Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Config for LAN deveices to see a virtual network on a DMZ device

    Routing and Multi WAN
    2
    2
    335
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bn1980
      last edited by

      My LAN is a 192.168.0.0 network
      My DMZ is a 10.0.0.0 network.

      In my DMZ is my Linux server which is a docker host which has its own virtual network 172.17.0.0.

      How can i get the devices on my 192.168.0.0 LAN network to access the docker containers within the 172.17.0.0 network?

      The docker host server looks to have the routing and ip addresses setup fine.

      ip addr and ip route on the docker host is below
      ===group

      ```@openmediavault:/$ ip addr show eno1
      2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
          link/ether 10:60:4b:92:bc:3c brd ff:ff:ff:ff:ff:ff
          inet 10.10.10.111/24 brd 10.10.10.255 scope global eno1
             valid_lft forever preferred_lft forever
          inet6 fe80::1260:4bff:fe92:bc3c/64 scope link
             valid_lft forever preferred_lft forever
      
      
      @openmediavault:/$ ip addr show docker0
      4: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
          link/ether 02:42:77:05:4a:b8 brd ff:ff:ff:ff:ff:ff
          inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
             valid_lft forever preferred_lft forever
          inet6 fe80::42:77ff:fe05:4ab8/64 scope link
             valid_lft forever preferred_lft forever
      
      
      @openmediavault:/$ ip route show
      default via 10.10.10.1 dev eno1 onlink
      10.10.10.0/24 dev eno1 proto kernel scope link src 10.10.10.111
      10.10.10.0/24 dev br-03e88ddb9735 proto kernel scope link src 10.10.10.1
      172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1
      ```kotlin
      

      ===

      kiokomanK 1 Reply Last reply Reply Quote 0
      • kiokomanK
        kiokoman LAYER 8 @bn1980
        last edited by

        @bn1980 said in Config for LAN devices to see a virtual network on a DMZ device:

        172.17.0.1/16

        add a static route to pfsense
        configure 10.10.10.111 as a new gateway, go to static route and add a destination for 172.17.0.1/16 via 10.10.10.111
        try to ping the docker

        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
        Please do not use chat/PM to ask for help
        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.