How to setup Firewall

[KingArcher]

Currently I have a local network which needs to be protected by hardware firewall.

Here's the setup

Internet ---->Gateway ---> Switch -----> Multiple computers

local network is typical IP range: 192.168.1.0/255.255.255.0

I currently have a D-link UTM Firewall, model DFL-260.
[This firewall has 1 DMZ port, 1 WAN port, 4LAN ports]

How do I setup this firewall?
I know it should go between the Gateway and the switch. But what kind of routing rules and IP rules need to be set?

Any examples would help a lot.

Thanks
KingArcher

 

[KingArcher]

Bumpy

Anyone?

 

[Psychoteddy]

It really all depends on your network and the services that need to be accessed within and outside of that network. What type of network is this? Business? Personal? How many users? What classes of users are on this network? What applications and services does each user class need?

 

[KingArcher]

The network is a business network. I wanted to know about the basic routing that needs to be done.
That is, if I hook up the firewall in between the gateway and the switch(as shown below), what kinda routing rules or IP rules would be required to be able to access the internet ?
[The other firewall settings, i.e. services to block certain traffic can be configured later]

Internet ---->Gateway ---> Firewall ----> Switch -----> Multiple computers

Regarding the other question about class of users, I do not know about that.
Number of users would vary between 10-25.

 

[Brian_tii]

Well you say "gateway" but is it the gateway or the modem? If your firewall will be getting assigned a DHCP IP address from the modem then your shouldn't really need to do much at all in regards to routing or IP rules usually. I can't say I've ever used that firewall but most default to allow high security interfaces (internal) access TO lower security interfaces (external). If you want to allow traffic from the external to the internal then I'd think you'd need to define some rules there.

Regarding routing, assuming the dlink will be operating in a routing mode and not transparent (a mode it might not even have) the internal hosts will point to the firewall as their default gateway / default route. The firewall will point to your ISP's defined default gateway. You may need to configure the firewall to hand out DCHP with this information... or maybe you're doing that else where....

 

[KingArcher]

Thanks Brian for that info. That's what I wanted to know, i.e. about the routing being enabled by default.

Regarding your question about it being a gateway or just a modem, I have a gateway[modem + router] at the moment.

I can add rules later to filter the incoming and outgoing traffic.

Thanks once again

Regards
KingArcher

 

[KingArcher]

Best answer selected by KingArcher.