Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

RVS4000 Internet & Public subnets and DNAT

Our network consists of 2 subnets of 8 public IPs (/29) and an private 192.168.... subnet for internal use.

We currently have a box with 3 if cards routing this but I have been asked to replace this with a (preferably) RVS4000).

It looks like I could support the different subnets with the VLAN mechanism but I'm not 100% sure as I don't have an RVS4000 in front of me atm.

It also looks like I would have to set the RVS LAN ip range to one of the subnets either one of the 2 public or the private.

One scenario I'm considering is making the LAN IP range an internal private range (192.168.....) and then creating 2 VLANS for each public IP block.

My concern is that DNAT will interfere with the traffic to the 2 public blocks. We do want filtering on this ranges to block various ports and attacks but obviously don't need NAT as they are public addresses.

am I correct that this will be a problem? If so is there a solution ?

thanks.

252
Views
0
Helpful
0
Replies
CreatePlease to create content