Re: Firewall

[Seth Vidal <skvidal@phy.duke.edu>]

> >         Our netmask is 255.255.255.192. May I change it to 255.255.255.224?
> 
> I'm not quite sure if I understand.  You want to split the /22 network
> into two /21 networks, one for the DMZ (demiliterized zone, router -
> firewall) and one /21 network for the secured zone. In that case you 
> will have to set up two 255.255.255.224 networks.

ok. From the map above and the description he gave it seems like your
slash notation is off by a few numbers.
he said he had 1/4 of a class C so it is a 255.255.255.192 or a /26
he want's to break that up into a /27 and two /28's
so respectively 255.255.255.224 and 255.255.255.240
that will drop his total number of ip's but it will segment the network as
he desires.


so all the rest of the description after that should change based on
different / notation and netmasks.

forgive me if I'm coming in late on the discussion and I missed something.

-sv