SunQuest
           Networking Help
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationNetworking Help

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now!
  #1  
Old May 10th, 2004, 07:51 PM
zend zend is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 3 zend User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
2 Static ip's and wanting to have both external

Ok, i have speakeasy dsl(resller of covad) i have 2 static ip's and here is my setup:



DSL Modem--linksys router4port--24 port switch---computers

Im trying to set an ip for my router and have it nat all that i put behind it as far as the ip goes, and i have 1 seperate machine i want with a different static ip. The DMZ only allows one machine on the internal network(192..) to be translated to the routers ip. I want mine to totally bypass this, but i cant seem to accomplish this.....i tried hooking the modem and router straight through the switch and it got stuck in a loop. Im trying to find a new router that can accomplish this......let me make it more simple what i want:

DSL Modem
|
|
router (internet ip 1)
| |
| |----------------My seperate host (internet ip 2)
|
|
machines behind routers internal ip(192...)

Any ideas on more advanced routers without going into cisco/too expensive?

Reply With Quote
  #2  
Old May 10th, 2004, 10:31 PM
juniperr juniperr is offline
network dude
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Dec 2003
Posts: 1,679 juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 6 Days 21 h 55 m 2 sec
Reputation Power: 85
get a cisco PIX 501. will do that and more.

Reply With Quote
  #3  
Old May 11th, 2004, 03:29 PM
zend zend is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 3 zend User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
I dont want to get into cisco/expensive, im aware that the pix 501 can do that, but i dont need all that it can do i just want to use 2 static ip's.

Reply With Quote
  #4  
Old May 11th, 2004, 04:13 PM
juniperr juniperr is offline
network dude
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Dec 2003
Posts: 1,679 juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 6 Days 21 h 55 m 2 sec
Reputation Power: 85
you can get a PIX 501 10-user for 200.00 on ebay or 350.00 new, but the alternatives that can do static NAT would be netopia or 3com about 250.00 brand new.dont know on ebay cause I wouldnt ever buy one hehe, or build a linux box.
what you are trying to do is called static NAT ( one-to-one address translation ) so look for that when looking for routers that are cheap. Dont be confused with what DMZ means to cheap router manufacturers (basicly to them it means no firewalling tottal port forwarding). they also bucher NAT which is a one-to one IP address translation, but really what they are doing is PAT ( port address translation ) which is many ip addresses translated into one address. And no PAT is not a cisco term please refer to the RFC for NATing.

Last edited by juniperr : May 11th, 2004 at 04:27 PM.

Reply With Quote
  #5  
Old May 14th, 2004, 07:17 AM
rais rais is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2004
Posts: 24 rais User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 34 sec
Reputation Power: 0
You Can Still Achieve This Using LinkSys + a Small Hub

I dont understand when you say got into a loop. You can still do what you want using a four port hub or a switch, given your two static IP addresse are in the same subnet as your default gateway.

After the modem you can put a small 4-port hub. To this hub connect the router and the machine with the other static IP address. This way one of the machines will totally bypass the router. You may want to put a firewall on his machine to secure it, if necessary.

Hope this helps.
The Network Department

Reply With Quote
  #6  
Old May 14th, 2004, 09:02 AM
dbasnett dbasnett is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2003
Posts: 107 dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 10 h 11 m 43 sec
Reputation Power: 5
You need two small routers.
Attach the second router wan/internet port to a port on the first.
Attach the PC you want to be static to the second router.
Setup the first router to assign a fixed DHCP address based on mac address of the second router. This will make it static. You can then use port forwarding.
In the second router assign a fixed DHCP address based on mac address of the PC.

Reply With Quote
  #7  
Old May 14th, 2004, 09:53 AM
rais rais is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2004
Posts: 24 rais User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 34 sec
Reputation Power: 0
Zend,

I just check one of my SMC routers and it supports multiple public IP addresses to be used by your LAN.

Refer to this URI:
SMC Router Manual
Page # 48 of this document (PDF shows page 56), under 'Address Mapping' section.

I believe your Linksys supports this feature as well.

