How to effectively connect a QuWAN device with third-party firewall solutions?

Hvordan effektivt forbinde en QuWAN-enhed med tredjeparts Firewall løsninger?

• Source: Any
• Protocol: TCP
• Destination ports: 8883 (MQTT), 443 (HTTPS)

To add a new firewall rule in QuWAN Orchestrator, see the "Adding a device firewall rule" topic in the QuWAN and QuWAN Orchestrator Web Help.

When using QuRouter in a mesh VPN setup, you must configure firewall rules on a third-party firewall device to allow site-to-site VPN traffic. These rules ensure that IPSec communication between the hub and edge sites is not blocked, enabling secure VPN tunnel establishment.

On the third-party firewall device, allow inbound and outbound UDP traffic on the following ports:

• 500 (ISAKMP/IKE): Used for key exchange in IPSec VPN connections.
• 4500 (IPSec NAT Traversal): Used when VPN traffic traverses NAT devices.
• 61001-61999 (Dynamic high ports for IPSec NAT Traversal): Required for certain IPSec configurations.

Configure the firewall rules as follows:

• Inbound traffic: Allow VPN packets from remote sites to reach the firewall.
• Outbound traffic: Permit VPN packets to be sent to remote sites without interference.

Properly configuring these rules on the third-party firewall device ensures uninterrupted VPN connectivity between mesh sites.

To ensure proper communication between QuWAN Orchestrator and your existing firewall services, it is essential to configure your firewall and router to allow specific IP ranges related to QuWAN. The router plays a crucial role by routing traffic between your local network and external networks, while the firewall filters and permits necessary QuWAN-related traffic to ensure secure and uninterrupted communication. Without proper configuration, you may encounter disruptions.

Follow the steps below to add the necessary QuWAN-related IP ranges to your firewall's allow list:

1. QuWAN VPN tunnel
   • Add 198.19.0.0/16 to your firewall's allow list to ensure that VPN tunnel connections established by QuWAN are not blocked:
2. QuWAN LAN IP subnet
   • Identify the LAN IP subnet of your QuWAN deployment and include it in your firewall's allow list.
   • To locate the LAN IP subnet, navigate to QuWAN Device > System Status > Network > LAN Details in the QuWAN Orchestrator interface.

By configuring both your firewall and router with these settings, you can ensure proper traffic routing, secure filtering, and uninterrupted communication between QuWAN services and your network, minimizing potential disruptions caused by blocked traffic.

For further assistance, refer to the QuWAN Orchestrator documentation or contact QNAP Customer Service.

• Kilde: Enhver
• Protokol: TCP
• Destinationsporte: 8883 (MQTT), 443 (HTTPS)

For at tilføje en ny Firewall regel i QuWAN Orchestrator, se emnet "Tilføjelse af enheds Firewall regel" i QuWAN og QuWAN Orchestrator Web Hjælp.

Når du bruger QuRouter i en mesh VPN-opsætning, skal du konfigurere Firewall regler på en tredjeparts Firewall enhed for at tillade site-to-site VPN-trafik. Disse regler sikrer, at IPSec-kommunikation mellem Hub og Kant steder ikke blokeres, hvilket muliggør sikker VPN-tunneloprettelse.

På tredjeparts Firewall enhed, tillad indgående og udgående UDP-trafik på følgende porte:

• 500 (ISAKMP/IKE): Bruges til nøgleudveksling i IPSec VPN-forbindelser.
• 4500 (IPSec NAT Traversal): Bruges, når VPN-trafik passerer NAT-enheder.
• 61001-61999 (Dynamiske høje porte til IPSec NAT Traversal): Påkrævet for visse IPSec-konfigurationer.

Konfigurer Firewall reglerne som følger:

• Indgående trafik: Tillad VPN-pakker fra fjernsteder at nå Firewall.
• Udgående trafik: Tillad VPN-pakker at blive sendt til fjernsteder uden indblanding.

Korrekt konfiguration af disse regler på tredjeparts Firewall enhed sikrer uafbrudt VPN-forbindelse mellem mesh-steder.

For at sikre korrekt kommunikation mellem QuWAN Orchestrator og dine eksisterende Firewall tjenester, er det vigtigt at konfigurere din Firewall og router til at tillade specifikke IP-områder relateret til QuWAN. Routeren spiller en afgørende rolle ved at dirigere trafik mellem dit lokale netværk og eksterne netværk, mens Firewall filtrerer og tillader nødvendig QuWAN-relateret trafik for at sikre sikker og uafbrudt kommunikation. Uden korrekt konfiguration kan du opleve forstyrrelser.

Følg nedenstående trin for at tilføje de nødvendige QuWAN-relaterede IP-områder til din Firewall's tilladelsesliste:

1. QuWAN VPN-tunnel
   • Tilføj198.19.0.0/16til din Firewall's tilladelsesliste for at sikre, at VPN-tunnel-forbindelser etableret af QuWAN ikke blokeres:
2. QuWAN LAN IP-subnet
   • Identificer LAN IP-subnettet for din QuWAN-implementering og inkluder det i din Firewall's tilladelsesliste.
   • For at finde LAN IP-subnettet, naviger til QuWAN Enhed >Systemstatus >Netværk >LAN Detaljer i QuWAN Orchestrator-grænsefladen.

Ved at konfigurere både din Firewall og router med disse indstillinger, kan du sikre korrekt trafikstyring, sikker filtrering og uafbrudt kommunikation mellem QuWAN-tjenester og dit netværk, hvilket minimerer potentielle forstyrrelser forårsaget af blokeret trafik.

For yderligere hjælp, se QuWAN Orchestrator dokumentationen eller kontakt QNAP Kundeservice.