🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #412

Re: nokia ip71 config - 2 ip addresses necessary?

#412
From: Greg Hennessy
Date: Thu, 09 May 2002 22:24
39 lines
2667 bytes
On 9 May 2002 15:00:54 -0700, mtraum@yahoo.com (Mike Traum) wrote:

>I'm trying to configure the Nokia IP71. It requires that I assign a
>WAN and a LAN ip address. Is there any way I can assign the same ip
>address to both devices? 

No, Its ultimately a router working @ L3 connecting two discrete networks
together, not a bridge working @ L2 joining the same network. 

> I would like to do this to so that (a) I only
>need to use 1 of our static ip addresses 

You will initially only need to use one registered address on the WAN side
interface anyway, are you not using RFC1918 addressing internally ?

>and (b) so that I will not
>need to configure all of our machines behind the firewall to use the
>nokia as a gateway.

Unless you have a very small network, you should have no need to do this,
Its always a VERY good idea to put the firewall on its own dedicated VLAN
internally. You should then be able to set a route of last resort on your
internal routers and propagate that throughout the network. Your internal
hosts only need know what the next hop is. 

Personally I never give internal users direct access to the internet, setup
an proxy server with content filtering and force all your browser users to
use it for net access. 


greg


>
>Mike

--
$ReplyAddress =~ s#NOSPAM\.##;
With Precious and Grace ev'rything's all right. 
Technical Details
Message-ID: <3dtlduo3l2dafoqhbrvd97gaakub3ji8vk@4ax.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!kibo.news.demon.net!demon!shale.ftech.net!news.ftech.net!peernews.cix.co.uk!newspeer1-gui.server.ntli.net!ntli.net!easynet-monga!mango.news.easynet.net!easynet.net!easynet-post1!monolith.news.easynet.net!not-for-mail
References: <64ace841.0205091400.e947461@posting.google.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,f6f2f040952d19fa
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,f6f2f040952d19fa
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2002-05-09 15:24:46 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!kibo.news.demon.net!demon!shale.ftech.net!news.ftech.net!peernews.cix.co.uk!newspeer1-gui.server.ntli.net!ntli.net!easynet-monga!mango.news.easynet.net!easynet.net!easynet-post1!monolith.news.easynet.net!not-for-mail
From: Greg Hennessy <nntp@NOSPAM.cmkrnl.cix.co.uk>
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: Re: nokia ip71 config - 2 ip addresses necessary?
Message-ID: <3dtlduo3l2dafoqhbrvd97gaakub3ji8vk@4ax.com>
References: <64ace841.0205091400.e947461@posting.google.com>
X-Newsreader: Forte Agent 1.91/32.564
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 39
Date: Thu, 09 May 2002 23:24:44 +0100
NNTP-Posting-Host: 212.135.197.198
X-Complaints-To: abuse@easynet.net
X-Trace: monolith.news.easynet.net 1020983081 212.135.197.198 (Thu, 09 May 2002 23:24:41 BST)
NNTP-Posting-Date: Thu, 09 May 2002 23:24:41 BST
Organization: [posted via Easynet]