3 wan for 1 lan, 1 dmz and 1 wifi

[tengu818]

Hello!
I'm trying to have this kind of network :

    .____________________________________________.
    |                                            |
    | .________________________________.      .--|-----|- W-Public
    | |      .___________________.     |      |  |
    |_|______|___________________|_____|______|__|
     | |    | |    | |    |X|   | |   | |    | |
    LOCAL   DMZ   MONIT   DEAD  WAN_1 WAN_2  WAN_3

That is :
- 3 virtual WAN interfaces (my ISP gives me 4 public IP via dhcp)

- the first one (aka wan_1) is bridged on DMZ directly, without firewall or dhcp server (there's only ONE computer in DMZ, and this one should have wan_1 IP directly.)

- the second one (aka wan_2) is bridged on LOCAL directly, without any firewall or dhcp (there will be a server just behind it, which will provide DNS, dhcp and other services for my LAN)

- the third one (aka wan_3) is linked on wifi. wifi interface will have a dhcp, QoS and so on as it's a public access (and therefor NO link between this interface and dmz/lan will be provided)

The MONIT interface should be the only one to provide a direct access through SSH on the asus... but it's a "bonus", if only LOCAL can access it it's nice too :->

I tried to find doc, howto, forum threads, but no luck. After having flashed my asus-wl500gp 5 times having lost it, I think I can maybe ask for help

So if anyone among you has an idea on how to do this.... or a doc link...

Thanks in advance !

[newbiefan]

Well, you are talking about several virtual wan interfaces, but nothing how they look like - e.g. one line or 4 lines.
According to your drawing, I'm assuming you have 3 ethernet lines (wan), maybe to a switch and 1 line to your provider. You told us nothing about your kind of connection - dial in, bridge or something else.....

-wan1: is just nothing, connect your device/pc directly to wan1, using dhcp
-wan2: is just behind a nat (network address translation), usually your server should handle this (Local 192.168.x.y), if not possible use a simple router and connect to wan2 (dhcp)
-wan3: is just a simple asus router or any other wireless device (dhcp)
-MONIT: does'nt make any sense to me - access to what? Your network or any device or asus, what do you wanna do with ssh?

hint: flashing firmware, doesn't mean to get a full configuration for a network. But to read something should solve any problem shortly.
Have fun....

[tengu818]

hi again!
sorry, my schema wasn't really clear....

I have only one wlan physical interface -> wan_1 wan_2 and wan_3 will be virtual interfaces.

In fact, lan->wan is ok, I have a connection on it.
I tried to put a dmz, but no luck : no internet on it.

Here's what I have :

#### VLAN configuration 
config switch eth0
	#option vlan0	"1 2 3 4 5*"
	#option vlan1	"0 5"
	option vlan0	"1 2 3 5*"
	option vlan1	"0 5"
	option vlan2	"4 5"


#### Loopback configuration
config interface loopback
	option ifname	"lo"
	option proto	static
	option ipaddr	127.0.0.1
	option netmask	255.0.0.0


#### LAN configuration
config interface lan
	option type 	bridge
	option ifname	"eth0.0"
	option proto	static
	option ipaddr	192.168.1.1
	option netmask	255.255.255.0

#### WAN configuration
config interface	wan
	option type	bridge
	option ifname	"eth0.1"
	option proto	dhcp
	
#### DMZ configuration
config interface	dmz
	option type	bridge
	option ifname	"eth0.2"
	option proto	static
	option ipaddr	10.10.0.1
	option netmask	255.255.255.0

config dhcp
	option interface	lan
	option start 	100
	option limit	150
	option leasetime	12h

config dhcp
	option interface	dmz
	option start		10
	option limit		15
	option leasetime	12h

config dhcp
	option interface	wan
	option ignore	1

My computer in dmz has an ip, in correct range.

(final aim is that computers connected to my asus will have ISP IPs.)

MONIT interface is to access asus, as I want it to be transparent and to be accessed only by this port. it's a physical ethernet port. but for now, it's a bonus, I want the rest to work first ^^'

Regards

C.

[newbiefan]

Anyway your network config is not a usual and maybe a very danger config.
Use a switch and connect everything as written above.
Consider, that you can get up to 4 ips from your isp, hence it means you should have up to 4 devices requesting dhcp (clients).
SSH on Asus is simple use dropbear and any tutorial how to install everything.
Further consider anytime, that such an "open" config is a party for any hacker. And you must install firewalls, nats and more for each network or device. Why do you wanna have everything separated? Use portforwarding instead of an "open" network.