RV320 DMZ Configuration

[calvinlui]

I was having some trouble for setting up my RV320. I sub 16 IPs from telco. However, when I try to setup a DMZ with One-to-One NAT forwarding. I don't see the services works. Could you guys help to advise a bit? 

Used the following

Interface IP # xxx.xxx.xxx.111

DMZ# xxx.xxx.xxx.112 - 124

I tried to NAT to 192.168.133.x Subnet with One to One NAT Mapped. I don't see the services can be connected from the Internet. See if you guys have any ideas..

[cchamorr]

Hello, 

I have a few questions:

1- What is the end goal?

2- Why using One to One NAT and DMZ at the same time?

3- Is the One to One NAT configuration working by itself without the DMZ?

With the answer to those questions I may be able to give you some ideas.

[thomaskrampe]

I would like to archive something similar. I have a /29 subnet from my ISP and would like to route the public addresses to a separate subnet which is on the DMZ interface (separate switch). How can I archive this One to One NAT or is there a better way? I attached a small diagram.

Thomas

[cchamorr]

Hello, 

How about this option:

1- Create a second VLAN on the router

2- Use the same subnet as the DMZ (Disable the DMZ)

3- Assign a port on the RV320 to the new VLAN

4- Connect your switch to that port

5- Setup One to One NAT to the desired addresses on the new VLAN

I hope this helps

[calvinlui]

Hi, 

I tried the same configuration as you mention, However it is still fail. 

[cchamorr]

Hello,

Could you please share more details about your configuration? 

[calvinlui]

OKay.. here are the basic inform

192.168.1.x - Trust/ Server Zone 

192.168.20.x - User Zone

192.168.133.x - DMZ 

I am just wondering whats the best method to do the mapping. At the moment, I am placing 2 server at the DMZ only..

I do not preferred one to one nat mapping .. it might be not really secure at the first phase