Tutorial: Network segmenting of dissimilar network addresses
Related Documents:
- User Manual mbNETFIX: https://downloadportal.mbconnectline.com/en/mbnetfix.html
This application describes how to segment IP-Networks where the segmented Networks have dissimilar IP-Address ranges.
See the Example diagram here:
Essentially, with "Static Route" the gateway addresses have to be added to the corresponding IP address ranges. In our example, this is 192.168.0.0/24 for mbNETFIX NF1 and 192.168.1.0/24 for mbNETFIX NF2.
Notice
A gateway must be entered for both PC1 and PC2, as they would like to route into other networks. In principle the SNAT "WAN to LAN" function can also be enabled here, if for example only direction PC1 to PC2 is required. Consequently no gateway need to be entered on PC2. Then in NF2, SNAT "WAN to LAN" must be activated.
1. Settings of the PCs
- PC1: IP: 192.168.0.112/24, Gateway: 192.168.0.105
- PC2: IP: 192.168.1.112/24, Gateway: 192.168.1.105
- PC3: IP: 172.25.15.74/16, Gateway: 172.25.25.253
2. Settings of mbNETFIX NF1
- Set it to Gateway Mode.
- Set IP-Addresses LAN and WAN.
- Add a rule for ACCEPT the protocol ICMP on WAN to LAN (or any other acceptance you need for your project), so that you can ping PC1 from PC2.
- Add a rule for ACCEPT the protocol ICMP on LAN to WAN (or any other acceptance you need for your proejct), so that you can ping PC2 from PC1.
- Add a Static Route to mbNETFIX NF2.
If necessary, NF2 can be configured in a similar way.
| Revision: V1.0 |
|---|