easy to configure. &nbsp;Just configure the WAN side of it with the information provided by your ISP, and it's ready to surf. &nbsp;By default, all the Lan Computers will NAT to whatever Static IP you configured in the WAN &gt; Broadband ISP Settings. &nbsp;In my case, my cable modem is 64.xxx.xxx.73 and the WAN IP I assigned to the Router is 64.xxx.xxx.74. &nbsp;Any of the LAN computers when they surf, will show up on the internet with the Static IP of 64.xxx.xxx.74. &nbsp;Now, if you have multiple servers on the LAN, and each one must show up on the internet with a different Static IP number, an OUTBOUND RULE has to be configured to accomplish that. &nbsp;For example, for my first Server, I assigned it a LAN static IP of 10.205.1.2 (the LAN side of the router is configured to 10.205.1.1) and turned DHCP off. &nbsp;Then I created an OUTBOUND rule NATTING 10.205.1.2 to 64.xxx.xxx.75. &nbsp;When that server shows up on the Internet, it carries the Static IP of 64.xxx.xxx.75. &nbsp;For the second server, you create another OUTBOUND rule i.e. NATTING 10.205.1.3 to 64.xxx.xxx.76. &nbsp;The Public Static IP's have to be given to you by your ISP of course.&nbsp;I still haven't configured my INBOUND rules yet. &nbsp;However, I've made allot of progress. &nbsp;I have to make a comment about NetGear Business Support. &nbsp;Joseph who I made a couple calls to REALLY knew the product inside and out. &nbsp;He came in remotely and showed me how configure the modem for my block of Public Static IP's. &nbsp;He was Polite, Courteous, and Very Knowledgeable. &nbsp;He is a Valuable Asset to Netgear and it's Customers ... THANK YOU JOSEPH !!! &nbsp;I didn't expect this kind of Support for a $100.00 router. &nbsp;I paid $100.00 but gotEnterprise Support.&nbsp;I can't report on how well the FVS318Gv2 works yet since I haven't finished configuring it and put it into service. &nbsp;My Servers are busy, I'm streaming 24/7 to my Transmitter Site (FM Radio Station), I'm streaming on the Internet, plus FTP, SMTP, DNS, HTTP, POP3,DHCP and more. &nbsp;If the FVS318Gv2 can keep up with all of that, it will have earned it's money.&nbsp;Once the FVS318Gv2 is online, I'll report back regarding it's performance. &nbsp;Also, I forgot to mention that in order to get my Static IP's to configure and work correctly, the latest version of FW had to be downloaded and installed. &nbsp;Your help is appreciated!

DaneA · Answer

Hi kj6eo,

&nbsp;

Just kindly follow-up on your open case with NETGEAR Support for assistance. &nbsp;Hope that everything will be configured properly and meet your expectation. &nbsp;We'll be waiting for your updates on this thread. :)&nbsp;

&nbsp;

Regards,

&nbsp;

DaneA

NETGEAR Community Team

Forum Discussion

ProSafe FVS318G Between TWC Cable Modem and Linux Server

5 Replies

Related Content

Prosafe FVS318G-v2 - Nat e Firewall url

FVS318G – ProSafe 8-port Gigabit VPN Firewall

FVS318G – ProSafe 8-port Gigabit VPN Firewall

ALten FVS318G als Switch?

JGS524 Prosafe VLAN

NETGEAR Academy

ProSupport for Business