I am performing some work for a small business that has no IT staff. They contract out work from time to time for their IT needs.

What they would like to do is grant access to an AIX 5.3 server for some external customers to perform some application testing. They are running Active Directory and do not want to set up temporary users for the testing purpose. They don't want to accidentally allow users access to other resources other than the AIX server. They are running a T1 line that comes into a switch. They have asked me to provide access to the server. I have some admin experience but only at a beginner to intermediate level. I am looking for a very good option. Here are some of the ideas I have.

1) Attach the server in front of the firewall by connecting it directly to the switch. (Not sure if I can get a static IP though. Not sure what the T1 line allows) I know they have at least one static IP from the T1 provider.

2) Keep the server behind the firewall and use some kind of software like Itivity to grant access to server. But would still have to set up AD accounts.

3) Have them purchase cable and set up a separate network that does not tie into AD. However, I am not sure how I would grant access from the internet, since the IP will be behind the firewall and be a 192.168.x.xx number.

4) Purchase another router and create a secondary network and place the server into the new network. Still don't know how I grant access from the internet because of the 192.168 ip address.

The company wants to keep the server secure as well as proprietary information on other servers. They are very hesitant about setting up external accounts in AD and would prefer direct access to the server that does not involve AD.

Any help would be greatly appreciated it.