1

I have a LAN 10.0.0.0/255.255.252.0 (10.0.0.0-10.0.3.255) and want to separate clients (10.0.3.x) from the servers (10.0.0.x and 10.0.1.x) with a firewall in front of the servers. My problem is, i cant change address ranges nor subnets. Is this doable?

Thanks.

Edit: @HAL I looked up on vlsm and it looks exactly like what I need. Thank you.

Improve this question
1
  • Why can't you Variable Length Subnet?
    – HAL
    Mar 6, 2015 at 16:19

2 Answers 2

Reset to default
1

Variable Length subnetting is the process by which you'd divide up the LAN adress into segments.

I have a previous answer that may assist you in the task. You can find it here

Improve this answer
-1

No. The problem is that based on your subnet any devices on the network will bypass the default gateway and communicate directly with their peer. If you want to establish a DMZ in this manner, a subnet update on each client is mandatory.

Improve this answer
3
  • 1
    Two words: Private Vlan
    – Mike Pennington
    Mar 9, 2015 at 9:06
  • Yeah, that would do it..., though an extra router is required.
    – James Shewey
    Mar 9, 2015 at 15:02
  • not really, put a firewall in bridge / transparent mode and set it up so the clients can only talk to the outside interface of the firewall
    – Mike Pennington
    Mar 10, 2015 at 8:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.