I have a 192.168.1.0/24 subnet used for private clients which is NAT'd to a single public IP Address on WAN1. I have another 3 public IP address which can be added as WAN IP Aliases and each one needs to be NAT'd to 3 different Internal Servers on Subnet 10.0.0.0/24. At the moment i have a choice of maintaining the same subnet 192.168.1.0/24 for the DMZ hosts, applying the public IP addresses to the servers as True DMZ hosts or Having a totally different subnet for the DMZ hosts and using NAT for basic security. Can the latter be accomplished on a Draytek VigorPro 5510 with dual wan interfaces, that way i can plug my DMZ switch to the Second LAN interface and segregate the networks further?
