Solved

Using a single interface router as a gateway

Posted on 2004-09-17
2
545 Views
Last Modified: 2012-06-21
Has anyone ever used a single interface router as a gateway before?  In other words, a router with only one Ethernet interface and all traffic enters and exits the same interface.  I worked at a large international company that had a DMZ with over 100 web servers in it.  The gateway routers only had one interface and were setup in an HSRP fashion.  The DMZ servers pointed to the HSRP address for their gateway.  The router then routed all traffic to an interface on the firewall.  I’m building a DMZ for the company I work for now and I’m considering the same setup but I want to know if anybody has used this configuration and would recommend it.  Would this work the same as using a router with two Ethernet interfaces?  It worked very well at the other company I worked for.  I’m curious what everyone thinks of this setup.  Below is a snippet of a possible config that I could use.

Router with only one interface:

interface FastEthernet0/0
 ip address 10.10.1.2 255.255.255.0
 no ip redirects
speed 100
 full-duplex
 standby 10 ip 10.10.1.1
 standby 10 priority 200
!
no ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.1.4     (IP of interface on firewall)

Cisco 2620’s are cheaper then the 2621 so that’s why I’m considering this setup.  Anyone have any good/bad opinions on this.

Thanks
0
Comment
Question by:steno1122
2 Comments
 
LVL 11

Accepted Solution

by:
PennGwyn earned 20 total points
ID: 12089356
I don't see what role HSRP plays here.

About the only issue with this kind of setup is to remember to turn off redirects, as you have done.


0
 

Author Comment

by:steno1122
ID: 12089406
HSRP is used for gateway redundancy.  If I only had one router and it went down then traffic won't be routed to the firewall.  The gateway IP for the DMZ servers will be the HSRP address.  That way if there is a hardware failure traffic will still be routed to the PIX.

Thanks for your reply PennGwyn.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
It happens many times that access list (ACL) have to be applied to outgoing router interface in order to limit some traffic.This article is about how to test ACL from the router which is not very intuitive for everyone. Below scenario shows simple s…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now