Craftworking

Cisco Blog

7/29/2015

Uverse and the DMZ

I am working on a couple of things. One is the addition of an exchange server and the other is setting up sslvpn access to the lab.

Since the Exchange servers and sslvpn use the same port numbers, specifically port 443, you cannot port forward the same port to more than one IP address. There are a few ways to solve this, but the easiest way is just use static public addresses.

Getting static ip addresses from AT&T requires patients and perseverance. It took quite a bit of time on the phone with them to get the order placed.

What I bought was a /29 block of public space. The way this works is that one address is reserved for their gateway and you get what they say is 5 usable addresses. However one of those addresses needs to be your gateway, leaving you with 4 addresses that can be used for your devices. This is fine for me since I will be having only the Exchange servers and the sslvpn using these addresses.