up vote 0 down vote favorite
share [g+] share [fb]

I have FortiGate 200A Firewall.

I want to assign two IP ranges to a single DMZ interface in the firewall.

And than use them in a single windows server machine.

The ip address are:

72.80.206.192/27 (32 ip address)

72.80.208.0/27 (32 ip address)

Is it possible? If so how?

link|improve this question
75% accept rate
feedback

1 Answer

up vote 0 down vote

Instead of using public IP address ranges in your DMZ, it would probably be better to use a private address range (i.e. 192.168.1.x /24). Then NAT the public address space back to your server(s). This will be both more secure and scalable. It will also be a much more simple configuration on the server since you won't have to worry about asymmetric routing on the server itself.

link|improve this answer
I want to use the ip address to browse the internet from the server which is connected to this dmz , so i guess i need the public ip's , right? – sharru Oct 5 '10 at 11:53
No, do a hide NAT on the firewall and you will be able to browse the internet while still being more secure than giving the server a public IP Address. – Peter Oct 5 '10 at 12:16
You should be able to use hide-NATs to accomplish this, but my earlier comment of not using public addresses in your DMZ still stands. – Peter Nov 27 '10 at 12:28
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.