Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have FortiGate 200A Firewall.

I want to assign two IP ranges to a single DMZ interface in the firewall.

And than use them in a single windows server machine.

The ip address are:

72.80.206.192/27 (32 ip address)

72.80.208.0/27 (32 ip address)

Is it possible? If so how?

share|improve this question

1 Answer 1

Instead of using public IP address ranges in your DMZ, it would probably be better to use a private address range (i.e. 192.168.1.x /24). Then NAT the public address space back to your server(s). This will be both more secure and scalable. It will also be a much more simple configuration on the server since you won't have to worry about asymmetric routing on the server itself.

share|improve this answer
    
I want to use the ip address to browse the internet from the server which is connected to this dmz , so i guess i need the public ip's , right? –  sharru Oct 5 '10 at 11:53
    
No, do a hide NAT on the firewall and you will be able to browse the internet while still being more secure than giving the server a public IP Address. –  Peter Oct 5 '10 at 12:16
    
You should be able to use hide-NATs to accomplish this, but my earlier comment of not using public addresses in your DMZ still stands. –  Peter Nov 27 '10 at 12:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.