Assign a second public subnet to DMZ

Hi,

please post a copy of your firewall rules.

Ian

Hi, thank you for the fast reply.

Why is this important?
If I bridge the interfaces, they should be on the same zone, right? Does the firewall check this traffic?

What firewall rule should be there?

Hello,

You shall have to configure the proxy ARP to achieve this.

support.sophos.com/.../KB-000035927

Thanks, I'll try this.

The article says in step 3: Create similar unicast routes for the other two servers using the steps above.

What should this route look like?

Destination 1.1.1.3 on interface Port3-10.10.1.1
Destination 1.1.1.4 on interface Port3-10.10.1.1

?

Hello,

Here, 1.1.1.3 and 1.1.1.4 assigned to the servers which are under Port3 DMZ zone as per the diagram given. These are not routes, we are defining transparent subnet gateway. 

In your case, you shall have to add these for the internal servers on which you assigns the public IP directly (Which will be from 3.1.1.0/29 subnet as you specified in your notes).

Ok, so what is meant by the sentence "Create similar unicast routes for the other two servers using the steps above"?

Hello,

My bad, you need to add static route specifying destination.

It will look like below:

• Destination IP: Specify the destination IP Address.   Example: 1.1.1.3 & 1.1.1.4
• Netmask: Specify the Subnet Mask.  Example: /32(255.255.255.255)
• Interface: Select the interface, Physical, Virtual, or an Alias.  Example: Port 3
• Distance: Specify the distance for routing, the setting can be between 0 and 255.  Example: 0

Hi,

I've got it working!

Thank you!

Hello,

Thank you for feedback. We are glad to hear that the issue is fixed.