Article View: comp.security.firewalls
Article #412Re: nokia ip71 config - 2 ip addresses necessary?
From: Greg Hennessy
Date: Thu, 09 May 2002 22:24
Date: Thu, 09 May 2002 22:24
39 lines
2667 bytes
2667 bytes
On 9 May 2002 15:00:54 -0700, mtraum@yahoo.com (Mike Traum) wrote: >I'm trying to configure the Nokia IP71. It requires that I assign a >WAN and a LAN ip address. Is there any way I can assign the same ip >address to both devices? No, Its ultimately a router working @ L3 connecting two discrete networks together, not a bridge working @ L2 joining the same network. > I would like to do this to so that (a) I only >need to use 1 of our static ip addresses You will initially only need to use one registered address on the WAN side interface anyway, are you not using RFC1918 addressing internally ? >and (b) so that I will not >need to configure all of our machines behind the firewall to use the >nokia as a gateway. Unless you have a very small network, you should have no need to do this, Its always a VERY good idea to put the firewall on its own dedicated VLAN internally. You should then be able to set a route of last resort on your internal routers and propagate that throughout the network. Your internal hosts only need know what the next hop is. Personally I never give internal users direct access to the internet, setup an proxy server with content filtering and force all your browser users to use it for net access. greg > >Mike -- $ReplyAddress =~ s#NOSPAM\.##; With Precious and Grace ev'rything's all right.
Technical Details
Message-ID:
<3dtlduo3l2dafoqhbrvd97gaakub3ji8vk@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!kibo.news.demon.net!demon!shale.ftech.net!news.ftech.net!peernews.cix.co.uk!newspeer1-gui.server.ntli.net!ntli.net!easynet-monga!mango.news.easynet.net!easynet.net!easynet-post1!monolith.news.easynet.net!not-for-mailReferences:
<64ace841.0205091400.e947461@posting.google.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,f6f2f040952d19fa X-Google-Attributes: gidf922c,public X-Google-Thread: fc559,f6f2f040952d19fa X-Google-Attributes: gidfc559,public X-Google-ArrivalTime: 2002-05-09 15:24:46 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!kibo.news.demon.net!demon!shale.ftech.net!news.ftech.net!peernews.cix.co.uk!newspeer1-gui.server.ntli.net!ntli.net!easynet-monga!mango.news.easynet.net!easynet.net!easynet-post1!monolith.news.easynet.net!not-for-mail From: Greg Hennessy <nntp@NOSPAM.cmkrnl.cix.co.uk> Newsgroups: comp.security.firewalls,cp.products.firewall-1 Subject: Re: nokia ip71 config - 2 ip addresses necessary? Message-ID: <3dtlduo3l2dafoqhbrvd97gaakub3ji8vk@4ax.com> References: <64ace841.0205091400.e947461@posting.google.com> X-Newsreader: Forte Agent 1.91/32.564 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 39 Date: Thu, 09 May 2002 23:24:44 +0100 NNTP-Posting-Host: 212.135.197.198 X-Complaints-To: abuse@easynet.net X-Trace: monolith.news.easynet.net 1020983081 212.135.197.198 (Thu, 09 May 2002 23:24:41 BST) NNTP-Posting-Date: Thu, 09 May 2002 23:24:41 BST Organization: [posted via Easynet]