From: Don (seadon@attbi.com)
Date: Thu Nov 07 2002 - 19:50:24 GMT-3
I would suggest multiple PIX 501's here. That way you can more easily set
up full firewall rules to each company individually with no worry of
interaction. Of course you would still need to NAT from the multiple 501's
to the single IP address of the DSL. No really great ideas for that except
another 501. Any chance the DSL provider will assign a block of addresses
to the connection? If so, setting up incoming NAT connections becomes a lot
simpler if the need or desire to do so arises in the future.
Don
----- Original Message -----
From: "Peter Wodle" <peter_wodle@hotmail.com>
To: <ccielab@groupstudy.com>
Cc: <security@groupstudy.com>
Sent: Thursday, November 07, 2002 1:47 PM
Subject: Multiple Compnay Connections to Internet Via ADSL
> Hi All
>
> Can you please help on this. What is a cheap way of serving around 5 (or
may
> be 6) compnaies in the same building with say 20 PCs so that they can
> connect to Internet with one ADSL line? They must not see each other as
they
> are seperate companies.
>
> What I'm thinking:
> 1) 2621 with 4E NM card. One interafce to ADSL router with legal address
> (i.e. External LAN). Others interafces to each compnay hub with Private IP
> addressess (i.e. internal LANs). Most private IPs to be NATed with
overload
> on the exteranl router IP address. Some server IPs to be NATed usind one
to
> one NAT.
> 2) Using may 2621. One interafce to ADSL router with legal address (i.e.
> External LAN). Other internal interafce to be trunked to a Catalyst.
> Internal FE to be sliced so that there are as many subinterfaces as the
> companies. Cat to have as many VLANs as companies.
>
> Does this sound ok? Aany better/cheaper way?
>
>
> _________________________________________________________________
> Protect your PC - get McAfee.com VirusScan Online
> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:55 GMT-3