на стороне DHCP сервера:
========================
Код:
Objects - Address Book- InterfaceAddresses:
Name Address User Auth Groups Comments
dmz_ip 172.17.100.254 IPAddress of interface dmz
dmznet 172.17.100.0/24 The network on interface dmz
lan_ip 192.168.10.1 IPAddress of interface lan
lannet 192.168.10.0/24 The network on interface lan
wan_dns1 0.0.0.0 Primary DNS server for interface wan.
wan_dns2 0.0.0.0 Secondary DNS server for interface wan.
wan_gw 172.16.1.1 Default gateway for interface wan.
wan_ip 172.16.0.1 IPAddress of interface wan
wannet 172.16.0.0/16 The network on interface wan
Objects - Address Book- remote_set:
Name Address User Auth Groups Comments
ip_GRE 192.168.0.1
remote_gw 172.16.1.1
remote_ip_GRE 192.168.0.2
remote_net_B 192.168.11.0/24
Rules - IP Rules - lan_to_wan
# Name Action Source interface Source network Destination interface Destination network Service
1 drop_smb-all Drop lan lannet wan all-nets smb-all
2 allow_ping-outbound NAT lan lannet wan all-nets ping-outbound
3 allow_ftp-passthrough NAT lan lannet wan all-nets ftp-passthrough
4 allow_standard NAT lan lannet wan all-nets all_tcpudp
Rules - IP Rules - GRE
# Name Action Source interface Source network Destination interface Destination network Service
1 To_B Allow lan lannet GRE_to_B remote_net_B all_services
2 From_B Allow GRE_to_B remote_net_B lan lannet all_services
Interfaces - Ethernet
Name IP address Network Default Gateway Enable DHCP Client Comments
dmz dmz_ip dmznet No
lan lan_ip lannet No Enable Transparent Mode+
wan wan_ip wannet wan_gw No Enable Transparent Mode+
Interfaces - GRE
Name IP address Network Remote Endpoint Comments
GRE_to_B ip_GRE remote_net_B remote_gw
Use Session Key 1
Additional Encapsulation Checksum +
Routing - Routing Tables - main (read-only)
Type Interface Network Gateway Local IP address Metric Monitor this route Comments
Route wan all-nets wan_gw 100 No Default route over interface wan.
Route dmz dmznet 100 No Direct route for network dmznet over interface dmz.
Route GRE_to_B remote_net_B 90 No Direct route for network remote_net_B over interface GRE_to_B.
Switch Route wan wannet 100 Transparent mode enabled for network wannet over interface wan.
Switch Route lan lannet 100 Transparent mode enabled for network lannet over interface lan.
на стороне клиента:
========================
Код:
System - DHCP - DHCP Relays
Name Action Source interface Server IP Comments
KreaTV Relay lan DHCP_server Allowed IP offers from server: all_nets
Objects - Address Book- InterfaceAddresses:
Name Address User Auth Groups Comments
DHCP_server 192.168.10.227
dmz_ip 172.17.100.254 IPAddress of interface dmz
dmznet 172.17.100.0/24 The network on interface dmz
lan_ip 192.168.11.1 IPAddress of interface lan
lannet 192.168.11.0/24 The network on interface lan
wan_dns1 0.0.0.0 Primary DNS server for interface wan.
wan_dns2 0.0.0.0 Secondary DNS server for interface wan.
wan_gw 172.16.0.1 Default gateway for interface wan.
wan_ip 172.16.1.1 IPAddress of interface wan
wannet 172.16.0.0/16 The network on interface wan
Objects - Address Book- remote_set:
Name Address User Auth Groups Comments
ip_GRE 192.168.0.2
remote_gw 172.16.0.1
remote_net_A 192.168.10.0/24
Rules - IP Rules - lan_to_wan
# Name Action Source interface Source network Destination interface Destination network Service
1 drop_smb-all Drop lan lannet wan all-nets smb-all
2 allow_ping-outbound NAT lan lannet wan all-nets ping-outbound
3 allow_ftp-passthrough NAT lan lannet wan all-nets ftp-passthrough
4 allow_standard NAT lan lannet wan all-nets all_tcpudp
Rules - IP Rules - GRE
# Name Action Source interface Source network Destination interface Destination network Service
1 To_A Allow lan lannet GRE_to_A remote_net_A all_services
2 From_A Allow GRE_to_A remote_net_A lan lannet all_services
3 ping Allow any all-nets any all-nets all_icmp
Interfaces - Ethernet
Name IP address Network Default Gateway Enable DHCP Client Comments
dmz dmz_ip dmznet No
lan lan_ip lannet No Enable Transparent Mode+
wan wan_ip wannet wan_gw No Enable Transparent Mode+
Interfaces - GRE
Name IP address Network Remote Endpoint Comments
GRE_to_A ip_GRE remote_net_A remote_gw
Use Session Key 1
Additional Encapsulation Checksum +
Routing - Routing Tables - main (read-only)
Type Interface Network Gateway Local IP address Metric Monitor this route Comments
Route wan all-nets wan_gw 100 No Default route over interface wan.
Route dmz dmznet 100 No Direct route for network dmznet over interface dmz.
Route GRE_to_A remote_net_A 90 No Direct route for network remote_net_A over interface GRE_to_A.
Switch Route lan lannet 100 Transparent mode enabled for network lannet over interface lan.
Switch Route wan wannet 100 Transparent mode enabled for network wannet over interface wan.
когда коиент через DHCP Relay пытается получить адрес, в логах роутера к кот. подключён сервер появляется такое:
Severity Warning
Category/ID RULE
...................6000051
Rule Default_Access_Rule
Proto UDP
Src/DstIf GRE_to_B
Src/DstIP 192.168.0.2 (ip_GRE роутера с DHCP relay)
...................192.168.10.227 (IP DHCP сервера)
Src/DstPort 67
...................67
Event/Action ruleset_drop_packet
...................drop