ISP has given two blocks of IPs. i.e WAN(/30) & LAN(/29). Right now i have only L3 switch. How do I configure WAN and LAN IP on layer 3 switch?

ISP has given two blocks of IPs. i.e WAN(/30) & LAN(/29). Right now i have only L3 switch. How do I configure WAN and LAN IP on layer 3 switch?
Dercio TembeIT AssistantAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KimputerCommented:
You really have to elaborate on the whole situation. We don't know what you're trying to achieve here. What do you need/want?
Didn't the ISP give you a router? Do you only need internet access, or is this some kind of VPN/subscribed lines situation?
nociSoftware EngineerCommented:
An ISP doesn't give you LAN addresses...., (normaly)... and because of the lack of addresses in IPv4 might charge you handsomely if they do.
wrt. to IPv4 you will only get a Prefix.. ie. the first 48-64 bits of the address, the remainder is up to you.
So you have to better explain.

Might it be that the /30 is a private range (10/0, 172.16/12, 192.168/16) address meant as access network with the /29 range as 5 addresses for you to use?
Anyway you will need a Router not a Switch to configure this. (including all firewalling etc.).
masnrockCommented:
I remember that one provider in the US tended to hand out addresses in the exact manner you're describing. It's very doable (however, I sadly don't totally remember exactly how I had done it). I used a Cisco SG-series layer 3 switch and *think* I ended having to have 3 VLANs: 1 for management, 1 for the /29 block, and 1 for the /30. Also had to have a static default route defined.
SolarWinds® Network Configuration Manager (NCM)

SolarWinds® Network Configuration Manager brings structure and peace of mind to configuration management. Bulk config deployment, automatic backups, change detection, vulnerability assessments, and config change templates reduce the time needed for repetitive tasks.

Dercio TembeIT AssistantAuthor Commented:
The main purpose is for the two firewall below to be accessed from outsite. Note that I have no router. But I have Layer 3 Switch. ISP provided two public IPs for the firewall. See the attached image.
masnrockCommented:
What model switch are you using?
nociSoftware EngineerCommented:
A.B.C.206/28 = 16 addresses (-3 for infra)   ==> A.B.C.192 - A.B.C.207 / .192 = network, .207 = broadcast, .206 = default GW
13 addresses.

Default GW on switch should be A.B.C.206   (in one VLAN)
And another VLAN for internal...  
Default GW in FW's should be A.B.C.188

If you have THIS many addresses why not a unmanageble L2 Swich, and the Firewall on the .206 VLAN  and use .203/ .204 if addresses?


Be aware that your switch is connected to the internet this way and has NO firewall in front, L3 switch are by definition manageable.
And teh switch can be managed over BOTH interfaces. Inside & out from the internet because of the public addresses.
JustInCaseCommented:
Typically when ISP gives you two ranges. a.b.c.x/30 and z.z.z.z/28
/30 IP address is configured on link between ISP and your router.
/28 IP address range is for you to deal with it however you want.

Let's say that ISP assign you IP address/ranges:
1.1.1.2/30
ISPs address is 1.1.1.1
And additional IP address range:
2.2.2.0/28

ISP's router configuration (interested for your case - simplified):
interface gi0/0
 ip address 1.1.1.1 255.255.255.252
!
ip route 2.2.2.0 255.255.255.240

Open in new window


Your router (simplest configuration, example):
interface gi0/0
 ip address 1.1.1.2 255.255.255.252
!
! then if you want to configure your range directly connected to this router
!
interface gi0/1
 ip address 2.2.2.1 255.255.255.240
!
ip route 0.0.0.0 0.0.0.0 1.1.1.1

Open in new window

So all traffic from ISP router to IP address range 2.2.2.0/28 will be sent to IP address 1.1.1.2. How you will deal with it that's your choice. :)
Even if it is not Cisco equipment code should be understandable.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.