FireBrick Road Warrior FireBrick Config: Difference between revisions
Appearance
Content deleted Content added
| Line 12: | Line 12: | ||
'''Separate pool:''' |
'''Separate pool:''' |
||
Choose an IP range not used anywhere else in your FB config |
Choose an IP range not used anywhere else in your FB config |
||
(and to avoid confusion choose something non-routable eg from 10...) |
(and to avoid confusion choose something non-routable eg from 10...) |
||
| Line 25: | Line 26: | ||
'''IPs from the existing LAN''' |
'''IPs from the existing LAN''' |
||
Choose a "real" range of IP addresses already known to the FB. |
Choose a "real" range of IP addresses already known to the FB. |
||
Typically this would be a subset of one of the FB's LAN subnets. |
|||
[Take care if doing this to not have an overlap with any DHCP |
|||
allocations which the FB may do on that subnet.] In this case |
|||
the roaming pool NAT setting should not be set. Normally you |
|||
will want your FB LAN devices to be able to communicate with the |
|||
remote client, so you should set "proxy-arp" on the FB subnet |
|||
definition. |
|||
In this scenario, the remote device behaves just like a device |
|||
connected on the LAN, and, if the LAN subnet is routable, the |
|||
remote device will also be able to communicate externally. |
|||
==Proxy ARP== |
==Proxy ARP== |
||