Page 1 of 1

Level 2 Firewall

Posted: 24 May 2023, 11:32
by vachev
Hi,

Is it possible to configure DynFi as a Level 2 Firewall (no routing, no nat, no vlan bridging,...). Only packet inspection, filtering and blocking.

What I need is a level 2 firewall to put between my BGP router handling Internet connectivity and my servers having public IP addresses.

Have a nice day

Re: Level 2 Firewall

Posted: 24 May 2023, 18:48
by gregober
vachev wrote: 24 May 2023, 11:32 Hi,

Is it possible to configure DynFi as a Level 2 Firewall (no routing, no nat, no vlan bridging,...). Only packet inspection, filtering and blocking.

What I need is a level 2 firewall to put between my BGP router handling Internet connectivity and my servers having public IP addresses.

Have a nice day
It is indeed possible to configure the DynFi Firewall as a L2 firewall only.
To do that, you would need to:
  • Deactivate the NAT in "Firewall >> NAT >> Outbound"
  • Configure your WAN bound to your BGP router in "subnet A"
  • Configure your LAN (or any other interface) in another "subnet B"
  • Apply filtering accordingly using firewall rules
As a bonus you could also enable Ntop to check packets flowing in / out or some other filters based on various technologies.
Hope this helps.