I'm part time sysadmin for a small hosting company with currently 20 different public servers. We have a 27 subnet block that gives us a maximum of 30 usable IP addresses. That much I know, but how do I maximize the number of IPs I can use for the DMZ on our Cisco ASA (5510)?
The outside interface of the ASA needs one of the public IPs, right? Can I assign the rest of the IPs to the DMZ interface without nating? I have read the DMZ subnet: to NAT or not to NAT? question and realize that nating isn't bad, but I would prefer to create a subnet with the public IP addresses on the DMZ interface. I just don't see how I can do that without wasting IP address ... Sorry for asking a probably trivial question.
More background info: We are about to switch ISP (to reduce the bandwidth cost) which will reduce our public IP range from a 25 subnet block to 27 subnet block. The old setup was simple, but wasting IP addresses. Now I need to be more careful, and my networking skills aren't really adequate.