Hardware firewall/modem configuration issues

[SunnyByfleet]

Hi,

I'm setting up a home network. Currently I have the following setup:

XP workstation
IP Addr: 192.168.100.100
Subnet: 255.255.255.0
Def Gateway: 192.168.100.1

Win 98 workstation
IP Addr: 192.168.100.100
Subnet: 255.255.255.0
Def Gateway: 192.168.100.1

SMC 7401BRA ethernet ADSL modem.
Internal IP Addr: 192.168.100.1
Subnet mask: 255.255.255.0
External IP Addr: 200.201.202.203
Subnet mask: 255.255.255.252

All are wired into a 10/100 switch.
The modem is wired into ADSL.

This all works fine. I now want to add a hardware firewall.
The kit I have is the Multitech SOHO Routefinder RF550VPN.

I presume I have to do the following:
Change the internal IP address of the modem to something like 192.168.101.1
Set the internal address of the Routefinder to 192.168.100.1
Set the external address of the Routfinder to 192.168.101.2
Set the external gateway of the Routefinder to 192.168.101.1
Plug the Lan cable of the modem into the Wan port of the firewall.
Plug the lan cable of the firewall into the switch.
Please note that all IP addresses have been changed to protect the innocent!


The trouble is, I've done the above and it doesn't work. I can't ping the modem now, so traffic isn't going through the firewall. It defaults to allow outbound traffic though, so I can't just be getting blocked.

Any ideas or suggestions?

Thanks in advance.

 

[IFRs]

Is the router set as a gateway or router?
I'd let the router be a DHCP server and un-assign IP addresses so they are dynamei rather than static. Let the router do the work!!

 

[jimbopalmer]

looks to me that you have the gateway for the router be itself 192.168.101.1

it should be the address of the modem, 192.168.100.1 as the gateway in the router.

I tried to remain child-like, all I acheived was childish.

 

[SunnyByfleet]

jimbopalmer, I think you misread my post.

Change the internal IP address of the modem to something like 192.168.101.1
Set the internal address of the Routefinder to 192.168.100.1
Set the external address of the Routfinder to 192.168.101.2
Set the external gateway of the Routefinder to 192.168.101.1

That's already done!

To IFRs, I may well use the DHCP option at a later date. I'm using static for now because then I know exactly what is going on, if you know what I mean. I think you give a good tip with the gateway/router pointer though. I got an email from multitech which said the following:

---------------------------------------

All your setup look correct.

Please check the following:

1) ethernet cable between the Wan ethernet port of RF550VPN to the ADSL modem ethernet port
2) does the Wan link light on when you plug in the ethernet cable.
3) can the PC ping the LAN port of the RF550VPN
4) does the LAN link light show up on the RF550VPN when you plug in the ethernet cable.

Your SMC ADSL router already doing some kind of NAT / Firewall, it is redundant to install the RF550VPN. You are basically doing firewall to another firewall. The correct way to configure this setup when using RF550VPN is to configure your ADSL router to perform standard routing with no NAT / firewall or configure the ADSL router to perform bridging function. You might need to consult your ISP in order to configure the ADSL router to do routing or bridging.

----------------------------------------------------

Basically, I've got to set the SMC up as a router, not a gateway. That's my next, and hopefully final challenge.

Thanks for the replies!