Link to home
Start Free TrialLog in
Avatar of MutualBill
MutualBill

asked on

Laptops on WAN with Static IP

All of my workstations on my WAN are 10.60.24.x  Each branch has it's own router and so each branch has it's own segment, mask and gateway.

I have 2 users that want to use a laptop and get connectivity from each branch.  How can I setup their windows 7 laptops so that the user will not have to carry a list of addresses and change them manually each time they goto a new branch?

I already tried seting up multiple addresses for the IPv4 interface in the advanced setting.  This does not work.  It never fails over to the alternate addresses.
Avatar of CompProbSolv
CompProbSolv
Flag of United States of America image

Do you not have DHCP set up at each branch?  This would be the most common way to deal with it.
Avatar of MutualBill
MutualBill

ASKER

No DHCP anywhere.  All workstations and devices are using static IP.
Example:

Home office uses 10.60.24.x with mask 255.255.255.128 and gate of 10.60.24.1

Branch 2 uses 10.60.24.x with mask of 10.60.24.224 and a gate of 10.60.24.129
The easiest way to do this would be to use DHCP and if you require static addresses then use DHCP reservations or Static DHCP where you tie a unique IP address to that machines MAC address so that each time they go to that office they will get that address handed to them from DHCP.
Even when I have all devices on a network set up with static IPs, I will set up DHCP for at least a few addresses on the router or (my preference) on the server.  More commonly, I will set up all workstations with DHCP but put reservations in for each one on the DHCP server so they always get the same address.

Is there an objection to setting up DHCP?  It is usually fairly easy.  If you are concerned about unauthorized users connecting, you could limit it to known MAC addresses.
I will explore the DHCP option.  But Static was recomended because without a valid address it makes it that much harder for someone to plug a foreign device into my network to interogate my system.

I prefer to leave it off and have my laptops be intelligent enough to recognize which router they are behind and act accordingly or at least present the user with selectable options. (Network Profiles)
ASKER CERTIFIED SOLUTION
Avatar of dallensworth
dallensworth

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
That sounds like what I want.  Googling for specifics...
If security is the issue, consider the following (assumes Windows Server, but would be similar with anything else):

Set a scope of 10.60.24.1-.127
Exclude 10.60.24.1-.125
Reserve 10.60.24.126 for the first laptop (you will specify its MAC address; will have to reserve two addresses if it can connect wired or wireless)
Reserve 10.60.24.127 for the second laptop (same comment)

That should prevent anyone from getting a DHCP-issued IP address unless they have either of the specified MAC addresses. Of course, those addresses could be cloned but I would expect that to be less likely than successfully guessing at an appropriate IP address.

If you want to add more reservations later, change the exclusion to allow for them, then add the reservations.
For lack of a better soloution without compromising security...I went with a 3rd party tool that stores different network profiles for the user to select.  It is called TCP Profiles Manager.  

It's not quite the seemless solution I was hopeing for...But I think the users can manage this pretty easily.

Thanks for all your suggestions and help.