setting up RWA on a different IP to my Router IP

Hi there, I’m trying to set up a WHS server and an SBS server at home. I have a few static IPs from my ISP, I’m using the router IP for the SBS server and one of my other IPs for the WHS. But I see no way to set up the port forwarding for this. I.e. anything coming in on 203.xxx.xxx.xxx goes to 192.168.xxx.xxx and everything else goes from the router IP to 192.168.xxx.xxx

Does that make sense.

Im running a NB6Plus4Wn Router… My work Firebox does this kind of NAT easily.
liminalAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
It looks like that router only supports a single public IP.  You want to route two public static IPs, you'll either need a business class router or TWO cheap home routers and a small network switch.

In the latter configuration, you would connect:

ADSL --> 4 port Switch -->Router for WHS --> WHS (Default Gateway is Router for WHS) ---\
                        |                                                                                                                  LAN Switch --> LAN Computers
                        +---------->Router for SBS --> SBS (Default Gateway is Router for SBS) -------/

you would disable DHCP on both routers and use DHCP on the SBS server only.
liminalAuthor Commented:
The part im lost @ is it only supports one puplic IP... how is introducing a second router going to change anything if it cant handle the IP anyway??

The one thing i do have is an old firebox @ work. Could I use this? although again if NB6Plus4Wn only know about one public IP how does it know to route the address into the network??

or am i missing some point lol
Lee W, MVPTechnology and Business Process AdvisorCommented:
Your missing the point.

Watchguard Firebox?  Yes, that would probably work fine.  How many "average" homes have a need for a second IP?  Why would vendors include second IP support on "average", "cheap" home routers?  Its not economical and you'd have some people trying to "cheap out" at the office and instead of getting a device that would be approrpriate for the office, they'd get something cheap like that (It's insane how many offices I go into with LINKSYS home routers as their router.  Absolutely insane).

That said, the diagram I offered explains how the second router solves the issue.  Put simply in words, Internet connects to a small switch which then connects to each router.  Each router is given it's own public IP.  the WHS is connected to one, the SBS to other.  Then you forward ports to each.  Now to prevent IP conflicts and ensure everything can talk to each other, each router MUST have DHCP disabled, be configured with it's own unique IP (192.168.1.1 and 192.168.1.2, for example (though I'd use an entirely different network - 192.168.42.x, for example).  Then each you can connect each router to each other (LAN port to LAN port).  That ensures there is a path for all devices.  The SBS server is configured with DHCP and defines ONE gateway as the default (the other isn't used EXCEPT on the WHS box.

There may be firmware updates, or the ability to run an open source firmware on one of these netcomm devices - but I've never heard of them (they aren't sold under that name in the USA and if they are, they are NOT popular).  

As an alternative, you could make another PC - or VIRTUAL PC and set it up with two NICs and run Untangle on it - that could be your router - that's what I'm doing at my office.  www.untangle.com (there's a "Lite" (free) version).
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

Lee W, MVPTechnology and Business Process AdvisorCommented:
And of course, you could also try running the various services you want to forward on different ports (but given that that's not a best practice, it's not something I try frequently and don't recall how, (in a detailed way) you would do that or what kind of other problems you might face.
liminalAuthor Commented:
Hi thanks so much for your help… really is appreciated.

I spent the last few days trying to get the Watchguard Firebox to work. It’s an old X20e. but it’s just so slow. What I’m looking @ doing is just trying to find a new router that does what I need. I’m in AU and we have a brand called DrayTek that does it but they seem to be imposable to find. Any suggestions on a common brand that I would be safe going with?

Once again thanks for your help its very much appreciated.
Lee W, MVPTechnology and Business Process AdvisorCommented:
DrayTek seems popular OUTSIDE the USA - I've heard of them, but only through posts here and usually from people in Europe or Australia.  Unfortunately, nothing cheap other than LinkSys (I assume you have them there.... but personally, I wouldn't recommend linksys to anyone.  Horrible in my experience.

If you want/need to do this cheaply, I'd suggest you consider a VM or even an Atom processor based system running Untangle.  I've been running it about 5 days so far and it's worked great for me. I ended up with a question about the spam filter and my exchange server... but their forums were REALLY helpful in resolving it (employees participate in the forums).  And since MOST business class routers today are linux based anyway, you're not really doing anything terribly unusual - even Watchguard is supposed to be releasing a VM version of their firebox appliance.
liminalAuthor Commented:
I actually created a VM and installed untangled. Installed two virtual NICs (maybe where I went wrong) and it just killed my network. Nothing would work until I killed my VM server. I set it up as a transparent layer... Maybe that was it, not sure.

But im thinking if I get one device that does everything. Wifi, Multi-Nat, and has gigabit ports... its just going to make it all so much better.

So LinkSys does it... Do all models do it?
Lee W, MVPTechnology and Business Process AdvisorCommented:
Sorry, I misremembered - I thought of DUAL WAN connections - which, technically, this COULD be... I have an RV042 I used for a time... The home level stuff I'm almost certain doesn't support it... but the business class stuff PROBABLY does... I just don't trust them to work long term or reliably...

re: Untangle - Yeah, that was probably it - transparent layer - you need to set it up to do NAT.  If you reach a point you want to play with it again, I'd encourage you to do it... the more I've used it, the more I like it.  Two interfaces, one for the WAN, one for the LAN.  Configured to do NAT but disable DHCP.

-Lee

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
liminalAuthor Commented:
LOL ok ok, im going to do it... Just got a gbit router and a new network card... just going to use the Netcomm as the ADSL modem... let you know how I get on.

Thanks Lee
liminalAuthor Commented:
OK did it and its working pretty awesome. Except I dont seem to be receiving mail (sending is ok)

Also haven't set up the other IP, see how hung over I am tomorrow ;)
liminalAuthor Commented:
I almost have it working... but im getting this error

SSL connection error
Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.
Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.

Have you seen that before??

its for my WHS server
liminalAuthor Commented:
Very helpful guy
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Servers

From novice to tech pro — start learning today.