1

I have a LAN 10.0.0.0/255.255.252.0 (10.0.0.0-10.0.3.255) and want to separate clients (10.0.3.x) from the servers (10.0.0.x and 10.0.1.x) with a firewall in front of the servers. My problem is, i cant change address ranges nor subnets. Is this doable?

Thanks.

Edit: @HAL I looked up on vlsm and it looks exactly like what I need. Thank you.

1
  • Why can't you Variable Length Subnet?
    – HAL
    Mar 6 '15 at 16:19
1

Variable Length subnetting is the process by which you'd divide up the LAN adress into segments.

I have a previous answer that may assist you in the task. You can find it here

-1

No. The problem is that based on your subnet any devices on the network will bypass the default gateway and communicate directly with their peer. If you want to establish a DMZ in this manner, a subnet update on each client is mandatory.

3
  • 1
    Two words: Private Vlan Mar 9 '15 at 9:06
  • Yeah, that would do it..., though an extra router is required. Mar 9 '15 at 15:02
  • not really, put a firewall in bridge / transparent mode and set it up so the clients can only talk to the outside interface of the firewall Mar 10 '15 at 8:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.