Graphic Design wiht IP / VLANs

[vikozo]

hello
i get sometimes confused when reading about Firewall and IP Ranges.
is there a Example showing this.
I would have the ISP Router (Fritzbox) -- Firewall -- Switch -- Server (Mail/Web)
so if the Firewall is writing about the WAN it meas the "LAN" Between Firewall and ISP Router, and i belive they would Need theyere one IP Range with just 2 IP?

have a nice day
Vinc

[bartjsmit]

Hi Vinc,

Yes a subnet with at least two IP addresses is required to connect the 'WAN' side of OPNsense to your ISP router. There may be restrictions on the mask size on the router and for IPv4 you need a network and a broadcast address, which makes your smallest usable subnet /30 with a mask of 255.255.255.252.

Bart...

[vikozo]

Thanks for your feedback.
i think i have to replan the IP Ranges to use.
sorry if i do ask some strange question but at this time i have a working BIND-DNS/Mail/Web server im my net and would like to have it as fast as possible back to the net ;-)