I have account pppoe dynamic ip with one block 8 ip static aaa.bbb.ccc.200/29 route to this.
Can I config 2nd ip address for LAN, default ip 192.168.88.1 for NAT and 2nd ip aaa.bbb.ccc.200 for routing?
one my pc config will be
ip address : aaa.bbb.ccc.201
subnet mask : 255.255.255.248
default gateway: aaa.bbb.ccc.200
Yes, you can. Just assign the second IP address to the LAN interface …
Beware: if you would use the IP address block as /29 subnet, then you’d loose two addresses: aaa.bbb.ccc.200 would become network address and aaa.bbb.ccc.207 would become broadcast address.
As those addresses come as routed block of addresses (you will still use the pppoe dynamic gateway as default gateway for those static IP addresses), those 8 addresses are most probably all usable. So if you’d rather use all 8 addresses, then you can either perform netmap between public address and some private address … or you could perform src-nat from private addresses to different public addresses (src-nat takes many conditional options so you can do it with some precission). In any case you can use a separate private subnet as DMZ for servers … which would be separate IP address range from that of your LAN. Thus enhancing security because all traffic between LAN and DMZ would be forced to pass firewall (as it would be if you used the public addresses directly on client machines). But you can decide to use your “regular” LAN address space as well.