Networking, CIDR Routing + TMG2010
Posted on 2013-01-18
Mission: Integrate new CIDR block.
I have recently been assigned a CIDR Block. This block will have 32 IPs in it and I need to setup the routing/nating.
Here is what i have now: 1xTMG2010 Server this server is currently used as my gateway/edge firewall, NAT, router - very similar to a Sonicwall or Netscreen.
The above scenario works like this:
1) Public IPs assigned to 1 network interface on my TMG server (64.80.x.x)
2) 1 Netgear Switch (TMG server is plugged into it)
3) Second NIC on my TMG server with a range of 192.168.1.x
The above is working as expected, i ordered more IPs because i am setting up new servers and need the additional IPs.
Here is what i need to accomplish:
I have a Netgear FVS336G, and of course my TMG server. I now need to setup CIDR based routing. I have been told by cox that if i want anymore than 8 ips i have to have my own routing hardware. << My Netgear FVS firewall does support this.
My new block is as follows:
68.xxx.xxx.65 < Gateway
255.255.255.224 < Mask
57.224.xxx.100 : WAN IP
255.255.255.240 : Mask
Internal Network: (Stays the same) All of my servers are connected on the internal network.
192.168.1.225 < TMG Server, This is what i currently point my client PCs to for the default gateway.
I want to accomplish the following: 1) Have all traffic pass through both firewalls (TMG + Netgear) 2) Double-NAT is not an acceptable solution
The Netgear firewall (WAN Side) will be the device that is connected to the Cable Modem, The TMG firewall will be connected to the (LAN Side) of the firewall.
I want to have the public IPs on my TMG Server << And that is where i am getting lost.
Can i assign 1 of my "Public IPs" on my (LAN Side) of the firewall?
And then the rest of them on my "TMG External NIC" that is connected to the LAN side of my firewall?
Thats where i am getting lost since i cant use Double-NAT but i still want to use my TMG firewall.
Sorry if this is confusing i am having a hard time understanding how to make this work correctly and am so hoping someone can assist....