I am pretty new to the configuration of a DMZ and I have the task of setting one up.
I have a Cisco 2811 Router running Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(24)T1, RELEASE SOFTWARE (fc3), 2 FE interfaces.
One FE is connected to the WAN, with a loopback interface configured with the public IP for Internet access in the office.
The other FE has 2 sub interfaces configured, one for data and the other for voice traffic.
Users within the office are configured to use the data VLAN to access the internet through the WAN.
Now we are setting up some new services and we require to have DMZs setup.
I want to setup 3 zones now that the different servers would reside in. How can i achieve this using the existing infrastructure I have?
I have an idea to create more subinterfaces and assign them to the zones, but I am still not sure how this would play out. I have been on this for the whole day and unable to make significant progress. Would appreciate any help and guide what so ever.
Ok then you can go for another sub interface for new vlan make it part of DMZ ,Assign new IP range and use the ip inspect feature of firewalling.
This might help.