[ale] SMB routers capable of having multiple WAN IPs on one interface?

[lnxgnome]

Hey Raj,

  I have a Check Point 730 & Comcast Business internet with 5 static
IPs.  Just using one wire, the CP730 let's you configure one IP on the
device (and this becomes the default egress IP), but then I can create
incoming NAT endpoints on the CP730 with my other static IPs,
effectively having four additional IPs to pass packets to my DMZ.  A bit
of a kludge, but it works.  CP support offered other suggestions, but
this was the most successful one I implemented. You wouldn't want to run
a ftp server on the CP730 itself.

  I've also played around with the 'free' Sophos virtual UTM9 FW.  They
have two free licenses, full blown UTM for personal use, and basic FW
business use.  Whereas the CP730 is a very stripped down/embedded Linux
system, the Sophos is much more like a full blown host.  Being virtual,
you can put as much horsepower behind it as you want.  It's also much
more configurable, allows you to create alias IPs on the WAN interface
and includes a FTP proxy.


On 7/28/17 6:07 PM, Raj Wurttemberg wrote:
>
> Are there any SMB firewall/routers that support having multiple WAN
> IPs on one interface?
>
>  
>
> Use case: We already have a ftp server for an application.  We have a
> vendor that needs to drop off FTP files on a device (firewall would be
> configured to only allow their subnet).   Basically I need two IPs on
> my firewall so that I can support two FTP servers.  I have asked the
> vendor if they can support FTP on a different port and I can NAT the
> traffic to the device.
>
>  
>
> Thanks,
>
> /Raj
>
>  
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20170728/549138d5/attachment.html>