We use NXFILTER in our infrastructure for better control of our wireless network. We use a Mikrotik router. However, we have several network segmentations. Today our wifi network uses the 10.1.0.0/16 network, NXFILTER uses the IP 10.1.1.2 and we redirect all traffic via Mikrotik to use this DNS (10.1.1.2). The next step is to carry out licensing. However, I also need to perform filtering on our local network that uses the 192.168.1.0/24 network range. Do I need to carry out another installation for filtering in this range? If I use a new installation, can I use the same license for both environments? We are not interested in using the services of CLOUDLIST and only JAHASLIST. Thank you for understanding.
Announcement
Collapse
No announcement yet.
Installation, Configuration and Licensing.
Collapse
X
-
There might be authentication problem. Users need to have unique IP addresses and NxFilter should be able to see those IPs to apply user authentication and assign different policies based on user authentication. But you can't see private IP addresses beyond routers. That's the problem.
You can try one NxFilter running centrally and one NxRelay for each network - You can see private IPs through NxRelay but not as flexible as multiple NxFilter.
If it's multiple NxFilter in a cluster then you can use one license for all the nodes. Then in your subnet, there's one slave node running and the users in the subnet uses that NxFilter running in slave mode.
Even though you said that you don't want to run NxFilter on cloud, if you use NxFilter + NxRelay, you can run NxFilter on cloud as it can see private IPs via NxRelay. You also can use NxProxy to complement user authentication.
https://tutorial.nxfilter.org/d-iden...d-a-router.php
Comment