Thanks.
The Network Department

Reply With Quote
  #8  
Old May 14th, 2004, 10:44 AM
juniperr juniperr is offline
network dude
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Dec 2003
Posts: 1,679 juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 6 Days 21 h 55 m 2 sec
Reputation Power: 85
Quote:
You Can Still Achieve This Using LinkSys + a Small Hub


Not sure if that would work as most DSL providers (actualy all that I know of) use PPPoE and the device that sets up the PPPoE tunnel ( the router or PC) will actualy get its IP via DHCP when PPPoE authentication has been accomplished which is isually the first or last address of the block they assigned staticly so im not sure putting a device outside the pppoe tunnel will communicate through it which is why I didnt mention it. (hope that made sense?)
I wont even comment on the two small router answer.

side note: sonicwall can do what you want also. Im not very familiar with the new linksys routers you would have to look at static NATing in the documentation.

Last edited by juniperr : May 14th, 2004 at 10:49 AM.

Reply With Quote
  #9  
Old May 14th, 2004, 10:53 AM
TechSoEasy's Avatar
TechSoEasy TechSoEasy is offline
Way too easy!
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 5 TechSoEasy User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
I haven't tried this... but what about using the Port Range Forwarding screen in the Linksys Router? Using the range of 1 - 65535 pointing to that one PC.

If you truly want that PC to be open (although it'll make the entire network open).

I still think the better alternative is to buy cheap 4-port router... there's tons of them starting at less than $20 now:

http://pcworld.pricegrabber.com/sea...0&sortby=priceA

Reply With Quote
  #10  
Old May 14th, 2004, 12:47 PM
dbasnett dbasnett is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2003
Posts: 107 dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 10 h 11 m 43 sec
Reputation Power: 5
Zend - Are you trying to expose one device(web server, mail server) to the internet?

Reply With Quote
  #11  
Old May 15th, 2004, 10:57 AM
juniperr juniperr is offline
network dude
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Dec 2003
Posts: 1,679 juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 6 Days 21 h 55 m 2 sec
Reputation Power: 85
Im just gonna take a stab in the dark here by reading the first post but I think he wants to use both of his public addresses. why? probably wants to have two servers that can be accessed from the internet. to do this you need a router that can accept more than 1 IP address on the outside interface or set the server/pc outside the router ( not sure if the second option is possible with DSL/PPPoE).
look at sonicwall, cisco pix, SMC, 3com, netopia and look for one that will do PPPoE and static NATing.

Reply With Quote
  #12  
Old May 15th, 2004, 11:28 AM
dbasnett dbasnett is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2003
Posts: 107 dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 10 h 11 m 43 sec
Reputation Power: 5
that is correct if the servers are the same i.e. two web servers or two mail servers. if they are different he doesn't need two PUBLIC ip addresses

Reply With Quote
  #13  
Old May 16th, 2004, 12:37 AM
zend zend is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2004
Posts: 3 zend User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
juniperr got it right there, i want 2 static ips out on the internet, but i want most of my home to be behind one(nat) yet still be able to dmz a server through, and use the other ip for work/server purposes. Im not using pppoe its just a static ip config. And in regards to all the peopel suggesting hub configs and two routers.....anything behind the linksys router will get converted to the ip on the linksys router, and you can only nat/pat to ips on its own local range(192...)

Thanks for all your help so far

EDIT: right now im experimenting with a coyote linux firewall/router setup, but im having a little trouble with the 2 ip config and dmz. I would like to use something that doesnt consume much power either, like standard routers take about 20 watts i think vs a whole pc.

Reply With Quote
  #14  
Old May 16th, 2004, 07:28 AM
dbasnett dbasnett is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2003
Posts: 107 dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level)dbasnett User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 10 h 11 m 43 sec
Reputation Power: 5
It doesn't sound like you have two servers. It sounds like you have a server and PC's.

Your statement about two routers is incorrect if you are suggesting that only devices on the router attached to the internet can to the internet.

internet --- router --- router --- device
....................|
...................PC
In this config, device, has access to the internet, and could have a dedicated port that other devices on the internet can access. PC can access device and internet.

OR You could block device being seen on the internet. etc. etc. In the example you could have as many router(s) as you want.

Last edited by dbasnett : May 16th, 2004 at 07:32 AM.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationNetworking Help > 2 Static ip's and wanting to have both external


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump