How do I put 5 internal IPs into a DMZ?

Follow

Maintenance

• March 17, 2022 15:44
• Edited

We have a Firewall Gold and inside we have 4 VOIP devices. 

 

How can we make a DMZ and put all 4 internal IPs in the DMZ so that all 4 VOIP devices see the world?

If my memory is right, when we make a DMZ it only has one IP within it.

Would that mean we have to make 4 different DMZ? One per VOIP device?

0

• 

  Michael Bierman

  • March 17, 2022 15:53

  As far as I know, you can’t. DMZ = every port that hits the WAN gets sent to this IP. Obviously, you can't send every port to two or more computers. 
  
  if you have multiple public IPs then I think this is doable. Otherwise you need port forwarding. You could put the VOIP devices in a VLAN.

   

  https://forums.techguy.org/threads/dmz-for-3-computers.760700/

  0

  Comment actions Permalink
• 

  Rich T.

  • March 17, 2022 18:37

  Can you go to the "Traffic from the Internet" Rule, Devices, and set the VOIP devices to "Allow"? (Not sure this works, but worth a try).

  0

  Comment actions Permalink
• 

  Michael Bierman

  • March 17, 2022 18:55

  @Rich yes you can allow all traffic from the internet that way. I don't know if for this application there needs to be unique WAN IPs or not. 
  
  Personally, I wouldn't consider doing this unless the devices were on a separate LAN or VLAN. 

  0

  Comment actions Permalink

Please sign in to leave a comment.