dmz

  • Thread starter Thread starter jas0n
  • Start date Start date
J

jas0n

is there a need or benefit to have a dmz setup on a different subnet mask to
the rest of the network?

the main network is setup with 255.255.240.0 mask with a different subnet
for each site, the dmz is setup as 255.255.255.0 with the poor choice of
192.168.0.x network (im saying poor choice as its the default network of
many home lans)
 
It doen't sound like you have a DMZ to begin with.

DMZs, all types, are always completely separate and distinct subnets

Tri-Homed DMZs are always publicly registered IP#s.

Back-to-Back DMZs can be either public or private IP#s although using
private IP#s makes it more limited in capabilty and the use of publicly
registered IP#s is recommended.
 
jas0n said:
is there a need or benefit to have a dmz setup on a different subnet mask to
the rest of the network?
Click to expand...

No, and in fact the subnet mask is completely
unrelated to the (purposes of the) DMZ.

The subnet mask must however be appropriate
and correct to whatever network and subnet
scheme you use.
the main network is setup with 255.255.240.0 mask with a different subnet
for each site, the dmz is setup as 255.255.255.0 with the poor choice of
192.168.0.x network (im saying poor choice as its the default network of
many home lans)
Click to expand...

A common DMZ design looks something like this.

Internet---OuterFirewall/Router---DMZ---InnerFirewallRouter--InnerNetwork
[/QUOTE]
 
No rest for the wicked hmm? --- Steve


Phillip Windell said:
--
Phillip Windell
[At Home]
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<


jas0n said:
is there a need or benefit to have a dmz setup on a different subnet mask
to
the rest of the network?

the main network is setup with 255.255.240.0 mask with a different subnet
for each site, the dmz is setup as 255.255.255.0 with the poor choice of
192.168.0.x network (im saying poor choice as its the default network of
many home lans)
Click to expand...
Click to expand...
 
It's like an addiction,...I need therapy...

--
Phillip Windell
[At Home]

Steven L Umbach said:
No rest for the wicked hmm? --- Steve


Phillip Windell said:
--
Phillip Windell
[At Home]
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<


jas0n said:
is there a need or benefit to have a dmz setup on a different subnet
mask to
the rest of the network?

the main network is setup with 255.255.240.0 mask with a different
subnet
for each site, the dmz is setup as 255.255.255.0 with the poor choice of
192.168.0.x network (im saying poor choice as its the default network of
many home lans)
Click to expand...
Click to expand...
Click to expand...
 
May I suggest news.addiction.i.cant.help.myself.please.make.me.stop.posting.now

:)

--Steve


It's like an addiction,...I need therapy...

No rest for the wicked hmm? --- Steve

--
Phillip Windell
[At Home]
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

is there a need or benefit to have a dmz setup on a different
subnet
mask to
the rest of the network?
the main network is setup with 255.255.240.0 mask with a different
subnet
for each site, the dmz is setup as 255.255.255.0 with the poor
choice of
192.168.0.x network (im saying poor choice as its the default
network of
many home lans)
Click to expand...
Click to expand...
Click to expand...
 
Back
Top