NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Server in DMZ
Hi Everybody, i want to have a server separated from my other network. I think the best is to have this in a DMZ (correct me if i'm wrong). I have a FritzBox 7490 (Modem&WiFi&Router), a GS108E an...
Maybe i can answere myself. I've forget one rule. Now i have a rule allowing everything outbound and a second blocking my home network. Is this enough? I think this is also possible without the dedicated DMZ port, right?
Hi developerNoAdmi,
Welcome to the community! :)
Is it possible that you configure the Fritzbox 7490 as a modem-only device? Here is what I suggest: configure the Fritzbox 7490 as a modem-only device then connect it to the WAN port of the FVS318G. In this way, the FVS318G will be the main firewall router wherein the WAN IP Address will be registered to it. The FVS318G supports LAN Multi-homing wherein you can add a secondary LAN IP Address. You will be able to have your server be on a different network by connecting it to the secondary LAN. Be reminded that if ever the Fritzbox 7490 will be set as modem-only device, its WiFi capability will not be in usable. You will need an access point to be directly connected to the FVS318G for wireless connection.
About LAN Multi-homing, read pages 3-10 to 3-11 of the FVS318G reference manual here.
Regards,
DaneA
NETGEAR Community Team
Hi DaneA,
yes i think this is the usual way. But is there anything against my current approach, just blocking the home network? Would be nice not to have one more device running 24h a day...
Thank you in advance.
Mario
Hi developerNoAdmi,
As per my suggestion, we need to avoid a Double NAT situation (having a router behind a router) because that might affect the performance of the internet connection. You might want to consider using VLANs. VLANs enables you to logically group end-stations and enhanced network security. The FVS318Gv2 supports VLANs. To know more about FVS318Gv2, access the links below:
ProSAFE VPN Firewall Series Data Sheet
Regards,
DaneA
NETGEAR Community TeamHi developerNoAdmi,
Let us know if you have further questions. :)
Regards,
DaneA
NETGEAR Community Team
Hi DaneA,
thanks a lot for your tips. I've decided to do it the "classical" way, i've buyed an accesspoint.
So thanks a gain for ypur support :)
Best Mario
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
