Splitting static IP address range

mfirth — Fri, 19 Aug 2011 10:13:49 GMT

Hi,

We have the business broadband product with the "5" static IP address option (in reality /29 block of 8 IP addresses, of which 5 are nominally usable for user devices)

We have another firewall behind the Business hub for terminating our VPNs and doing NAT etc, which has been allocated one of the static IP addresses.

What I'd really like to be able to do is to route the other 4 static IP addresses to our firewall, to allow us to create a DMZ network that's controlled by that firewall.

So far, I've split the /29 into two /30s, and assigned the first to the Business Hub's "additional address block" option, and routed the second half towards our other firewall.

That seems to have worked as I want, and I can access outbound from both the "main" /30, and the "secondary" /30.

However, even though the addresses are not directly under control of the Business Hub, it seems to be firewalling all inbound access to the "secondary" /30 range.

Is there any way to stop it doing this? - there aren't any options that seem relevant in the "firewall" tab of the Business Hub.

Thanks

Michael

topic Splitting static IP address range in Archive

Splitting static IP address range