Splitting a /29 subnet into two /30

JuniperForum.com

July 29, 2010, 07:55:01 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News: If you have an interesting idea for an article or knowledgebase entry, please submit it!

Home

Help

Latest Knowledgebase Articles

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

JuniperForum.com > Security > NetScreen and SSG Routing > Topic: Splitting a /29 subnet into two /30

Pages: [1]

« previous next »

Author

Topic: Splitting a /29 subnet into two /30 (Read 353 times)

sjordet

Newbie

Posts: 22

Splitting a /29 subnet into two /30

« on: January 15, 2010, 05:50:01 PM »

Hi!

I have a /29 net from my ISP, let's say 77.88.99.48/29. .49 is the isp gateway. I would like to have a server in the DMZ having an official ip (can't use MIP for several reasons). If I use 77.88.99.50/30 on untrust and 77.88.99.53/30 on DMZ, I can use .54 for my server. But this doesn't work, and I guess I need to tell my ISP to route 77.88.99.52/30 to gateway 77.88.99.50. Is that correct? And is that a "normal" request, or something my isp isn't likely to do?

Thanks.


	Logged

felix001

Full Member

Posts: 112

Re: Splitting a /29 subnet into two /30

« Reply #1 on: February 06, 2010, 02:03:14 PM »

Your having problems as your outside interface wont be a /29. Just leave your untrust interface as a /29 and then use either MIPs or VIPs to port forward to RFC1918 addresses within your DMZ.