atcomsystems.ca/forum Forums VOIP Phones & IP PBX Networking Utilizing 2 subnets on my network

I have 2 blocks of IP Addresses, on a /29 and another on a /27 subnet. I am using an Adtran Total Access 612 router that connects to my Watchguard Firewall. The /29 network is currently connected to my Watchguard’s external interface (eth0). I will be configuring an additional interface on the Watchguard for the /27 subnet of IP addresses I received from T1 provider to eth1on the Watchguard. My T1 provider has informed me that the Adtran can use more than one IP address on its Ethernet port. So in theory, I should be able to take the patch cord from the Adtran, plug it into a switch and plug one patch cord from the switch to eth0 and the other patch cord to eth1 and be able to utilize both subnet networks on my Firewall. Does this make sense?

NO.

Post WG model number. We've installed a lot of these, but need to know which one.

May also want to try the WG forum for better support.

It's a Watchguard X500

My guess is you provider did not have a contiguous block of addresses for you and wants you to assign a secondary address to your router. This happens quite frequently.

Before I replied I wanted to confirm your WG model (which seems to provide 3 ports by default, 6 max; and also wanted to make sure you were not confusing the term port as it is generically misused most often in regards to routers). Yes, in short, you can do what you want, but does it do any good? This will give you 2 wan and 1 lan connection(s), which makes no sense really, since your wan connections are to the internet via the same provider/link, providing no redundancy.

The issue at hand, is I only have 8 static IP addresses on a /29 subnet. 3 of those IP addresses are being used for routers, giving me only 5 static IP addresses to work with. I wanted to add more public IP addresses so I could configure the firewall to redirect to servers and workstations on the LAN. Thanks for your input. Any other comments?

Why not just forward specific ports to the devices behind the firewall. For instance why do you want routable IP's on some of your workstations? What is it your trying to do?

Why not use IP forwarding?

This is all being implemented to allow me access directly into the servers via Remote Desktop or Integrated Lights Out Management on my HP Servers. Also other misc things like allowing access to the in-house Instant Message server in the LAN from the outside world. I'm just out of public IP's to use.

Also, having the multiple public IP's I can assign DNS names to the public IP's so I don't have to remember the public IP address of SERVER1.