[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Routing Configuration

Posted on 2006-05-24
5
Medium Priority
?
267 Views
Last Modified: 2010-03-19
Hello
 
I just want to get a second oppinion on a configuration I am going to be doing soon. I am using Windows servers and WAN via external service. I believe I am doing right but I just want to make sure as it is very important. At the moment we have a main site on 10.0.1.x. There is another site we are taking over which is on 192.168.0.x locally. The server which is setup there is on 192.168.0.x but I want it to also be on 10.0.9.x when I get a WAN link up so computers on the 192.168.0.0 range can access 10.0.1.x range...is this how I would set it up:
 
First NIC on server:
============

IP: 192.168.0.100
Mask: 255.255.255.0
Gateway: 192.168.0.1 (internet router, for local internet)
DNS: 192.168.0.100

Second NIC on server:
==============

IP:10.0.9.10
Mask: 255.255.255.0
Gateway: none
DNS: none (not needed...using IP addresses directly)

Windows RRAS Static Routes
===================

Interface: First NIC
Destination: 192.168.0.0
Mask: 255.255.255.0
Gateway: 192.168.0.100

Interface: First NIC
Destination: 10.0.9.0
Mask: 255.255.255.0
Gateway: 10.0.9.10

Interface: Second NIC
Destination: 10.0.9.0
Mask: 255.255.255.0
Gateway: 10.0.9.8 (WAN Router)

End Result
=======

I am hoping by this that all computers at the other site that are on the 192.168.0.0 will have access to devices over the one (e.g. a server in 10.0.1.x range)....Actually would the RRAS settings be this in that case?:

Interface: First NIC
Destination: 192.168.0.0
Mask: 255.255.255.0
Gateway: 192.168.0.100

Interface: First NIC
Destination: 10.0.0.0 <===== CHANGE
Mask: 255.255.0.0 <===== CHANGE
Gateway: 10.0.9.10

Interface: Second NIC
Destination: 10.0.0.0 <===== CHANGE
Mask: 255.255.0.0 <===== CHANGE
Gateway: 10.0.9.8 (WAN Router)

Thanks
0
Comment
Question by:dcarrion
  • 4
5 Comments
 

Author Comment

by:dcarrion
ID: 16749478
oh yes and of course this route for internet

Interface: First NIC
Destination: 0.0.0.0 <===== CHANGE
Mask: 0.0.0.0 <===== CHANGE
Gateway: 192.168.0.1 (WAN Router)
0
 

Author Comment

by:dcarrion
ID: 16749480
oops i mean

oh yes and of course this route for internet

Interface: First NIC
Destination: 0.0.0.0
Mask: 0.0.0.0
Gateway: 192.168.0.1 (Internet Router)
0
 
LVL 6

Accepted Solution

by:
nexissteve earned 1500 total points
ID: 16749555
Normally it isnt a good idea to use windows servers for routing over a WAN.

Are you firewalling the WAN traffic?
Are both end points trusted networks?
Do you run managed switches? Are they layer2 or layer3?
Do the people providing the WAN control the end routers? i.e. are they provding the service via ethernet?
The people providing the WAN connection will reserve a set of addresses for their own use - you must make sure your two networks do not fall into the reserved set of addresses.

Easiest way to configure the two networks -

Have the provider configure the routers.

Add a route on your internet router. (or change your gateway to a different router )

ip route 192.168.0.0 255.255.255.0 "ip address of providers router" permanent ( obviously this is the local address of the providers router )

For the other end do the same.

ip route 10.10.1.0 255.255.255.0 "ip address o providers router" permanent

The provider will have to add a few routes in on his routers as well. Make sure he doesnt utilise RIP as you may run into problems when you add services down the track.

That should about do it. This way your not relying on the windows servers to carry out routing. You wont have to utilise a second network card. If a windows server goes down then the network will continue to function.

Good luck



0
 

Author Comment

by:dcarrion
ID: 16756560
Thanks for that

no managed switches
service controls end routers
i'm assuming the provider are firewalling WAN traffic

I forgot to add that the Windows server would only be temporary as eventually we will only be using the CISCO routers provided by the WAN provider. However I might use the sites internet router to do the same thing like you said:

on internet router
==========

add route with destination 10.10.1.0 mask 255.255.255.0 gateway 10.0.9.8(wan router). And at our end destination 10.10.9.0 mask 255.255.255.0 gateway 10.0.1.8 (wan router). That sound okay?  
0
 

Author Comment

by:dcarrion
ID: 16757198
Would I need NAT on the internet router to translate 192.168.0.0 addresses to 10.0.9.0?
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question