Ianty -
What you are looking for is a bridging firewall.
I don't believe FireWall-1 (as picture below) can do this.
Sun Microsystems' SunScreen EFS 3.0 can be either installed in
routing mode (standard firewall mode of operation, where the
machine segments a network) or in Stealth mode (acts like a MAC layer 2
bridge, subdivides a single subnet). If you're familiar with
our older products, SunScreen SPF-100 and SPF-200, the "stealth"
mode behaves like those. SunScreen EFS 3.0 installed in
stealth mode would handle your configuration as documented below.
SunScreen 3.1 will begin shipping next month, and can also be
installed in Stealth mode.
I believe that Lucent's firewall, and the Netscreen-100 can
also be configured in this manner. While the SunScreen technology
has been around a lot longer, each of those firewalls has
unique features that you should consider, in addition to subdividing
a single subnet.
Standard caveat applies: I work for Sun on the SunScreen product
line, so I am biased. :-)
hth
Valerie
SunScreen Engineering
> Delivered-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED], "Firewalls-Digest"
<[EMAIL PROTECTED]>, [EMAIL PROTECTED]
> Date: Tue, 25 Apr 2000 11:28:35 +0800
> From: "Ianty Susanty" <[EMAIL PROTECTED]>
>
> Hi all,
>
> I have a few things to clarify on configuring firewall on the same subnet.
>
> I have 2 interface on this server. Which I am trying to configure the same
interface on the same subnet. Is it possible? Do i need to segment them on 2
diff subnet? pls explain if there is no possibilities to install a firewall with
2 interfaces on the same subnet(shown below).
>
> [gateway:201.10.10.1]
> /
> /
> ------------------------------
> |
> |[interface 1: 201.10.10.10]
> -------
> [FW-1]
> -------
> |[interface 2: 201.10.10.11]
> ------------------------------
> |
> [client] {201.10.10.12-13}
> {gateway:201.10.10.1}
>
>
> regards
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
