Need help setting up IP routing to SBS 2003 with Public LAN/WAN

Posted on 2009-07-15
Last Modified: 2012-06-21
I received static IP addresses from AT&T.  They gave me two sets, a public WAN and a public LAN (these are obviously not the real IPs):
Subnet Mask:
Useable IPs:
Subnet Mask:

The office consists of a DSL modem ->Linksys WRT54G router -> SBS 2003 server ->workstations
Additionally, the SBS 2003 server is a mail server with an MX record and linked to a LAN IP.  I need to be able to see the server from the Internet (ping it, send mail, remote access, etc).  SBS has a dual NIC and from what I understand is supposed to be setup with one internal NAT network and one external ISP network.

Diagram below is how I have it setup now.
My problem is that I cannot see the server from the Internet.  I need the Linksys router for office wireless connectivity (printers, notebooks, etc).  AT&T will not allow the LAN IPs to be on their network and they control routing from the 89.x subnet to resolve to 79.x.  I can ping both 89.x IP addresses as well as the Linksys LAN side (  But, even putting the SBS server IP ( in the DMZ does not allow me to see it from the Internet.  Port forwarding also doesnt work.  Am I missing something?


Question by:jetcosys
  • 5
  • 3
  • 2
LVL 13

Expert Comment

ID: 24863400
First you need to put the DSL modem in bridged mode so that it forwards all traffice to the Linksys. My guess is the modem is doing NAT and probably has a built in firewall. your DSL provider can help you get it into bridged mode.
Then setup the LInksys with your public IP of 142 or 143, the subnet of and gateway of 141.
Once you have internet access create port forwarding rules for your needed services to the sbs server.
Keep in mind the Linksys is a home router and not intended for business. I would purchase a business class firewall.

Accepted Solution

Citacomp earned 250 total points
ID: 24864159
If you need the Linksys router for office printers, etc., why don't you have it on the LAN side of your SBS?  This should take care of your problems.

If you need to keep the Linksys at it's place in the chain for some reason, then I would think that static routing might need to be configured on the device.

Author Comment

ID: 24864901
Thanks for the quick responses!

murgroup: The modem is in bridged mode already and must be set to the WAN IP (141), so the Linksys WAN side is set to 142 and the Linksys LAN side to the 246.  That part all works as expected.  The forwarding of ports doesn't work however.  I can ping 246 and have ports forwarded to 245 (SBS Server), but the traffic never relays.  You're right, I should use a biz class router, but for a small office, this is fine.

Citacomp: interesting idea.  I actually never thought of that.  Do you know if this Linksys can be a router instead of a gateway and forward DHCP from the server?

Thanks for the help,
LVL 13

Assisted Solution

murgroup earned 250 total points
ID: 24865109
Yes you can use the Linksys for wireless only. just plug it into your network and make sure it's on the same subnet at the internal LAN.
I've never heard of a Public LAN being assigned by the ISP. Normally you choose what your internal range is going to be ie
If the modem is in bridged mode your setup in the linksys would look like:
Static IP:
DNS: your public DNS servers

LAN IP: or whatever.

Then in SBS you would only use one NIC and it would have an IP of say:

Run the Internet connection wizard and tell it to use only one NIC. The defualt gateway of, your external dns servers and finish the wizard.
Everything should work fine if your modem is in bridged mode. If not the modem could be your issue.
Also I'm not sure if AT&T uses PPPoE or PPPoA. That can cause issues and the router should support PPPoE.


Author Comment

ID: 24865208
Ok, will move the Linksys and see what happens.  I've never heard of the ISP giving two IP ranges either, but it's what AT&T did this time.  The reason I need the Public LAN IP is because the server is an MX and to properly register the reverse lookup in DNS, I had to have AT&T assign the IP.  I had it setup as you described above exactly but too much mail has been non-deliverable due to the reverse DNS not being the address.  It's a mess man.
Superior storage. Superior surveillance.

WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

LVL 13

Expert Comment

ID: 24865270
Strange, AT&T should control RDNS for your public IP and it should be an easy fix on their end. I have many many clients setup like that and the ISP always controls RDNS. Good luck with this issue.

Expert Comment

ID: 24865360
A further note about the Linksys.  When you connect it to your LAN side, don't plug anything in to the WAN port and make sure DHCP is off (assuming that the SBS is serving DHCP).  I suppose it'd be possible to use the WAN port if you turned of NAT, but instead of messing around with the configuration it's easier to just not use it.

Is your SBS Premium or Standard?

Author Comment

ID: 24865381
Yah, I already disabled DHCP on the router since SBS is issuing DHCP and will plug in on the LAN side only.  SBS is standard version.  Thanks for the advice!  :)


Author Comment

ID: 24874724
Ok, I removed the Linksys router which did not work because my server must have an IP address on the public LAN side (79 subnet) and the DSL modem is on the WAN side (89 Subnet) which makes the gateway on the different ip segment.  Then, in looking at the options on the server NIC, I remembered that you can multi-home a single NIC.  I used the advanced TCP/IP settings and assigned the server NIC an IP address from 79, gateway from 89...then in the advanced area, an IP from 89 and the gateway from 79.  Not sure why or how, but this configuration works.

Author Closing Comment

ID: 31603911
Split the points evenly between the two experts as both assisted with advice on a solution I ultimately determined.

Featured Post

Free camera licenses with purchase of My Cloud NAS

Milestone Arcus software is compatible with thousands of industry-leading cameras for added flexibility. Upon installation on your My Cloud NAS, you will receive two (2) camera licenses already enabled in the software. And for a limited time, get additional camera licenses FREE.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Dell Poweredge Server - Fault detected 8 83
Microsoft  Partnership 1 68
SQL Connection (Error 18456) 14 59
Certificate Renewal Question 3 41
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now