0
  • Is this scheme possible?
  • External provider = External provider of the internet

Generally speaking, is there a way to assign a public IP address individually for each server to be used when SFP+ port delivers internet with /24 pool of IP addresses directly to the switch, and the switch connects to the servers straight away (as for example on Ubiquiti Unifi Switch or their Edgeswitch)

scheme

4
  • I'm not completely sure what you are asking. Do you mean a DHCP server to assign addressing to other devices? Some network devices have minimal DHCP servers built in, but you may be better off using a real, stand-alone DHCP server.
    – Ron Maupin
    Commented Dec 10, 2019 at 17:32
  • I mean, if I have /24 prefix, can I use a switch to assign different public IP addresses out of that /24 pool to the servers connected to the switch, or I need a router or something like that @RonMaupin
    – dnleiman
    Commented Dec 10, 2019 at 17:35
  • Address assignment is done by a DHCP server, or by manual configuration. As I explained, some network devices have a minimal DHCP server built into them, but you may be better off with a real DHCP server.
    – Ron Maupin
    Commented Dec 10, 2019 at 17:36
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer.
    – Ron Maupin
    Commented Dec 17, 2020 at 14:35

2 Answers 2

1

You do need some kind of routing.

If you advertise your own /24 prefix / AS a router is required as gateway.

The uplink subnet is different from your /24 subnet, so a router is required to forward between those networks. If you bridged your servers directly to your uplink they'd require a gateway for their default route. Also, the uplink peers would be required to talk to the server IPs directly on the wire which they likely won't do. If you can't use someone else's router you need to provide your own (your external provider could provide that).

Also, bridging your servers to the uplink would potentially expose their internal communication and may expose them to L2-based attacks.

As a bare minimum, a layer-3 switch would work, shutting out L2 attacks and providing routing both ways. At the very least you should carefully configure ACLs on an L3 switch to block obvious L3 attacks. Using a firewall provides better protection, so that should be preferred.

0

If I understand the question - you have three servers on the same subnet, connected to the same switch - that's fine, traffic to the subnet will be routed by the provider's router, and arp will take care of delivery of the correct address to the correct server.

In other words, the router port at the provider and your three servers are all on the same subnet, there's no need for a router between them.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.