Integrating ipcop with your existing network - Example Worksheet: Converting a Network with Public IP Servers to IPCOP w/SNatGUI

Overview

You will have to do the following:

  • Set IPCOP to Static on Red to one of your addresses. Add the remaining addresses as Aliases
  • Set the computer behind IPCOP to Fixed IP addresses (with private IP addresses only)
  • Use port forwarding (with Aliases as needed) to forward to computers behind IPCOP
  • Use SNATGui to have a computer behind IPCOP use one of your Alias IPs for outbound traffic (in place of the default IP)

Without IPCOP

Network Diagram

Internet – Servers

Network Details

123.xxx.yyy.122 (Public IP 1) – Server 1
123.xxx.yyy.123 (Public IP 2) – Server 2

With IPCOP

Network Diagram

Internet – Static IP (Red) [IPCOP]
….[IPCOP] (Green) 192.168.0.1/24 – Switch – LAN Computers
….[IPCOP] (Orange) 192.168.1.1/24 – Switch – DMZ Computers

Network Details

Public IPs:
123.xxx.yyy.121 (Public IP 3) – Default IP
123.xxx.yyy.122 (Public IP 1) – Alias 1
123.xxx.yyy.123 (Public IP 2) – Alias 2
Servers:
192.168.1.11 – Server 1
192.168.1.12 – Server 2

IPCOP Settings

Port Forwarding:
123.xxx.yyy.122 (Public IP 1) – 192.168.1.11
123.xxx.yyy.123 (Public IP 2) – 192.168.1.12
SNATGui (Outbound)
192.168.1.11 – 123.xxx.yyy.122 (Public IP 1) [World sees traffic from server1 as IP address 123.xxx.yyy.122 (Public IP 1)]
192.168.1.12 – 123.xxx.yyy.123 (Public IP 2) [World sees traffic from server2 as IP address 123.xxx.yyy.123 (Public IP 2)]
World sees traffic from other computers behind IPCOP as IP address 123.xxx.yyy.121 (Public IP 3)

faq/integration/worksheet.txt · Last modified: 2008/09/20 04:31 by ds531