Link to home
Start Free TrialLog in
Avatar of liminal
liminal

asked on

setting up RWA on a different IP to my Router IP

Hi there, I’m trying to set up a WHS server and an SBS server at home. I have a few static IPs from my ISP, I’m using the router IP for the SBS server and one of my other IPs for the WHS. But I see no way to set up the port forwarding for this. I.e. anything coming in on 203.xxx.xxx.xxx goes to 192.168.xxx.xxx and everything else goes from the router IP to 192.168.xxx.xxx

Does that make sense.

Im running a NB6Plus4Wn Router… My work Firebox does this kind of NAT easily.
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

It looks like that router only supports a single public IP.  You want to route two public static IPs, you'll either need a business class router or TWO cheap home routers and a small network switch.

In the latter configuration, you would connect:

ADSL --> 4 port Switch -->Router for WHS --> WHS (Default Gateway is Router for WHS) ---\
                        |                                                                                                                  LAN Switch --> LAN Computers
                        +---------->Router for SBS --> SBS (Default Gateway is Router for SBS) -------/

you would disable DHCP on both routers and use DHCP on the SBS server only.
Avatar of liminal
liminal

ASKER

The part im lost @ is it only supports one puplic IP... how is introducing a second router going to change anything if it cant handle the IP anyway??

The one thing i do have is an old firebox @ work. Could I use this? although again if NB6Plus4Wn only know about one public IP how does it know to route the address into the network??

or am i missing some point lol
Your missing the point.

Watchguard Firebox?  Yes, that would probably work fine.  How many "average" homes have a need for a second IP?  Why would vendors include second IP support on "average", "cheap" home routers?  Its not economical and you'd have some people trying to "cheap out" at the office and instead of getting a device that would be approrpriate for the office, they'd get something cheap like that (It's insane how many offices I go into with LINKSYS home routers as their router.  Absolutely insane).

That said, the diagram I offered explains how the second router solves the issue.  Put simply in words, Internet connects to a small switch which then connects to each router.  Each router is given it's own public IP.  the WHS is connected to one, the SBS to other.  Then you forward ports to each.  Now to prevent IP conflicts and ensure everything can talk to each other, each router MUST have DHCP disabled, be configured with it's own unique IP (192.168.1.1 and 192.168.1.2, for example (though I'd use an entirely different network - 192.168.42.x, for example).  Then each you can connect each router to each other (LAN port to LAN port).  That ensures there is a path for all devices.  The SBS server is configured with DHCP and defines ONE gateway as the default (the other isn't used EXCEPT on the WHS box.

There may be firmware updates, or the ability to run an open source firmware on one of these netcomm devices - but I've never heard of them (they aren't sold under that name in the USA and if they are, they are NOT popular).  

As an alternative, you could make another PC - or VIRTUAL PC and set it up with two NICs and run Untangle on it - that could be your router - that's what I'm doing at my office.  www.untangle.com (there's a "Lite" (free) version).
And of course, you could also try running the various services you want to forward on different ports (but given that that's not a best practice, it's not something I try frequently and don't recall how, (in a detailed way) you would do that or what kind of other problems you might face.
Avatar of liminal

ASKER

Hi thanks so much for your help… really is appreciated.

I spent the last few days trying to get the Watchguard Firebox to work. It’s an old X20e. but it’s just so slow. What I’m looking @ doing is just trying to find a new router that does what I need. I’m in AU and we have a brand called DrayTek that does it but they seem to be imposable to find. Any suggestions on a common brand that I would be safe going with?

Once again thanks for your help its very much appreciated.
DrayTek seems popular OUTSIDE the USA - I've heard of them, but only through posts here and usually from people in Europe or Australia.  Unfortunately, nothing cheap other than LinkSys (I assume you have them there.... but personally, I wouldn't recommend linksys to anyone.  Horrible in my experience.

If you want/need to do this cheaply, I'd suggest you consider a VM or even an Atom processor based system running Untangle.  I've been running it about 5 days so far and it's worked great for me. I ended up with a question about the spam filter and my exchange server... but their forums were REALLY helpful in resolving it (employees participate in the forums).  And since MOST business class routers today are linux based anyway, you're not really doing anything terribly unusual - even Watchguard is supposed to be releasing a VM version of their firebox appliance.
Avatar of liminal

ASKER

I actually created a VM and installed untangled. Installed two virtual NICs (maybe where I went wrong) and it just killed my network. Nothing would work until I killed my VM server. I set it up as a transparent layer... Maybe that was it, not sure.

But im thinking if I get one device that does everything. Wifi, Multi-Nat, and has gigabit ports... its just going to make it all so much better.

So LinkSys does it... Do all models do it?
ASKER CERTIFIED SOLUTION
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of liminal

ASKER

LOL ok ok, im going to do it... Just got a gbit router and a new network card... just going to use the Netcomm as the ADSL modem... let you know how I get on.

Thanks Lee
Avatar of liminal

ASKER

OK did it and its working pretty awesome. Except I dont seem to be receiving mail (sending is ok)

Also haven't set up the other IP, see how hung over I am tomorrow ;)
Avatar of liminal

ASKER

I almost have it working... but im getting this error

SSL connection error
Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.
Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.

Have you seen that before??

its for my WHS server
Avatar of liminal

ASKER

Very helpful guy