Configuring VLAN Tagging between Netscreen and Netgear WNDAP360

  1. Netgear:  Configure VLAN tagging on all Netgear Security Profiles
    1. Configuration -> Security -> Profile Settings
      1. Select each enabled profile, and choose Edit
        1. Assign a unique VLAN ID to each Profile
    2. Configuration -> IP -> IP Settings
      1. Select DHCP Client enable (so Netgear will be accessible after enabling VLANs on Netscreen)
  2. Netscreen:
    1. Create  VLAN configuration
      1. unset interface vlan1 ip
      2. set interface ethernet0/3.1 ip 6.6.6.254/24
      3. set interface ethernet0/3.1 nat
      4. set interface ethernet0/3.2 ip 6.6.7.254/24
      5. set interface ethernet0/3.2 nat
      6. set interface ethernet0/3.1 dhcp server service
      7. set interface ethernet0/3.2 dhcp server service
      8. set interface ethernet0/3.1 dhcp server enable
      9. set interface ethernet0/3.2 dhcp server enable
      10. set interface ethernet0/3.1 dhcp server option gateway 6.6.6.254 
      11. set interface ethernet0/3.1 dhcp server option netmask 255.255.255.0 
      12. set interface ethernet0/3.1 dhcp server option domainname example.com 
      13. set interface ethernet0/3.1 dhcp server option dns1 6.6.6.11 
      14. set interface ethernet0/3.1 dhcp server option dns2 8.8.8.8 
      15. set interface ethernet0/3.1 dhcp server option dns3 8.8.4.4 
      16. set interface ethernet0/3.1 dhcp server option smtp 6.6.6.11 
      17. set interface ethernet0/3.2 dhcp server option lease 60 
      18. set interface ethernet0/3.2 dhcp server option gateway 6.6.7.254 
      19. set interface ethernet0/3.2 dhcp server option netmask 255.255.255.0 
      20. set interface ethernet0/3.2 dhcp server option domainname example.com 
      21. set interface ethernet0/3.2 dhcp server option dns1 8.8.8.8 
      22. set interface ethernet0/3.2 dhcp server option dns2 8.8.4.4
      23. set interface ethernet0/3.1 dhcp server ip 6.6.6.100 to 6.6.6.149
      24. set interface ethernet0/3.2 dhcp server ip 6.6.7.100 to 6.6.7.149
      25. unset interface ethernet0/3.1 dhcp server config next-server-ip
      26. unset interface ethernet0/3.2 dhcp server config next-server-ip
      27. set address "Trust" "6.6.6.0" 10.53.48.0 255.255.255.0 "Trusted Wireless"
      28. set address "Untrust" "6.6.7.0" 172.16.47.0 255.255.255.0 "Untrusted Wireless"
      29. set interface ethernet0/3.1 dhcp server ip 6.6.6.50 mac
      30. set interface bgroup0 dhcp server ip 6.6.5.50 mac
    2. Create Reasonable Policies for Untrusted and Trusted wireless segments.

Comments

Post a Comment

Popular posts from this blog

Xubuntu Home Server on Dell XPS 13 9370

[ General warning, this isn't a newbie or step-by-step instruction on how to do this.  If you follow this blindly or don't know what a command does you might wipe something value on your system] Introduction I picked up this box through the Dell Outlet for working remotely, but not at home.  It functions okay for that task but I'm in need of a new home server to replace my old Alienware 14 R2 ancient box. Introduction Before Xubuntu 20.04 Installation BIOS Changes Make Bitwise Factory Backup Fresh Xubuntu Installation Zero out the harddrive Install Xubuntu Install latest updates System Configuration LUKS + PAM home directory Boot Xubuntu Live Image & Prepare new partition Create new user with admin privileges Configure PAM mount for primary user Install Software APT Repository Non APT Golang Google Chrome Configuration BIND PIN Entry Nginx + GIT docker XPS 13 9370 Clickpad Buttons Postfix via Gmail ZRam RamDisk Rsyslog Before Xubuntu 20.04 Installation BIOS Changes Acce
Read more

Cygwin + syslog-ng

Until I can get a real workstation at work and get off this winblows, Cygwin is my friend.  I am working on some OO programming with PERL and really need to be able to log syslog messages locally. After installing syslog-ng, I couldn't figure out how to run it, till I stumbled on a page that mentioned the syslogd-config command. Initially I had some problems because the /etc/passwd and /etc/group files were not world readable (don't know if that is a side effect of the Legato restore of my laptop or just the default behavior) however a quick " chmod a+r /etc/passwd /etc/group " seemed to help. running syslogd-config yielded this output: > syslogd-ng-config Creating default /etc/syslog-ng.conf file Warning: The syslogd service is already installed.  You can not run both, syslogd and syslog-ng in parallel. Do you want to deinstall the syslogd service in favor of syslog-ng? (yes/no) yes Warning: The following function requires administrator privileg
Read more

Installing Fedora 21 on a (late 2014) Mac Mini

First boot the Mac Mini with the default Yosemite OS. Download the latest sudo /Applications/Install\ OS\ X\ Yosemite.app/Contents/Resources/createinstallmedia --volume /Volumes/Untitled --applicationpath /Applications/Install\ OS\ X\ Yosemite.app --nointeraction Post Install configuration systemctl enable sshd.service systemctl start sshd.service Because I restored from a dump, the user directory, I found it required a Selinux relabel: groupadd vpnuser useradd vpnuser su - vpnuser restorecon -FRvv ~/ exit Additional Packages that I like: yum install rxvt-unicode-256color yum install screen yum install tigervnc yum install vim To run DNS locally for my home LAN and to cache DNS from the Internet: yum install bind-chroot # with this version of fedora, I'm finally going to move off of my ancient sendmail configuration for relaying email;  I am also going to move from relaying through verizon to relaying through gmail. # ssmtp is the new package # this ur
Read more