[SOLVED] Virtual Smoothwall to existing network possible?

[rundll32]

Hi, I'm using VirtualBox 4.0.4 on a MS Server 2003 host.

The host has two (2) physical NICs. The whole lab network is set up like this:

Internet -> Gateway (192.168.20.1) -> Switch -> LAN. *This cannot be changed!!!*

What I have to do now is to set up a virtual network, totally separated from the existing one, with my own switch for me and the person sitting next to me. One virtual machine as the firewall (Smoothwall), another virtual machine as a client and the host itself (both connected to GREEN) behind the virtual firewall.

Smoothwall is gonna be set up as GREEN + RED. GREEN will have the #1 physical NIC (eth0) and RED the #2 NIC (eth1). This will be all bridged to their own specific physical NIC.

RED is connected to the existing gateway leading to WAN. -> #2 host NIC
GREEN is connected to the workbench switch. -> #1 host NIC.

RED's IP address: 192.168.20.104
GREEN's IP address: 172.22.22.22

As you can see, there will be two nets. The GREEN is my own, separated, LAN. Now I need to link these two together to have a complete route. How do I link them together?
Server 2003 is then connected to the switch with a 172 IP to make it a GREEN computer.

After this, the whole set up looks like:

Internet -> Gateway (192.168.20.1) -> Switch -> LAN
leading to...
Smoothwall gateway (192.168.20.104) -> GREEN LAN (switch), 172.22.22.22 -> GREEN machines.

How is the Default Gateway, DNS and IP addresses configured on all machines?

Is this possible??

[Sasquatch]

You've almost answered your own question with this much information. Your smoothwall VM is the gateway and DNS for whatever needs to connect to the RED zone from the GREEN zone. So as you say, the VM has 172.22.22.22 as IP, that will be your gateway for all the GREEN machines. I don't know smoothwall myself, but if it has DNS features, then it will be the DNS as well. If it doesn't have DNS options, then you have to either install it on the VM, or point the GREEN machines to the DNS that's used on the RED zone.

[rundll32]

Hi!

Thank you so much for your answer.

I would love to have more info on what IP addresses I should configure on all machines.

IP address RED, for Smoothwall:
IP address GREEN, for Smoothwall:

DHCP is disabled during installation.

Primary DNS IP, for Smoothwall:
Gateway, for Smoothwall:

The Smoothwall machine must be able to route data through the already existing Gateway, to WAN. All other machines will go into GREEN zone, having IP address 172.22.22.x.

In the Gateway configuration tab, there must be a 192.168.20.1 address leading to existing one (which in turn leads to WAN)
The Primary DNS tab must be 192.168.20.1 also.

The main concern is how I bridge RED and GREEN together so I can have these settings on my Host machine (2003) for example

IP address: 172.22.22.25
Subnet mask: 255.255.0.0
Default gateway: 172.22.22.22 (Smoothwall's RED IP??)
DNS: 172.22.22.22 (also Smoothwall's RED IP??)

As I'm concerned, during the Smoothwall installation, I'll have to put 192.168.20.1 as Gateway and Primary DNS.

But for GREEN to communicate with RED I must bridge them, right? Do I bridge LAN Connection 2 (RED) with LAN Connection 3 (GREEN) in the Network Connections tab on Host?? But I don't think that's right as I need to re-configure Default gateway etc for the one bridged connection?

Thanks in advance!!

[Sasquatch]

This sounds more like doing your homework than actually giving you the right directions. All this has to do with networking, routing and how to combine that properly. We're not here to explain all that, it's something you have to learn yourself. We can do it, but you don't learn anything from that. The Smoothwall documentation is perfect for this, it will describe what setting you need where and such. One thing I can say and that is that you don't bridge anything, except for the VM NICs to the physical NICs. You don't bridge the physical NICs together, that's where routing comes to play.

[rundll32]

This is not a homework. This is virtualization with a firewall I'm only doing at school. But thanks either way.
I hope I can get this sorted out.

regards