Solved

How Connect my 4 building with comcast ethernet

Posted on 2014-12-20
13
129 Views
Last Modified: 2015-01-10
In my company we got Comcast Ethernet for 4 Buildings they are configured point to Multipoint, I already configured all my internal network in the main office, i configured my firewall and we have internet in the main office, the question is how send internet to other 3 building, I have 2 Domains could please explain me what i need to do?
0
Comment
Question by:PLCITS
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
13 Comments
 
LVL 79

Expert Comment

by:arnold
ID: 40510888
Distances between buildings, is the question dealing with each building getting their own Comcast connection using the firewall in each to establish a VPN among the other firewalls.
That might be a design that Comcast implements in the link.

Not clear what your two domain reference implies. Is that a local ad login domain, or you have two sites externally accessible.
0
 

Author Comment

by:PLCITS
ID: 40510897
Each building has a comcast fiber optic conexion I don't need a VPN because is a private conexion, about the domains is because I need configure 2 domain through the buildings
0
 
LVL 6

Expert Comment

by:ajeab
ID: 40510899
config gateway, DNS and default route for each network to your internet router.  

building 1 - 10.1.1.x network.  internet router .1
building 2 -1 0.1.2.x network . set default GW to 10.1.2.1
in the vlan 2, set route 0.0.0.0 0.0.0.0 to 10.1.1.1

make sure there is route between vlan 1 and 2.
make sure you allow vlan 2 network in firewall.
0
Database Solutions Engineer FAQs

In this series, we will discuss common questions received as a database Solutions Engineer at Percona. In this role, we speak with a wide array of MySQL and MongoDB users responsible for both extremely large and complex environments to smaller single-server environments.

 

Author Comment

by:PLCITS
ID: 40510925
When you said internet router you mean Comcast Box? because I don't have access to Comcast Box Just them can Management , the configuration 10.1.1.x and gateway  i did that in my firewall, when you mentioned vlan 2 i need to create that vlan or comcast did?
0
 
LVL 79

Expert Comment

by:arnold
ID: 40510998
You have two separate AD domains?
You can have each on their own segment with the routers separating the per domain traffic, while routing all other traffic through to the comcast box which presumably nats.  the issue with the comcast box deals with whether they are natting all your IP segments, or they have a specific one that

Internet <=> comcast box <=> your internal router <=> your other routers/connections

Your internal router will be getting a public IP and natting everything else behind it.
0
 

Author Comment

by:PLCITS
ID: 40511353
Yes I have 2 Separate AD Domains, I'm pretty confused about how to actually set up the EVPL really need help in that part
0
 
LVL 79

Expert Comment

by:arnold
ID: 40511357
Do the domain hosts cross boundaries? Is establishing a trust between the two domains an option or are the two have to function as two separate entities?
0
 

Author Comment

by:PLCITS
ID: 40511359
Like Separates entities
0
 
LVL 79

Expert Comment

by:arnold
ID: 40511360
the two have their own existing network, what equipment do you have?
How many routers do you have?
0
 

Author Comment

by:PLCITS
ID: 40511577
Right now I just have a Firewall in the main office but the firewall I can routing, but right now is not really important the 2 domains, the important part is how connect my other 3 building through EVPL
0
 
LVL 79

Expert Comment

by:arnold
ID: 40511723
Lets try it this way, each building presumably has their own currently existing network
systems and switches. and has its own segment that is unique i.e. does not overlap with any of your other buildings/locations.
The fiber P-to-P. Does it terminate on a router?

Building A <=> router <=> Comcast Feed
Building B <=> router<=> Comcast Feed
Building C <=> router <=> Comcast Feed
Building D <=> router <=> Comcast Feed

You might want to setup dynamic routing (ospf) while might complicate some configuration on the front end, would simplify them down the line, i.e. you need to expand one location by adding another segment, with static routs, you would need to go and update the other routers one at a time about the new network.
With dynamic routing, you add the new segment to the advertised block on the router and you are pretty much done as the change will propagate.

If my guesstimate of your setup is incorrect, please post a topology.

The AD will deal with the DNS servers available to the location. So if building A and Building C have each separate domains, each will have a set of DNS servers that will point to the DCs responsible for it.
0
 

Author Comment

by:PLCITS
ID: 40514389
The Fiber is Point -to-Multipoint I think is something like

Comcast Switch -> Building A <=> router <=> Building B
Comcast Switch -> Building A <=> router <=> Building C
Comcast Switch -> Building A <=> router <=> Building D

for this kind of configuration I need router in each building? or router in the Building A and switch building B,C,D?
0
 
LVL 79

Accepted Solution

by:
arnold earned 500 total points
ID: 40514471
In this layout, your router in building A will have different segments on each building connection.
I.e. 10.0.0.0/16 for building A

10.1.0.0/16 for building b
10.2.0.0/16 for building c
And 10.3.0.0/16 for building d

On your router you would control how if at all the building d interact. Can users in building c reach/access resources in building b?
With such large segments, your individual building network will see broadcasts/multicasts, etc
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security is one of the biggest concerns when moving and migrating your data from your on-premise location to the Public Cloud.  Where is your data? Who can access it? Will it be safe from accidental deletion?  All of these questions and more are imp…
Is your computer hacked? learn how to detect and delete malware in your PC
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question