Hi,
I'm new to m0n0wall and I'm trying to configure as per topic with the LAN and WAN on same subnet. After looking around a bit I seem to see it's not possible but I just wanted a confirmation.
My setup is as follows
[ISP1] - public dyn IP - [adsl modem + router] - 192.168.1.0/24 - [switch] - network1 + server1(192.168.1.4 on eth0)
[ISP2] - public fix IP - [PPPOE router] - 192.168.1.0/24 - [switch] - network2 + server1(192.168.1.6 on eth1)
So 1 server is connected on both sides. network1 is where most computers are and connect to the server on 192.168.0.4, network2 is where the server connects to the internet and where computers outside the office connect to that server via a vpn on the PPPOE router. It is mostly not relevant for what I want to do.
I'd like to slip in a m0n0wall device (running on Esxi) between the adsl modem and the switch so as to
1. be able to control the internet bandwidth use (prioritise emails, block some p2p and heavily throttle personal mobile devices) in a transparent way (I'm thinking traffic shaper + some firewall rules)
2. In the event I get a m0n0wall issue just plug the network switch back in the adsl modem until I get around fixing m0n0
To me this implies something like
[ISP1] - public dyn IP - [adsl modem + router] - 192.168.1.0/24 - [switch] - 192.168.1.99 -[m0n0wall] - 192.168.1.0/24 - network1 + server1(192.168.1.4 on eth0)
However as I said, subnet would be the same on the wan and lan interfaces of m0n0wall.
My constraints are: I cannot change the subnet on the lan side and at worst I could change the subnet on the wan side but then if I get an issue with m0n0 when I'm not around I cannot just ask someone to unplug the cable from the m0n0 server and plug it in the router straight away because the router will be on another subnet
Right now when I have both subnets be identical I cannot access anything on the wan side (btw I have unchecked the option to Block Private networks in the wan config). When I have them on different subnets I can ping a devices on the wan side but it seems dns is failing so that probably will be the next thing for me to fix.
Thanks for reading through