Firewall External IP address configuration

TheKnat

TheKnat

TheKnat

Associate
Joined
13 May 2007
Posts
1,832
Location
Lancashire, UK
This is something I've never really understood, but that could just be down to the fact that I've only ever configured SOHO routers in the past. How is it you setup a firewall + router to BOTH have external IP addresses ?

By this I mean that normally with home routers, you have to configure an external IP address (the ones provided by your ISP) and an internal IP address. Normally when I'm configuring this sort of setup, I just create a different subnet between the router and firewall and then set the router to forward all traffic to the firewall. This seems to do the job, but has caused some problems in the past, especially when I want the firewall to handle a few different IP addresses and then NAT them to internal servers.

Can a standard router you would normally have at home be configured so that both it and the firewall have their external IP addresses set as one of public ones I have been assigned ? Or is this something which I need a more expensive router to do ?
 
depends what you can do with your router, normally there are two options (maybe more, and id be interested to learn of more):

configure public subnet on one interface on the router, then nat traffic as required speficying a public ip address on the router as the destination with the local ip as the nat ip. This way you can have multiple port forwards for local address with the same port and different destination ips.

You can also bridge the external interface with an internal interface, so the bridge takes one public ip address and all servers behind it can be given their own public ip address, provided there are enough ips in your subnet.
 
mynsa said:
You can also bridge the external interface with an internal interface, so the bridge takes one public ip address and all servers behind it can be given their own public ip address, provided there are enough ips in your subnet.
Click to expand...

That sound like what I'm trying to do, but I doubt a home style router can do it ?

Either way, at least I know what its called now. Cheers.
 
You must log in or register to reply here.
Back
Top Bottom