Using a single interface router as a gateway
Posted on 2004-09-17
Has anyone ever used a single interface router as a gateway before? In other words, a router with only one Ethernet interface and all traffic enters and exits the same interface. I worked at a large international company that had a DMZ with over 100 web servers in it. The gateway routers only had one interface and were setup in an HSRP fashion. The DMZ servers pointed to the HSRP address for their gateway. The router then routed all traffic to an interface on the firewall. I’m building a DMZ for the company I work for now and I’m considering the same setup but I want to know if anybody has used this configuration and would recommend it. Would this work the same as using a router with two Ethernet interfaces? It worked very well at the other company I worked for. I’m curious what everyone thinks of this setup. Below is a snippet of a possible config that I could use.
Router with only one interface:
ip address 10.10.1.2 255.255.255.0
no ip redirects
standby 10 ip 10.10.1.1
standby 10 priority 200
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.10.1.4 (IP of interface on firewall)
Cisco 2620’s are cheaper then the 2621 so that’s why I’m considering this setup. Anyone have any good/bad opinions on this.