Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Newbie multi-homed routing question

    Scheduled Pinned Locked Moved Routing and Multi WAN
    1 Posts 1 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      snowch
      last edited by

      I have a cisco ADSL router that has multiple static ip addresses assigned to the dialer (ppp) interface.  I then use NAT to expose internal services.  I am using cisco ACL's to firewall traffic.  The relevant snipped from my configuration:

      interface Dialer0
      ip address xx.xx.xx.8 255.255.255.248 secondary
      ip address xx.xx.xx.9 255.255.255.248 secondary
      ip address xx.xx.xx.10 255.255.255.248 secondary
      ip address xx.xx.xx.11 255.255.255.248 secondary
      ip address xx.xx.xx.12 255.255.255.248 secondary
      ip address xx.xx.xx.7 255.255.255.248
      …
      !
      ip nat inside source list 2 interface Dialer0 overload
      ip nat inside source static tcp 192.168.0.100 22 xx.xx.xx.10 22 extendable

      I am concerned that my setup is not very secure and I have bought an ALIX to run pfsense.  I would like to know the best setup for this portion of my network.  I'm quite a beginner to cisco ios.

      As I see it some options are:

      1. reconfigure my cisco router to give the xx.xx.xx.8-12 static addresses to pfsense and have pfsense multi-homed
      2. keep my cisco configuration and have pfsense in my internal network.  Both cisco and pfsense will provide NAT to expose internal services.

      Are these options sensible?  Do I have any other options?

      Many thanks in advance,

      Chris

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.