Personal tools

Difference between revisions of "How to get a machine into DMZ"

From MohidWiki

Jump to: navigation, search
Line 1: Line 1:
 +
The objective is to make the machine available outside Maretec
 
# Connect the machine to a network point connected to DMZ (e.g. two points available in the computer room marked with black cables)
 
# Connect the machine to a network point connected to DMZ (e.g. two points available in the computer room marked with black cables)
# Edit machine ip's to 192.168.21.x and gateway DNS server: 192.168.21.1
+
# Edit machine ip's to 192.168.21.x where x, for now, has to be one of the 11,12,13 available. Give default gateway and DNS server as 192.168.21.1
# Go to DNS server (Copernico) and add the machine name and IP to the list >DNS>Forward Lookup Zones>Maretec.ist.utl.pt (as host (A)).
+
# Go to DNS server (Copernico) and add the machine name and IP to the list >DNS>Forward Lookup Zones>maretec.ist.utl.pt (as host (A)).
 
# In Copernico use putty to connect to the firewall (user and pass in desktop text file) and do a dns restart: > sudo dnsrestart
 
# In Copernico use putty to connect to the firewall (user and pass in desktop text file) and do a dns restart: > sudo dnsrestart
 
# To get an instant update of the DNS do a dnsflush on the machine (Copernico): > ipconfig /flushdns
 
# To get an instant update of the DNS do a dnsflush on the machine (Copernico): > ipconfig /flushdns
  
  
==How To access a remote folder (inside DMZ) from the IIS==
+
==How to access a remote folder (inside DMZ) from the IIS==
# Go to WWW server (Einstein) and in IIS add a virtual directory and give the path to the folder to share. Edit the user and pass
+
# Go to WWW server (Einstein) and in IIS add a virtual directory in the web service that you want to acces the foldwe, and give the path to the folder to share. Edit the user and pass to access it.

Revision as of 19:15, 30 May 2011

The objective is to make the machine available outside Maretec

  1. Connect the machine to a network point connected to DMZ (e.g. two points available in the computer room marked with black cables)
  2. Edit machine ip's to 192.168.21.x where x, for now, has to be one of the 11,12,13 available. Give default gateway and DNS server as 192.168.21.1
  3. Go to DNS server (Copernico) and add the machine name and IP to the list >DNS>Forward Lookup Zones>maretec.ist.utl.pt (as host (A)).
  4. In Copernico use putty to connect to the firewall (user and pass in desktop text file) and do a dns restart: > sudo dnsrestart
  5. To get an instant update of the DNS do a dnsflush on the machine (Copernico): > ipconfig /flushdns


How to access a remote folder (inside DMZ) from the IIS

  1. Go to WWW server (Einstein) and in IIS add a virtual directory in the web service that you want to acces the foldwe, and give the path to the folder to share. Edit the user and pass to access it.