Jérôme Simionato wrote:
> My question is simple:
> is it an other way to made PPPOE connection with multiple IP to work ???
> is it possible to use the WAN card to assume my public range
> (xx.xx.xx.193/28) and let DMZ in an other subnet (10.10.10.0/24) with
> NAT Inbound ???
Sure! You can use 1:1 NAT if you have enough public IP addresses to give
each of your DMZ server its own, or server NAT if you need to be able to
map individual ports on each of your public IPs to different servers. In
any case, just assign a private subnet to your DMZ interface and add the
desired 1:1 (or server NAT + inbound) mappings. No proxy ARP required
for PPPoE.
Also, don't forget that you shouldn't allow DMZ servers to connect back
to LAN (or at least only on a very limited set of ports/IPs) - use "not
LAN subnet" as the destination for your DMZ rule.
- Manuel |