Integrating ipcop with your existing network - Example Worksheet: Converting a Network with Public IP Servers to IPCOP w/SNatGUI
Overview
You will have to do the following:
- Set IPCOP to Static on Red to one of your addresses. Add the remaining addresses as Aliases
- Set the computer behind IPCOP to Fixed IP addresses (with private IP addresses only)
- Use port forwarding (with Aliases as needed) to forward to computers behind IPCOP
- Use SNATGui to have a computer behind IPCOP use one of your Alias IPs for outbound traffic (in place of the default IP)
Without IPCOP
Network Diagram
Internet – Servers
Network Details
123.xxx.yyy.122 (Public IP 1) – Server 1
123.xxx.yyy.123 (Public IP 2) – Server 2
With IPCOP
Network Diagram
Internet – Static IP (Red) [IPCOP]
….[IPCOP] (Green) 192.168.0.1/24 – Switch – LAN Computers
….[IPCOP] (Orange) 192.168.1.1/24 – Switch – DMZ Computers
Network Details
Public IPs:
123.xxx.yyy.121 (Public IP 3) – Default IP
123.xxx.yyy.122 (Public IP 1) – Alias 1
123.xxx.yyy.123 (Public IP 2) – Alias 2
Servers:
192.168.1.11 – Server 1
192.168.1.12 – Server 2
IPCOP Settings
Port Forwarding:
123.xxx.yyy.122 (Public IP 1) – 192.168.1.11
123.xxx.yyy.123 (Public IP 2) – 192.168.1.12
SNATGui (Outbound)
192.168.1.11 – 123.xxx.yyy.122 (Public IP 1) [World sees traffic from server1 as IP address 123.xxx.yyy.122 (Public IP 1)]
192.168.1.12 – 123.xxx.yyy.123 (Public IP 2) [World sees traffic from server2 as IP address 123.xxx.yyy.123 (Public IP 2)]
World sees traffic from other computers behind IPCOP as IP address 123.xxx.yyy.121 (Public IP 3)
