Configure two IP on same ethernet with NAT

[Mariscal]

Hello

I'm a network administrator and I need some advice.

I have a small network with a Cisco 2516 router, several servers and
lots of hosts. I also have a small range of public IP. I can't give a
public IP to every host, because I don't have enough. So, the question
is How can I organize the network?

I have thought two possibilities:

A: Using NAT for servers and hosts. Static NAT for Servers, and
NAT-PAT for hosts. This can improve network security, but the servers
need to use multimedia, and I don't know if there could be some
problems with NAT and ports. In this case, I will use an Ethernet
inteface as usual.

B: Configure two subinterfaces on Ethernet interface, with two
different addresses. Host will use private address and router will do
NAT . The other address will be public and the servers will have
public addresses. Do you know if this could be possible? Or it could be better to configure a secondary address with the private address?

Which one could be possible or better?

Thanks in advance

Curro

 

[ChrisAC]

PAT all outgoing connections from LAN clients to the internet using one public IP address (ie. a hide address) and then statically NAT pubic IP's through to any servers that require live IP's, ie mail server, web server etc..

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************