Separate 2 LANs from each other

[mcTheo]

Hello,

I’m new to Zeroshell and I want to configure the following:

WAN1 (DSL-Router): 192.168.0.1
WAN2 (DSL-Router): 192.168.1.1

LAN1 and LAN2 should be separated from each other. Both networks should connect to the internet over WAN1 and WAN2.

My current configuration is this:

ETH00: 192.168.0.250
ETH01: 192.168.1.250
ETH02: 192.168.2.250 (guest network)

Net Balancer:
DEFAULT GATEWAY 192.168.0.1 1 Disabled 0
WAN1 192.168.0.1 1 Active 0
WAN2 192.168.1.1 1 Active 0

NAT Enabled:
ETH00
ETH01
EHT02

Both LAN have working internet access. Now I want to separate the networks from each other. At the moment I can ping hosts from one network to the other and the same from the other direction.

I think I need some firewall rules. I tried to drop packets from “Source IP” or with Input ETH02, but I couldn’t connect to the internet from this network anymore.

Can someone give me some suggestions or help how I must activate the firewall rules to build some kind of “guest network” for ETH02?

Thank you.

[igork]

Try create Firewall rule where you specify Input as ETH00 and output as ETH01 at the same time. Also, create rule and specify Input as ETH01 and output as ETH00 at the same time.

I did not try it, but I think it should work.

[reaperz]

Yes, just add firewall rules. I confirm, I have it working that way. I got 2 internal networks: corporate LAN and public WIFI. isolated from each other.

[Author]

Posts