The srvers in the DMZ must have 2 IP addresses?

[Former Member]

I have noticed that many servers in the DMZ have 2 IP addresses.

Is this necessary? If so, why?

Will give points. Thanks!

[Former Member]

HI laura,

The server in DMZ has to have two IP addresses.One for internal access and other for external access i.e. outside the companies secured network.The server has one Private IP address(Internal) and a Public IP address(external) through which it can be accessed through internet.

Consider this ,you have developed a WebDynPro application on Netweaver 04s and want that it should be accessible through internet then how will you do that.

For this you will have to move the server to DMZ .The URL generated for you application will be some thing like(if you are using HTTPS)

<https://FQDN:port/your application name>

Now you FQDN is known with in your corporate network and not outside the network and no one will be able to access it.Now you IT team will generate a URL for the above URL with an IP address which is public and can be accessed through internet and will map to you internal private IP address.Therefore the end users can access the application as a normal webapplication.

This was one scenario.You can use the DMZ server for other cases as well by opening the corresponding port for example for FTP you can open the port 23 for this application to be accessible in internet

Reward points for help ful answer.

Best Regards

Amit