I have the following network spaces. IP’s are changed to keep anonymous.
Public Network: 183.90.145.0/25
Public Gateway: 183.90.145.1 This is a Cisco router where I get a hand off from our ISP.
Internal Private Network: 192.168.20.0/21
Private Gateway:192.168.20.1
I want to use only 2 ports on the cloud core and all traffic must pass through the normal firewall (not the bridge firewall).
I currently have it working in a 3 port configuration with the following:
- port 1 going to the Cisco hand off with 183.90.145.2 assigned to it
- port 2 is bridged to port 1
- port 3 has the 192.168.20.0/25 network on it with 192.168.20.1 IP assigned to it.
- On the bridge I have firewall rules to allow traffic to and from port 3.
- NAT masquerade is set up to route 192.168.20.0/25 traffic to the bridge interface.
- I then have a switch that combines the public and private network together so I can assign either a public or private address on the network.
- default route 0.0.0.0/0 to port 1
Any and all ideas/criticism are welcome. I have only a little experience from taking Cisco classes in High School so I apologize if my current setup seems odd or not. Thanks