Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Need help on setting up firewall router. My config is as below:

Public static network ID: x.x.x.48/28 gateway: x.x.x.49 available IP for the hosts: x.x.x.52 to 62

gw_eth0 <--> fw_eth0 - fw_eth1 <--> dmz_switch

Four servers are connected on dmz_switch (say s1, s2, s3, s4) all have to use public static IP address from the above block.

Any recommendation on IP assignment and route setup? Do I need to subnet the above block further or simply use /32 netmask and point-to-point static routes in the above setup?

share|improve this question

Usually you set up a non-routable network in DMZ (say, assign an IP address to each host in that network and establish a full NAT between public IP addresses and DMZ addresses in the firewall configuration.

share|improve this answer
Yes, or setup the firewall in transparent mode if possible. – radius May 18 '10 at 8:41

How many devices are in the above picture, and what kind of devices? Here is a private scheme, one of which matches your public scheme

Network           Net Broadcast     CIDR Mask              UsableHosts      28   14       28   14       28   14       28   14

Here is the /28 in two parts

Network           Net Broadcast     CIDR Mask              UsableHosts      29   6      29   6

Without more info...

The above tables generated from My Subnet Planner

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.