Configure shorewall WAN interface using VLAN settings
Configure shorewall WAN interface using VLAN settings
Hello, To switch my current router, I plan to use a 4-port mini PC. Since I won’t be using a specialized OS like pfSense, I’ll run a virtual machine on the same hardware. I’m choosing Debian 10 and set up Shorewall for network management. For connecting to the ISP optical modem via DHCP, I need to set up VLAN100 on my WAN interface. I added the vlan100 interface with the ip utility so far, but I’m unsure how to configure it through Shorewall correctly. Do you have any guidance or examples on how to do this?
It's possible to deploy PFSense within a virtual machine, assign VLAN 100 to it, and configure it as a virtual switch.
Weird, still cannot get DHCP ip, something is wrong with my wan config :/
I work through the Linux network setup one step at a time. I adjusted the /etc/network/interfaces file and added specific configurations, like enabling auto IP on enp1s0 and setting DHCP details. I also modified the NetworkManager.conf to ensure proper management. My connection now receives an IP via DHCP from the FTTH modem. Still, I can't reach the internet. Is there anything missing? Could I apply similar settings using Shorewall instead?
Your firewall is correctly detecting a DHCP address. You should be able to reach standard internet addresses from it. Consider enabling IP masquerading and ensuring forwarding is active on the relevant interfaces. In the Shorewall configuration example I found, Debian is referenced at the provided link.
Updated configuration file: /etc/shorewall/masq with interface enp1s0.100 net enabled, and removed the routing settings from Webmin.