Re: Single public ip address

On 17 Feb 2005 09:35:34 -0000, Kelvin Tarver <ktarver@fitnc.com> wrote:
> Is there a way to have a single ip address do the following:
>
> 1)Function as the outside interface of a firewall.
> 2)Use that same public ip address, and outside interface to function as a vpn 
> server.
> 3) Have the same public ip address PAT to a public web Server on the dmz.
>
> The goal is to have the outside interface of a firewall, vpn server, and a 
> public webserver to share the one public ip address.
>
> Is this possible?  I'm convienced it isn't possible, but I might be missing 
> something.  Any insight on this issue would be greatly appreciated.

That's possible.  The services you want will probably be IPsec (UDP
500) and HTTP (TCP 80), and since those are different ports you can
use the same public IP.  Every firewall I've seen will let you use the
WAN IP for VPN as well as inbound NAT.  You would need multiple public
IP's if you need multiple services on the same port (i.e. two web
servers, for example).

-Chris