New Contributor
•
7 Messages
Static IP with site to site VPN and our own hardware
Hi, we have two office locations with Comcast business connections, and I am looking to use Unifi routers at each, including configuring site to site VPNs to our central office.
I was hoping to just put the Comcast Business Gateways into bridge mode and configure the Unifi routers with the static IPs, but is looks like that won't be possible. From what I have read, static IPs won't work when the gateway is configured in bridge mode, and the only option for static IPs is to run them in full routed mode.
If this is the case, is it possible to fully disable the firewall on the Comcast gateway to ensure all traffic, including VPN traffic, passes through the device to the Unifi router?
Will the Unifi router still be configured with the static WAN IP?
Does configuring the static on the gateway, and any firewall configuration, require a tech visit or can it all be done remotely?
Thanks for any help, this seems way more complicated than I have seen before for a business static IP connection.
Comcast_Antoine
Official Employee
•
35 Messages
1 year ago
Hello @Vorofa! Thank you for taking the time to reach out and being part of the Xfinity family. I'd be more than happy to answer your questions.
Is it possible to fully disable the firewall on the Comcast gateway to ensure all traffic, including VPN traffic, passes through the device to the Unifi router?
Yes! If you set your comcast modem firewall settings to "low" than all traffic, including VPN traffic, passes through the device to the Unifi router
Will the Unifi router still be configured with the static WAN IP?
Yes
Does configuring the static on the gateway, and any firewall configuration, require a tech visit or can it all be done remotely?
No, You can just log into your modem and do it there.
0
0
Vorofa
New Contributor
•
7 Messages
1 year ago
Hi Antoine, thanks for the reply. Just to confirm, if I purchase a static IP I can configure it on the Comcast gateway myself, and don't need a technician to log in remotely?
One of the locations already has a static IP, and the other we will need to purchase one for.
At the location that has the static already configured, what changes do we need to make on the gateway to allow us to use our own router? Is there anything other than the firewall change and disabling DHCP on the LAN side?
Thanks
10
0