asked on

Using a single interface router as a gateway

Has anyone ever used a single interface router as a gateway before? In other words, a router with only one Ethernet interface and all traffic enters and exits the same interface. I worked at a large international company that had a DMZ with over 100 web servers in it. The gateway routers only had one interface and were setup in an HSRP fashion. The DMZ servers pointed to the HSRP address for their gateway. The router then routed all traffic to an interface on the firewall. I’m building a DMZ for the company I work for now and I’m considering the same setup but I want to know if anybody has used this configuration and would recommend it. Would this work the same as using a router with two Ethernet interfaces? It worked very well at the other company I worked for. I’m curious what everyone thinks of this setup. Below is a snippet of a possible config that I could use.

Router with only one interface:

interface FastEthernet0/0
ip address 10.10.1.2 255.255.255.0
no ip redirects
speed 100
full-duplex
standby 10 ip 10.10.1.1
standby 10 priority 200
!
no ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.1.4 (IP of interface on firewall)

Cisco 2620’s are cheaper then the 2621 so that’s why I’m considering this setup. Anyone have any good/bad opinions on this.

Thanks

ASKER CERTIFIED SOLUTION

PennGwyn

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

steno1122

ASKER

HSRP is used for gateway redundancy. If I only had one router and it went down then traffic won't be routed to the firewall. The gateway IP for the DMZ servers will be the HSRP address. That way if there is a hardware failure traffic will still be routed to the PIX.

Thanks for your reply PennGwyn.