Extend usable IP address range (external IP)

Posted on 2008-10-28
Last Modified: 2012-05-05
    I am asking this question on behalf of our client
They have 2 offices (HO and a branch office) and are currently using Class 'C' external IP range for all their PCs and servers (They dont seem to know the reason why they are using external IP range) ( to SNM : for HO and to, SNM: for their branch office. (the two sites are connected using fibre connection)
         The DC is Windows 2000 advanced server. All servers are assigned Static IP and based in HO. DHCP  scope is used to automate the IP Addressing in client side. DHCP and DNS services are running.on DC.  A exchange server is running for email purpose. HO servers includes domain controllers, PC, Teklogix,Hand Punch Machine,cameras & printers.As their network is expanding, they want to get more IP address (atleast another 254 addresses)  
AS  they are 24 x 7 hrs operational, they would like to accomplish a solution with minimum down time and that gives them Atleast another 254 IP address. Could some one explain in details what needs to be done to complete this project  smoothly.?  At the moment they have a layer3 switch  and would like to do them selves rather than doing config changes from ISP side


Question by:ExchangeGroup
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2

Expert Comment

ID: 22821281
Oh god.  You have nightmare on your hands.  Without changing anything, they are going to need to put in a router and create a new internal class C segregated from their current network and then route that back to the current network.  Now, that said, smack your client upside the head and propose that they Rebuild the entire network using internal address space and then get rid of the Full Class C for the External range.
LVL 26

Accepted Solution

Fred Marshall earned 500 total points
ID: 22821734
Unless the DC arrangement creates some unforeseen difficulties, here is an assessment and a probable solution:

The client is using a single subnet and has simply divided the two office address spaces by convention.  All computers throughout are on the same subnet.  So that keeps it as simple as can be.
The client has chosen a public IP address space unfortunately - but this may not matter all that much.
You don't tell us how the internet connection(s) are made or if there are any actual "public" servers in this operation.  Actually I'd have serious concerns if there *IS* an internet connection - how do you separate the "LAN" out from the outside world in that case????  How do they firewall???

Here is what I'd do - *at least as a thought experiment*:
Select the address range /  That gives them plenty of private addresses.
If *everything* is set up to get addresses via DHCP then that makes it pretty simple.  Look out for the few hosts that have manually entered IP addresses.  In fact, you may want to check this out first to confirm DHCP is being used in critical hosts or in all hosts.

Then, when you're ready, change the IP addresses of the DHCP servers and reboot all the computers they serve (rebooting is simpler to describe than other methods that might be used).
Other than My Network places, the connectivity should be immediate.
My Network places could take a while to figure itself out.
If you're using WINS or some such then you may have to pre-configure tables to suit the new environment before making the switch.  
This would be the area to watch ... how do the hosts get name service for the network?  You don't want to "break" that function.  Presumably the DC takes care of this for you.

When done, all the computers can talk to each other as before - just with a new set of IP addresses.  

What remains to discuss is the internet connection.  Since that's not described then one might only imagine......

The simplest thing to do is to introduce a router that will handle the traffic and plug it in between the internet access point (modem, fiber, whatever) and the LAN.  Have NAT turned on (the usual default) and set the LAN address to match the LAN subnet address space.  You will probably have to manually set up the LAN address as it's a bit uncommon for routers to take LAN addresses via DHCP.

Much has not been said but this would seem to be a roadmap.


Expert Comment

ID: 22822130
He mentioned that they do have Exchange, so there is an Internet connection which is the scary part.  This means that the Defualt gateways and any static routes would need to be changed as well as the firewall/possible NAT configurations (please tell me there is a firewall).  You plan is sound, but as far as the static addresses go for PCs and Servers (exception Active Directory Domain controllers -- if any) would be to Register the MAC Addresses in DHCP  as reservations that never Expire and change all the servers to DHCP.  This keeps the addresses centralized in a nice database for management and allows for easy moving/re-IP of the systems.  I know a lot of people frown on using DHCP for servers but it works great, just not your AD boxes or clusters.... Just set them manually and still put the addresses in DHCP.

Author Closing Comment

ID: 31510709
I haven't had the full information so nothing to blame the expert. I handed over the suggestions to my client and they will decide what needs to be done.

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Large and small networks have one same need, Service monitoring. Service monitoring consists of watch services of the several servers in the network. To monitor means that the administrator will receive an alert when a service is down or it's state …
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question