public ip addresses and link address /30

patux80 — Thu, 02 Jul 2020 12:20:08 GMT

Hi,

I have a question regarding public interface configuration. ISP gave me /30 link network address space and /28 public IP address pool. Can you suggest me best way to configure this public address on PA. Should I use virtual wire, loopback interface or can I assign /28 address pool as VLAN on interface.

Thank you for replay

Re: public ip addresses and link address /30

Remo — Fri, 03 Jul 2020 06:05:21 GMT

Hi @patux80

On the external interface pointing towards the ISP you have to use one address of the /30 subnet. With the other 16 addresses you can then do whatever you want:

Use one or more single (/32) addresses for loopbackinterfaces which you use for global protect or IPSec VPN for example
Use these addresses with NAT rules to make internal/DMZ servers publicly available
Create a DMZ zone where you place servers that will get IPs of this public /28 subnet
Split the /28 in 2 /29 and use one for a DMZ and the others for NAT
...

Hope this helps.

Regards,

Remo

topic public ip addresses and link address /30 in General Topics

public ip addresses and link address /30

Re: public ip addresses and link address /30