Whether two same network segments can be configured for the USG6000

1

Yes.
This configuration can be achieved by means of NAT. However, this configuration is not recommended.

Other related questions:
Whether the USG6330 supports two consecutive same network segments
Yes. This can be implemented through NAT. However, this is not recommended.

Can addresses on the same network segment be configured on different interfaces of an AR
Addresses on the same network segment cannot be allocated to interfaces on an AR. Interfaces on an AR can be configured with IP addresses on network segments that overlap. For example, an interface is assigned IP address 20.1.1.1/16. When you configure IP address 20.1.1.2/24 for the other interface, the system displays a message. However, the configuration is successful. When you configure IP address 20.1.1.2/16 for the other interface, the system displays a message indicating that the address conflicts. The configuration fails. The primary and secondary addresses of an interface can be on network segments that overlap, but must be different. For example, an interface is configured with the primary IP address 20.1.1.1/24. When you configure the secondary IP address 20.1.1.2/16, the system displays a message. However, the configuration is successful. The primary and secondary addresses of interfaces can be on network segments that overlap, but must be different. For example, an interface is configured with IP address 20.1.1.1/16. When you configure IP address 20.1.1.2/24, the system displays a message. However, the configuration is successful.

Whether the USG2000 and USG5000 support one-way configuration for the same network segment
On the firewall, the ACL can be used to block TCP packets to implement one-way configuration. However, this does not apply to packets of other types.

Can two network segments that cannot communicate with each other be configured for two network ports of the VCN3000?
No. There can be only one VCN3000 service IP address. The two service network ports can be configured to work in active/standby or load balancing mode and show the same service IP address.

Must the IP addresses of the two peer ends on FR networks be in the same network segment
The IP addresses of two peer ends have no need to be configured in the same network segment if both ends are both AR routers.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top