Hardware Firewall using Genius

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Hardware Firewall using Genius

Oriphix

523 posts

Ultimate Geek

#116150 19-Apr-2013 15:59

Hi All,

Anyone tried to put a Hardware firewall in front of a Genius modem?

I was thinking something like below not sure if it will work.

Exchange --> DSL modem (192.168.1.1) --> Hardware Firewall (SonicWALL 192.168.1.254) --> Genius 10.1.1.1 --> Computers on the LAN / Wireless 10.1.1.2 - 254

If I put the firewall behind then the wireless it will bypass it.

Exchange --> Genius 10.1.1.1 --> Hardware Firewall (SonicWALL) --> Computers on the LAN / Wireless.
| |
|___________________________________________________________________|

Any ideas?

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#802352 19-Apr-2013 16:05

Are you wanting to still use the VoIP feature?

Oriphix

523 posts

Ultimate Geek

#802426 19-Apr-2013 18:16

ubergeeknz: Are you wanting to still use the VoIP feature?

Yeah. It wouldn't be a problem if it was naked dsl. The voip is what makes this tricky.

Ragnor

8223 posts

Uber Geek

Trusted

#802428 19-Apr-2013 18:20

You could throw out the Genius and do something like: Draytek Vigor 120 > Sonicwall > ATA

Draytek can do PPPoA to PPPoE bridge/relay to so the Sonicwall can do PPPoE for it's WAN meaning the Sonicwall controls the connection. ATA can probably just be a DHCP client on the Sonicwall LAN.

Some instructions here for using a different ATA / VOIP client with Orcon's VOIP are here:
http://www.gpforums.co.nz/showthread.php?s=&threadid=460148

RunningMan

8961 posts

Uber Geek

#802437 19-Apr-2013 18:25

The double NAT isn't the best idea. Do you specifically want/need to use the Genius, or could you use something else, like a separate ATA and AP?

Alternatively, if there's a specific feature of SonicWALL that you need, is that feature available in another combined modem/router/AP from another brand?

Ragnor

8223 posts

Uber Geek

Trusted

#802438 19-Apr-2013 18:27

Yeah I was just editing my earlier post to say a similar thing.

Not sure what the best cheap ATA is these days.

Ragnor

8223 posts

Uber Geek

Trusted

#802442 19-Apr-2013 18:33

Hmm maybe the Genius can be connected as a "dumb" device behind the Sonicwall if you do "WAN Bypass" ie: connect from LAN port on the Genius to LAN port on the Sonicwall/switch. Disable DHCP server in the Genius and give it fixed LAN settings that point to the Sonicwall as the gateway.

No idea if the voip will work though.