ER-3 -Comcast Fiber
- 
 Okay, so is this ALSO your office, or is this ONLY hosting servers? 
- 
 Both.... 
- 
 @scottalanmiller said in ER-3 -Comcast Fiber: Okay, so is this ALSO your office, or is this ONLY hosting servers? he said he wants 10.0.0.1 on eth1. SO I assume Office. 
- 
 If this is both, I'll just assume it is, then you want to make another network for the servers that is a DMZ. Your non-servers (office) will be in a LAN. The public IP block you got will be your DMZ. 
- 
 
- 
 OK with the configre of Jared i got it working.where do i put the dmz..? 
- 
 @mroth911 said in ER-3 -Comcast Fiber: OK with the configre of Jared i got it working.where do i put the dmz..? DMZ would be another port entirely. This complicates the setup a bit, but isn't horrible. If you have ETH0 set for your WAN, and ETH1 for your LAN (e.g. 10.x.x.x) then ETH2 will be your DMZ. 
- 
 so .. on eth2. would i add my first public facing ip address.? 
- 
 @mroth911 said in ER-3 -Comcast Fiber: so .. on eth2. would i add my first public facing ip address.? That would be a common choice, and a good one. So yes. Not a strict requirement, but an easy way to go. 
- 
 what would be my gateway then for the /27.. 
- 
 eth2 would have an address of X.X.X.65/27 
 then in your public faicng devices, they would have X.X.X.65/27 through X.X.X.94/27 and use a gateway of X.X.X.65/27
- 
 That does not make it a DMZ< but jsut another network and everything will route back and forth.. You need to add firewall rules to restrict and such to make it a true DMZ. 
- 
 Ok so i should remove the 10.254.254.1 off of eth2 and config the ip to 64/27 
- 
 @mroth911 said in ER-3 -Comcast Fiber: Ok so i should remove the 10.254.254.1 off of eth2 and config the ip to 64/27 - I updated my post.
 
- 
 @mroth911 said in ER-3 -Comcast Fiber: what would be my gateway then for the /27.. The IP that you assign to the router's port for that network. 
- 
 Gentalman.. I thank you so much you guys rock!!! .... It is configured. and working!!! 
- 
 One last question... I put a static ip ...in my nic card... then I go on web ask what my ip address is and it's pinging the 242.network as my ip.. not the nic card i configured. 
- 
 It is going through NAT. 
- 
 I see masquerade eth0.. nothing with eth2 
- 
 it's not going threw nat at all? Wondering why eth2 is show ip 242 when i have the nic set to 66 .. Frustrating wish i new more time to learn! Thank you guys for all your help. 


