I have FortiGate 200A Firewall.

I want to assign two IP ranges to a single DMZ interface in the firewall.

And than use them in a single windows server machine.

The ip address are: (32 ip address) (32 ip address)

Is it possible? If so how?


Instead of using public IP address ranges in your DMZ, it would probably be better to use a private address range (i.e. 192.168.1.x /24). Then NAT the public address space back to your server(s). This will be both more secure and scalable. It will also be a much more simple configuration on the server since you won't have to worry about asymmetric routing on the server itself.

  • I want to use the ip address to browse the internet from the server which is connected to this dmz , so i guess i need the public ip's , right? – RuSh Oct 5 '10 at 11:53
  • No, do a hide NAT on the firewall and you will be able to browse the internet while still being more secure than giving the server a public IP Address. – Peter Oct 5 '10 at 12:16
  • You should be able to use hide-NATs to accomplish this, but my earlier comment of not using public addresses in your DMZ still stands. – Peter Nov 27 '10 at 12:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.