See answers below......

Cheers,
Joe Dauncey

[EMAIL PROTECTED]
----- Original Message -----
From: "pbb jhe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 16, 1999 4:39 AM
Subject: Secondary IP


> Calling assistance of security gurus:
>
> Assuming a router and two servers (A & B) are connected via a shared hub.
Ethernet interface of the router is configured with primary & secondary IP
(both different subnets). Meanwhile server A is located in one subnet while
server B is on another subnet.
> a. Can the above setup work?

YES

> b. With the above configuration, will there be two route entries in the
router and other routers that the router in this case is communicating to?

There do not need to be any route entries on the router for it to route
between the two servers.
It will need routes on it pointing to other routers, or a default route at
the least. It all depends on your configuration.

> c. Is NT, Solaries, OS/2 and Linux supports secondary IP?

Linux does (it supports anything !!) You can actually use Linux as a router.
I don't know about the others.

> d. What is the performance impact (CPU,memory, processing speed) to router
and server? Any workaround ?

I don't know what the utilisation is, but there is no additional impact to
any of them. A router is meant to route, so to regard it as 'impact' would
be a misnomer. How many packets it can chug through depends on multiple
variables. Same goes for the server. There is no workaround because there is
nothing to workaround.

> e. Will the above setup protect server A from
> accessing server B?

No, there is zero security because the router will just route between them
(unless the servers have something else set as their default route, and even
then the security is highly dubious and very weak).
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to