Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 3776 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Additional interface IP MASK config

mahaddon

Hi

OK I'm setting up virtual webservers to rev proxy some internal sites to external users and I have a question about the MASK config for the additional IP.

I've seen additional address IPs added with /24 but I would have thought that they should be added with /32 because this is an additional IP and not a group of IPs?

To give more details, our UTM is in a backend firewall config (e.g. isn't an edge firewall) and I'm adding an additional IP to my DMZ interface to use for an edge firewall IP to IP NAT rule so that I can rev proxy website on an internal webserver.

thanks

Mark



This thread was automatically locked due to age.
  • 0

    Mark, since WebAdmin does it's own magic, you don't need anything other that a /32.  In fact, unlike other brands of routers, you can even use /32 in a WAN interface definition.  The config daemon will make the rules necessary for the UTM to be able to reach its default gateway.

    Sometimes, you can cause difficult-to-solve routing problems by choosing anything larger than /32.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    thanks for your help Bob

    cheers

    Mark

Unfiltered HTML