cbruinooge2
asked on
assigning WAN ips to servers behind cisco router, and comcast modem
I just signed up with Comcast business class internet and got a block of 13 static IP addresses. I plan on using a separate Cisco RV016 business router that has a lot of functions. I logged into the Cisco router and assigned the first static IP address in the block ending in 50.xx.xx.33 to the router itself. After that I went to the Comcast modem/router and went under the firewall tab and turned on DMZ mode for that IP address, and turned off DHCP mode. I went back to the Cisco router and it seems to be working great. I have a few computers connected and they all have their LAN addresses and I even setup a couple of wireless routers as access points and they are working great as well. The problem is that I have some servers here that I am going to be using as web servers and I need to assign them WAN ip addresses. I went into server 1 and assigned the 2nd static IP in the block to it but it can't see the internet. I can't ping out, or anything. I tried turning off the firewall in the Cisco router, among other things and nothing works. If I unplug the ethernet cord from the Cisco router and plug right into the Comcast modem/router it works perfect and can ping google no problem. I have no idea what to do to fix this. How do I assign my static WAN ip's to my servers using this Cisco router? I may not be understanding this right but I want to create separate VLAN's for each server with a WAN IP address. For example: I want to create VLAN 1 and assign it to port 1 on the front of the Cisco router. I want to plug server 1 into that port and have it setup with a static WAN IP. I want to do that with about 5-6 servers, each with their own VLAN, and WAN IP address. so they are not able to communicate internally here. I have a feeling thats not the way it works but it gives you an idea of what my goals are. Thanks for your help.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Servers need to be configured with a public IP address in the one IP subnet and are required to be "isolated" from each other; you need a device that supports private VLANs.
The Cisco RV016 won't do this for you, an enterprise level switch is required.
Check out:
http://blog.internetworkexpert.com/2008/07/14/private-vlans-revisited/
As mentioned at the above link, there is the basic protected port or “Private VLAN edge". In the Cisco Small Business range, the Series 300 supports this.
The Cisco RV016 won't do this for you, an enterprise level switch is required.
Check out:
http://blog.internetworkexpert.com/2008/07/14/private-vlans-revisited/
As mentioned at the above link, there is the basic protected port or “Private VLAN edge". In the Cisco Small Business range, the Series 300 supports this.
ASKER
"Because cPanel is designed for commercial hosting, we only license publicly visible, static IP addresses. We do not license dynamic, sticky, or internal IPs.
You should not use NAT when configuring your network settings. Your server should have its own public IP address."
Can I still do what your saying or do you have another idea? Thanks.