DMZ/INternet Port on Cisco RV042
Posted on 2011-09-26
Ok, I think this one will be an easy A for the Cisco people. :-)
Here is what I have.
4 Servers behind a Cisco RV042 router in a datacenter. These are private servers with no one using them but exclusive customers.
Server number 5 will be a webserver. I want it to sit on the DMZ/Internet Port and be accessible by most anyone. The datacenter has given me a nice block of IP addresses to use. Here they are: 72.xxx.xxx.82 - .94 72.xxx.xxx.81 is the gateway address. The router is using .94
The operating system for the webserver is CentOS and the Control Panel is CPanel/WHM. If I plug the cable into the switch (not the RV042) and give it an internal IP address with one-to-one NAT with IP address of .92 the server can get to the Internet with no issues at all. But it can also get to the other servers on the network: not good. And another little drawback is that I kept getting emails from the CPanel saying that "the FQDN resolves to 72.xxx.xxx.92 but it is supposed to resolve to 192.168.xxx.30" (these are the exact words of the email)
So, here is what I need to know.
The RV042 has two WAN ports, one labeled Internet and the other labeled DMZ/Internet. From what I understand I should be able to turn on the second WAN port and make it a DMZ. The firmware version of the Router is 4.0.4.02.
On the setup page of the router is has a check box to enable DMZ. If I check that it gives me a configuration page and on this page is has a circle for Subnet or Range (DMZ & WAN within same subnet). If I check the subnet it gives me two boxes to fill in. Box one is Specify DMZ IP Address and the other is Subnet Mask. If I check the Range it gives me two boxes. IP Range for DMZ Port and the two boxes have a "to" in between them.
Here is the main question with a small "what if" thrown in for good measure.
which one do I choose and what do I type in on the router and what IP address (with subnet and GW of course) do I put on the Webserver. I really think it needs to be a public IP address to make it work right.
And now for the caveat. If I want to add another webserver in the near future, can I connect a Switch to the DMZ Port and connect the two webserver to it?
Thanks and please ask for clarification if you need it.