About Trunolimit2

Trunolimit2 · ‎12-07-2021

You're gonna think it's crazy. So we have this server at site A. We are using meraki client VPN to allow remote users to access the Server on site A Authenticating through an LDAP server. Site A is being shutdown so we are going to bring the server to site B temporarily. Our end goal is to move the server to the cloud and screw having a physical server. But we need time to do that. The problem is that site B is using the VPN with meraki authentication. We want to move the server to site B without having to have everyone change their VPN settings and without causing issues with site B's VPN users. So I was thinking I would take the MX100 from Site A and put it behind the MX100 at site B but on a DMZ so users can utilize both VPN options. There probably isn't anyway to do this without getting a separate static IP for the Site A MX100 huh?

Trunolimit2 · ‎12-07-2021

Is having an extra static IP the only way to do a proper DMZ using an MX100?

Trunolimit2 · ‎06-07-2021

I've got a site that is out of IP addresses. It would be impossible to look through 200+ devices and see what is what. What are the downsides of just increasing this address space to a /23 and doubling the address pool? just to give you the size and scope of the site this is a residential install with an MX100, 3 MS 320, 3 MS 225, 2 MS 120, and 2 MS42s. And several MRs We have 5 VLANs running. All /24 but our main Data VLAN is about 90 precent used. Can I just change the main VLAN to a /23 a new subnet range so that it doesn't overlap with any other VLANS? Is there anything I should be aware of before making this change?

Trunolimit2

Community Record

Badges

Re: DMZ without an extra Static IP address.

DMZ without an extra Static IP address.

Expanding to a 23 bit subnet max instead of 24 bit.