Neil A. Hillard said the following on 04/27/2006 05:46 PM:
> You can't have multiple interfaces with the same IP address.
That's too bad; it's been a useful trick in several networks I've been
> If you're thinking that there's a problem accessing devices on an
> interface that is bridge with WAN then there really isn't a problem.
> The documentation states that you cannot access devices on the bridged
> interface from a _NAT'd_ interface. Simply enable advanced outbound NAT
> and ensure that LAN -> OPT traffic isn't NAT'd but LAN -> WAN is and
> you'll be laughing.
Thanks for clarifying that. I guess the remaining downside is that the
DMZ doesn't get the benefit of any firewalling, but I suppose I can do
that locally on the servers (which are all Linux or FreeBSD).
> I'm using that exact setup on my m0n0wall (and have been for over a
> year). I have a SIP server on OPT1 and it's setup like this because of
> NAT issues with SIP. Now my SIP traffic isn't subject to NAT.