To do this before ASL, I'd just connect a generic switch to the CBeyond router (x.y.z.1/29). Attach my Linksys WRT54G (x.y.z.2/29) to the switch with the CBeyond router as the gateway. Then attach a server to the switch and assign it another static IP (x.y.z.3/29), and so on. Easy, but no firewall.
How do I run this through ASL where both the server and my home network are behind the Astaro firewall? See diagram.
I have my "Internal (Network) > All / All" masquerade setup with a packet filter rule "Internal (Network) Any / Any." I made Astaro the DHCP server for the Internal interface, and turned on proxies. So the internal clients work great.
I also added a new network interface called "server3" on eth1 (external) of type Additional address on ethernet interface. I gave it x.y.z.3/29 and no default gateway. From outside, I can ping x.y.z.1 (my CBeyond router), x.y.z.2 (my Astaro box), and x.y.z.3 (the additional address on astaro). But how do I tie x.y.z.3 to a particular server on astaro's eth2 interface? Or am I going about this the wrong way?

This thread was automatically locked due to age.