Robert,
Your question is not very clear here. Looks like you have been assigned 32 + 32
address
space from your ISP and from one address space you defining external interface of your
Firewall. So
-> The first thing you make sure the new C class is routed towards your network.
(traceroute from other site would find that for you).
-> Then You Firewall must handle these 32 addresses.
so either you have to route them (on Firewall) on proper interface (if you are
using
valid IP addresses for internal hosts (or any hosts behind firewall). Or use NAT if
you
want to hide some internal private addresses behind this new 32 block IP addresses.
In any case you can have multiple addresses from different blocks of network. All you
have
to figure out how to route (or NAT if you are using).
BTW: Is your ISP directly connected to your Firewall (like Nokia Serial port or do you
have perimeter router before Firewall).
More information is required to comment on your new topology.
Rajeev
Robert Eryou wrote:
>
> Hi All,
>
> We currently have a 32 block of IPs from our ISP.
> We needed more, so the ISP assigned us another
> 32 IPs from a different network:
> Current would be 10.0.0.32 - 255.255.255.224
> added would be 192.168.0.32 - 255.255.255.224
>
> Our current FW config says the External IF is
> 10.0.0.33
>
> How can I add the new block of IPs so that we
> can use them for our internal web servers ?
> Is this possible? How would I set the policy up?
> Is this a security concern?
>
> Thanks for any insight.
>
> Robert
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
--
#########################################################################
(Titanic creators used Linux to simulate the sinking of the great ship)
#########################################################################
Rajeev Kumar ([EMAIL PROTECTED])
Fluent Inc. 10, Cavendish Court, Lebanon NH-03766
-------------------------------------------------------------------------
Phone :: (603)-643-2600 x 349 Fax :: (603)-643-3967
Web:: http://www.fluent.com
#########################################################################
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
