...
This article describes how a Reverse Proxy can be configured on a Unified Firewall.
| Info |
|---|
As of January 2023, Websockets are not supported. |
Requirements:
...
- S®Unified Firewall with firmware version 10.2
...
- or later
- A configured and functional Internet connection on the Unified Firewall
- A configured and functional web server
- SSL certificate of a public certification authority (CA) in PKCS12 format.
- Web browser for configuring the Unified Firewall
The following browsers are supported
...
- :
- Google Chrome
- Chromium
- Mozilla Firefox
Scenario:
1. Die ) The Unified Firewall ist direkt mit dem Internet verbundenis directly connected to the Internet
- The Unified Firewall establishes the Internet connection. It has the public IP address Die Unified Firewall baut die Internet-Verbindung auf. Diese hat die öffentliche IP-Adresse 81.81.81.1, die mit dem DNS-Namen web-server.lancom.de verknüpft ist..
- A web server on the local network of the Unified Firewall has the IP address Ein Web-Server im lokalen Netzwerk der Unified Firewall mit der IP-Adresse 192.168.1.200 soll aus dem Internet per HTTPS erreichbar sein.
2. Ein Router vor der Unified Firewall baut die Internet-Verbindung auf
- and should be reached from the Internet via HTTPS.
2) The router upstream from the Unified Firewall establishes the Internet connection
- A router upstream from the Unified Firewall establishes the Internet connection. It has the public IP address Ein vorgeschalteter Router vor der Unified Firewall baut die Internet-Verbindung auf. Dieser hat die öffentliche IP-Adresse 81.81.81.1, die mit dem DNS-Namen web-server.lancom.de verknüpft ist.
- Die Unified Firewall und der vorgeschaltete Router sind beide Mitglied im Transfer-Netzwerk The Unified Firewall and the upstream router are both members of the intermediate network 192.168.0.0/24. Die In this network, the Unified Firewall hat dort die IP-Adresse has the IP address 192.168.0.254.
- Ein Web-Server im lokalen Netzwerk der Unified Firewall mit der IP-Adresse A web server on the local network of the Unified Firewall has the IP address 192.168.1.200 soll aus dem Internet per HTTPS erreichbar sein and should be reached from the Internet via HTTPS.
| Info |
|---|
| Dieses Szenario beinhaltet auch die "Parallel"-Lösung wie in diesem Artikel beschrieben. |
This scenario also includes the “parallel” solution as described in this article. |
Procedure:
Die Einrichtung bei Szenario 1 und 2 ist grundsätzlich gleich. Bei Szenario 2 muss zusätzlich noch ein Portforwarding auf dem vorgeschalteten Router eingerichtet werdenThe setups for scenarios 1 and 2 are basically the same. For scenario 2, you additionally have to set up port forwarding on the upstream router.
1) Configuring the Reverse Proxy on a Unified Firewall (scenario 1 and 2)
...
- Name: Assign a meaningful name for the Backend.
- Server: Enter the IP address of the server in the local network as well as the port and the URL path and add the entry by clicking on the "Plus symbol".
...
- Domain or IP address: Enter the public IP address or the DNS name where the server should be reachable.
- Connection: In the dropdown-menu select the Internet connection of the Unified Firewall.
- Port: Enter the Port to be used for contacting the server from the Internet.
- SSL: It is recommended to encrypt access from the Internet to the server. Therefore activate the option.
- Certificate: In the dropdown-menu select the SSL certificate to be used for authentication. It has to be imported in the menu Certificate Management → CertificatesCertificates beforehand.
| Info |
|---|
The SSL certificate has to be obtained from a public certification authority (CA) in order for any party to gain access to the server. The root certificate of known public certificate authorities is usually included in the certificate store of end devices. Thus the certificate cannot be created on a Unified Firewall. In this case the certificate would have to be exported on the Unified Firewall and imported to the end device of each party, which should have access to the server. |
...
1.7) The configuration of the Reverse Proxy on the Unified Firewall Firewall is thereby complete.
2) Setting up port forwarding on an upstream LANCOM router (scenario 2 only)
...