My Company has a Concentrator 3030 and I need some advice on setting up my private and public interfaces. We want to be able to have people hit the 3030 from the outside world and from the inside so what would be the best way to set the 3030 up. We have a pix 520 with 5 DMZ’s (0, 5, 10, 50, and 100).
Public Interface
1. Should I place the public interface in DMZ 0?
2. If I do place the public interface in DMZ 0 should I give the public interface a routable IP address or should I give it a non routable IP address and forward traffic to the non routable IP address with the pix?
3. If I use a non routable IP address what will I have to forward from the pix?
Private interface
1. Should I place the private interface in a DMZ or should I place the private interface on the internal network?
2. If I put the private interface on a DMZ, what DMZ should I place it on?
3. If I place the private interface on a DMZ what will I need to open up to that non routable IP address?
Also what is the external interface suppose to be used for?
Any suggestions would be greatly appreciated.
