If I've been issued 2 IPs by ISP (static IP & Gateway), and subnet mask is .252 would the syntax be [staticIP]/30 (ie 30 because of 252 subnet?) Do I also need to add gateway IP as trusted?

Hi, In your example you only have 1 public IP address that you are authenticating from (that you want to be trusted), so you would use [staticIP]/32. You aren't connecting from your gateway IP address, which is why I said you only have 1 public IP. For example, let's say your public IP address is 50.141.72.63. You would enter 50.141.72.63/32 If the above was useful, please click Accept Answer . Thanks. -TP

Whats the correct syntax for MFA Trusted IP (subnet mask .252)

Accepted answer

TP 98,086 Reputation points

2023-04-04T21:18:31.0633333+00:00

Hi,

In your example you only have 1 public IP address that you are authenticating from (that you want to be trusted), so you would use [staticIP]/32. You aren't connecting from your gateway IP address, which is why I said you only have 1 public IP.

For example, let's say your public IP address is 50.141.72.63. You would enter 50.141.72.63/32

If the above was useful, please click Accept Answer.

Thanks.

-TP
Please sign in to rate this answer.

1 person found this answer helpful.
Jenny Council 25 Reputation points

2023-04-05T04:19:04.5333333+00:00

Thanks! What is the purpose of the public Gateway IP that they issue? I actually have multiple sites with the same setup.
On some the ISP Issued Gateway IP is 1 numeral separated from the IP (eg .15 .16 with a subnet mask ending .252 ...to indicate 2 addresses?) On others the Gateway IP is farthur away numerically (eg .65 .91) with a subnet mask ending .192 (so /26 = 64 addresses... I assume to span the difference between 65 & 91?)
I've never delved into this level on IP addressing, so just trying to fugure out if any of that has any significance for me in practice?

TP 98,086 Reputation points

2023-04-05T13:53:47.16+00:00

The gateway is the address that the device sends to when the destination isn't in the local subnet.

For example, when a network device needs to communicate with a host on the public Internet, it will send the outgoing packets to the default gateway IP address and that device forwards them to another router, which forwards to another router, etc., until it reaches the destination. That's simplified description/scenario, but gives general idea.

Jenny Council 25 Reputation points

2023-04-05T14:52:11.8566667+00:00

So after a device passes info to the LAN gateway IP it is routed out to the WAN through that external gateway IP? Then how come the outside world doesn’t see it as originating from that external gateway IP (vs the static IP address)?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Whats the correct syntax for MFA Trusted IP (subnet mask .252)

0 additional answers

Your answer