Difference between revisions of "How to get a machine into DMZ"
From MohidWiki
Davidbrito (talk | contribs) (New page: # Connect the machine to a network point connected to DMZ (e.g. two points available in the computer room marked with black cables) # Edit machine ip's to 192.168.21.x and DNS server: 192....) |
|||
| (9 intermediate revisions by one other user not shown) | |||
| Line 1: | Line 1: | ||
| − | # Connect the machine to a network point connected to DMZ ( | + | The objective is to make the machine available outside Maretec |
| − | # Edit machine ip's to 192.168.21.x and DNS server | + | # Connect the machine to a network point connected to DMZ (lower part in the network rack of the computer room - two network points are being used marked with black cables). |
| − | # Go to DNS server (Copernico) and add the machine name and IP to the list. | + | # Edit machine ip's to 192.168.21.x where x, is an IP available in the DMZ (see '''How to add an IP to the DMZ in Firewall'''). Give default gateway and DNS server as 192.168.21.1 |
| + | # Go to DNS server (Copernico) and add the machine name and IP to the list >DNS>Forward Lookup Zones>maretec.ist.utl.pt (as host (A)). | ||
# In Copernico use putty to connect to the firewall (user and pass in desktop text file) and do a dns restart: > sudo dnsrestart | # In Copernico use putty to connect to the firewall (user and pass in desktop text file) and do a dns restart: > sudo dnsrestart | ||
| − | # | + | # To get an instant update of the DNS do a dnsflush on the machine (Copernico): > ipconfig /flushdns |
| − | + | ||
| + | ==How to access a remote folder (inside DMZ) from the IIS== | ||
| + | Go to WWW server (Einstein) and in IIS add a virtual directory in the web service that you want to acces the folder, and give the path to the folder to share. Edit the user and pass to access it. | ||
| + | |||
| + | ==How to add an IP to the DMZ in Firewall== | ||
| + | Need firewall password from Marco | ||
| + | |||
| + | [[Category:DMZ]] | ||
Latest revision as of 11:40, 31 May 2011
The objective is to make the machine available outside Maretec
- Connect the machine to a network point connected to DMZ (lower part in the network rack of the computer room - two network points are being used marked with black cables).
- Edit machine ip's to 192.168.21.x where x, is an IP available in the DMZ (see How to add an IP to the DMZ in Firewall). Give default gateway and DNS server as 192.168.21.1
- Go to DNS server (Copernico) and add the machine name and IP to the list >DNS>Forward Lookup Zones>maretec.ist.utl.pt (as host (A)).
- In Copernico use putty to connect to the firewall (user and pass in desktop text file) and do a dns restart: > sudo dnsrestart
- To get an instant update of the DNS do a dnsflush on the machine (Copernico): > ipconfig /flushdns
How to access a remote folder (inside DMZ) from the IIS
Go to WWW server (Einstein) and in IIS add a virtual directory in the web service that you want to acces the folder, and give the path to the folder to share. Edit the user and pass to access it.
How to add an IP to the DMZ in Firewall
Need firewall password from Marco
