This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DMZ help Please

I am trying to setup a dmz with real ip's, but the problem I'm having is the range the isp assigned me 12.x.x.x with a mask of 255.255.255.240, now the first nic is assigned an ip address, but when i assign the 2 nic astaro complains that the network already exists, I guess because of the mask. I tried 255.255.255.255 and 254, but noone can communicate with that nic in the DMZ, If this isn't clear let me know, I hope someone can help me

This thread was automatically locked due to age.

Parents

0 firebear_01 over 22 years ago

Hello,
i think the ip-range your isp give to you is used by you in the dmz or at your internet-zone but you could not use it for both. so maybe you use it in your dmz and your isp give dynamical an ip-adress to your internet interface.

firebear
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 firebear_01 over 22 years ago

Hello,
i think the ip-range your isp give to you is used by you in the dmz or at your internet-zone but you could not use it for both. so maybe you use it in your dmz and your isp give dynamical an ip-adress to your internet interface.

firebear
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Andy_01 over 22 years ago in reply to firebear_01

marcuu, what you could do is, use the first 8 IPs for the external interface and the next 8 for the DMZ. Let's say your provider assigned you 1.2.3.0/255.255.255.240 cou could split that in 1.2.3.0/255.255.255.248 and 1.2.3.9/255.255.255.248. This way your external interface could be 1.2.3.1/255.255.255.248 and the DMZ interface 1.2.3.9/255.255.255.248, 1.2.3.10 - 1.2.3.14 could be used for hosts in the DMZ. To do so you need to activate the proxy ARP on the external interface (advanced settings).
Cancel
Vote Up 0 Vote Down

Cancel
0 marcuu over 22 years ago in reply to Andy_01

thx for the help, I reall appreciate it
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 22 years ago in reply to marcuu

Hello,
if you do like marcus said you have inconsistent subnetmasks your provider use not the same subnetmask like you.
Cancel
Vote Up 0 Vote Down

Cancel
0 Andy_01 over 22 years ago in reply to firebear_01

firebear, I guess you meant my answer... That's correct, the subnet masks are different, that's why you have to activate the proxy ARP.
Cancel
Vote Up 0 Vote Down

Cancel
0 tonyb over 22 years ago in reply to Andy_01

Andy, can you do the same with only 8 IP addresses provided by the ISP. i.e. an w.x.y.z/255.255.255.248 range? If not then is it possible to have a DMZ with machines with public addresses?
Cancel
Vote Up 0 Vote Down

Cancel
0 Andy_01 over 22 years ago in reply to tonyb

you can split your 8 IPs in twice 4, but you loose some IPs since only 4 are usable then. Of course you could use private IPs in the DMZ and use DNAT
Cancel
Vote Up 0 Vote Down

Cancel