Solved

Computer lab can not access the internet.

Posted on 2004-10-10
8
306 Views
Last Modified: 2010-04-10
I have a network that uses 10.0.0.x for computers in a lab environment and 192.168.0.x for all of the internal employees. The 10.0.0.x computers can ping any of the 192.168.0.x computers except for the gateway which is 192.168.0.1. I wan to get these 10.0.0.x computers onto the internet but because they can not ping the gateway I can not get them onto the internet. Any suggestions on how I can get these computers to see the gateway and get them out to the internet. Thanks.
0
Comment
Question by:jmoody
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 12

Expert Comment

by:aindelicato
ID: 12273967
Please provde your LAN Layout.

Internet Source

Routers (with IPs)
Firewalls
Switches
Hubs


If you dont have a switch which supports VLANs , you can use a setup similar to this:

                                                                  |--- LAN Computers for 192.168.0.x
ROUTER 1 (WAN/ISP  LAN/192.168.0.1) --|SWITCH|
                                                                  |--- ROUTER 2 (WAN/192.168.0.2  LAN/10.0.0.x)
                                                                             |
                                                                             |--LAN Computers for LAB 10.0.0.x

0
 

Author Comment

by:jmoody
ID: 12274284
There is one router connecting to the internet and that is the 192.168.0.1. It is also the Firewall. Our switch does not support VLANs. We have a Windows NT 4.0 Server with two NIC’s that serve out the IP’s for the two networks via DHCP. Currently the 10.0.0.x computers use the server as a Proxy to get out to the Internet but it is under a heavy work load and the web and proxy services keep failing. I was able to by-pass the server and use the 192.168.0.1 as the gateway for the 192.168.0.x PCs but not the 10.0.0.x PC’s. Hopefully the diagram below makes some sense.


                                        SWITCH --------- to 192.168.0.x PCs    
                                         |
         192.168.0.x ---------| |
SERVER|----------------SWITCH--------ROUTER 192.168.0.1 ----------- INTERNET
         10.0.0.x -------------| |
                                         |
                               SWTICH ------ to LAB 10.0.0.x
0
 
LVL 12

Expert Comment

by:hkunnana
ID: 12274972
You can bypass the server for the 192.168.1.xx pcs because they are in the same IP range with the gateway, hence they can reach it. On the other hand, pc's in the range 10.0.0.x cannot see the gateway because it in different subnet.
What you need is to make the 10.0.0.x pc see the router 192.168.0.1

either
1-change (or add another) ip of the 10.0.0.x to be in same subnet as the 192.168.0.x
2- add another ip to router (sub-interface) in the range 10.0.0.x and define it as the gateway for the 10.0.0.x machines.

3- have another machine (or router device ) connect the two subnets (because directly the two subnets CANNOT see each other).
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:jmoody
ID: 12275392
The server is acting as a router as the two subnets can see eachother. But right now the 10.0.0.x can ping any of the 192.168.0.x PCs but can not ping the gateway at 192.168.0.1. Why is this?
0
 
LVL 12

Expert Comment

by:hkunnana
ID: 12275545
This is because the router itself doesn't know about the network 10.0.0.x  .
The ping command needs the both parties can reach each other ( If you try to ping any of the 10.0.0.x from ther router, it will fail)
You will need to define a static routing in the router to tell it ( in order to reach the network 10.0.0.x you will need to go through the gateway address <address of the NT server in the 192.168.0.x range>)

I don't know which type of router you have, so you will need to add the static routing command to the router "according to it's os" as follows


Network-to-reach   mask           go-through            
10.0.0.0                 255.0.0.0  192.168.0.serverIP

0
 

Expert Comment

by:cairnsfuture
ID: 12275553
do a route print and post, also do a tracert 192.168.0.1 at the command prompt on a workstation on the 192.168.0.x series and see were it is going.
0
 
LVL 12

Assisted Solution

by:hkunnana
hkunnana earned 100 total points
ID: 12275558
I would like to add, this will still impact on the performance of the NT server (as it will act as a router).
The better solution is to define another IP on the routers ethernet interface in the range of 10.0.0.x and define it as the gateway for the machines in the 10.0.0.x range
0
 
LVL 12

Accepted Solution

by:
aindelicato earned 400 total points
ID: 12280772
The (2) NIC approach is out dated and rarely used as routers and switches with VLAN capabilities are relatively inexpensive.

You can use a simple Linksys cable/DSL router to achieve the second subnet as listed in my diagram above.

That Linksys router will server DHCP addresses in the 10.0.0.x subnet while it's WAN port is that of a 192.168.0.x.  All internet traffic for 10.0.0.x will be natted thru that 192.168.0.x IP.

0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ASA NAT rule change 3 82
Exchange 2016 - not receiving mail 17 98
Network latency question 9 81
How do I enable VPN on server 2008 R2 19 56
Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question