Andreb (Diskussion | Beiträge) Keine Bearbeitungszusammenfassung |
KKeine Bearbeitungszusammenfassung |
||
| (Eine dazwischenliegende Version desselben Benutzers wird nicht angezeigt) | |||
| Zeile 28: | Zeile 28: | ||
<li class="list--element__alert list--element__positiv">Die Bridge ist vollständig Layer 2 kompatibel. Broadcast-Pakete werden z.B. transparent an alle Schnittstellen innerhalb der Bridge weitergeleitet.</li> | <li class="list--element__alert list--element__positiv">Die Bridge ist vollständig Layer 2 kompatibel. Broadcast-Pakete werden z.B. transparent an alle Schnittstellen innerhalb der Bridge weitergeleitet.</li> | ||
| 3= }} | | 3=A bridge connects two physical networks into a single network.<br> The interfaces connected in this way share an IP, and the IP addresses of the connected devices are in the same subnet. | ||
<p>{{Hinweis-box|The firewall must not be administered via the interface that is to be added to a bridge!|r}}</p> | |||
Access to the admin interface will be lost as soon as the IP address is removed from the interface currently used to access the UTM.<br> If all available internal interfaces are added to a bridge (e.g., A1 and A2 on a Black Dwarf), access to the firewall must be established externally via A0. | |||
<p><li class="list--element__alert list--element__hint">Port forwarding from an internal network via an external IP address is not possible over a bridge. <br>Solution: Set up a forward zone in the UTM's name server. For this, the UTM must be configured as the name server for internal clients. The external URL called internally then points directly to the internal target server.<br> Instructions for setting up the forward zone can be found in the Nameserver Wiki under [{{#var:host}}UTM/APP/Nameserver#Forward-Zone Forward-Zone]. | |||
<li class="list--element__alert list--element__positiv">The bridge is fully Layer 2 compatible. Broadcast packets, for example, are transparently forwarded to all interfaces within the bridge.</li> }} | |||
{{var | Administrations-Zugang vorbereiten | {{var | Administrations-Zugang vorbereiten | ||
| Zeile 224: | Zeile 232: | ||
| Packetfilter }} | | Packetfilter }} | ||
{{var | Paketfilterregel für die Bridge--desc | {{var | Paketfilterregel für die Bridge--desc | ||
| | | Seit der UTM 11.8 wird automatisch eine Regel angelegt für die Quelle und das Ziel {{spc|world|o|-}} all-dmz. Die Schnittstellen können so bereits miteinander vollständig kommunizieren. | ||
| | | Since UTM 11.8, a rule is automatically created for the source and destination {{spc|world|o|-}} all-dmz. This allows the interfaces to communicate fully with one another. }} | ||
{{var | Aktion | {{var | Aktion | ||
| Aktion | | Aktion | ||
| Zeile 250: | Zeile 258: | ||
| Die Einrichtung der Bridge wird mit {{Button-dialog||fa-save}} abgeschlossen. | | Die Einrichtung der Bridge wird mit {{Button-dialog||fa-save}} abgeschlossen. | ||
| The bridge setup is completed with {{Button-dialog||fa-save}}. }} | | The bridge setup is completed with {{Button-dialog||fa-save}}. }} | ||
{{var | HN-Bug | |||
| In einer früheren Version stand hier <u>fälschlicherweise</u> ein HideNat Exclude {{Kasten|HNE|blau}} | |||
| In an earlier version, <u>incorrectly</u> contained a HideNat Exclude }} | |||
---- | ---- | ||
UTM/NET/Bridge-WLAN.lang: Unterschied zwischen den Versionen
Aus Securepoint Wiki