Comcast cable static IP / NAT / SMC modem / configuration basic questions

working with a comcast smc modem, I have some questions.  The modem they supplied has 4 'lan' ports on it.  Our network (firewall to a dual nic sbs box to the rest of our network) was plugged into port 1, 2 other networks were in port 2 & 3.  our firewall and the other networks were getting 10.1.10.x addresses from the smc (NAT), and we shared a single public IP.

Now we have a block of 5 static IPs.  comcast says the gateway is .18 and our block of IPs is .13 - .17.  We want our network to have it's own IP.  I entered the .13 info into our firewall and it gets out fine.  And using that IP, we can get in also with RWW.  

Comcast wasn't much help in helping me understand....  
so the other static IPs aren't being used right now, right?
those other networks will still keep getting nat addresses and a public ip of .18, right?
the key question:  the SMC box is set for NAT, but yet we are connecting to it with a public IP on the LAN side. That's OK?  It passes all traffic for .13 right to our firewall?  No rules are needed?  But anything else comes into .18 and you need rules to route inbound? (The smc is both NATting and simply routing?!  Neat!

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Some of the DSL modems I am seeing lately include their own router and hand you off NAT'd addresses as you observe. I talked to Bell Technical support in Toronto about one of these in a highly tehcnical environment and he said you could set the modem to bridge the router and hand off its own external IP. If you were able to do that, you could put a small fast switch out from the modem, and then you should be able to access all the IP's. I do exactly that for one client, although the modem does not include a router and only has one output. Ask to speak to the next level up technical support at Comcast (I know they are cable and I am speaking about DSL, but the basic concept is the same).   ... T

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jerry SolomonNetwork  AdministratorCommented:
Comcast's modem/routers are usually either/or.  It is either set to bridge, and anything plugged into the lan ports needs the correct static public IP, or it is set to NAT, and everything plugged in gets a 10.1.X LAN IP.  If comcast sold you a block of 5, and you successfully set your firewall to use one, then the other networks should also need their public IPs programmed in to work properly.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.