Re: Home Networking Question: Bridging/IP Forwarding between 2 LAN segments

Just about any ethernet switch will do and you can get them in any computer
store - you do NOT another need a router. An example would be:

http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FL
ayout&cid=1115416836711&pagename=Linksys%2FCommon%2FVisitorWrapper

Simply use ethernet cables to connect the Westell, Server6, and the Linksys
WAN port to the switch.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"W2K Programmer" <w2k_programmer@xxxxxxxxx> wrote in message
news:1162223207.881466.154050@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Re the latest step 1 and 2 in your reply:
The problem is westell modem has ONLY ONE ethernet port.

What kind of switch can I buy and add between the modem and network? I
understand the switch on which you can turn firewall off or better yet
one with no firewall , just plain old switch -- but what model and
where can I get it?


TIA


Doug Sherman [MVP] wrote:
OK - you definitely do not want the routing solution - turn off routing
on
server 6.

Don't know how many ports the Westell device has - you may have to add a
switch. But try this:

1. Connect server 6 to the Westell and configure as necessary to allow
VNC.

2. Connect the WAN port on the Linksys router to the Westell device (or
to
a switch connected to it). and connect the remaining computers to the
Linksys LAN ports.

3. This segregates the other servers and protects them with NAT and a
firewall. These machines will still be able to access server 6
(although
they would probably have to use \\IPaddress instead of browsing), but
server6 cannot access the other machines. If you wanted to allow server
6
to access the others, you could connect its second NIC to the Linksys
router.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"W2K Programmer" <w2k_programmer@xxxxxxxxx> wrote in message
news:1161885889.036854.110280@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
RE NEW CONFIG: I am letting in a VNC client from a remote location
into
my home office via the modem to the Server 6 on LAN segment B. Server
6
runs a VNC server. This is for work-colloboration. I do not want the
VNC client to see my whole network or go beyond server 6. Another
reason is if a hacker gets in he must not be able to go beyond segment
A. The reason is obvious: because I have to give out my WAN (ISP
assigned modem IP) address for the other party to connect to my VNC
server using his VNC client. This configuration I am discussing is a
new one I am attempting. Any momemt I give out an IP address, I have
been attacked. Let me explain the old configuration.

RE OLD CONFIG: In the old configuration, everything is simple: the DSL
modem is connected to LINKSYS BROADBAND router (also called as
residential gateway) with 3 ports and 2 VoIP ports (vonage). I connect
3 servers directly to this router. The problem with this config is VNC
does not work even if I am willing to risk security. I open the VNC
ports on the modem and the router, (DMZ for the modem, open the port
for VNC and forward to Server 6 for the router) -- then the remote VNC
client is able to ping the WAN IP I give out (assigend by ISP -
dynamic
IP) but the vNC client is not able to connect to server 6. Because of
this I have to remove the router, and open VNC on the modem (as
against
the DMZ when modem is connected to router). NOw the VNC client is able
to connect. So in order to protect the network I decided to move the
other 2 server behind the internal NIC of server 6 and make 2
segments.
(New config we are discussing). But the problem is Segment A is not
able to browse the internet (access the WAN aka outside world)

For specific reasons I do not want to go for static IP.

*** BACK TO DISCUSSION THREAD ***:

Now it appears to me only step 1 is required. The step 2 may not be
required since I am not using a router with the modem. *** Q *** BUT,
are you sure I dont have to run any proxy server etc on the XP pro on
segment B (acting as server) and 2000 clients on segement A acting as
clients to access the WAN/internet as opposed to just setting the IP
route ON in the registry???? ***
The router is used as a switch for segment A since it offers 3 LAN
ports. I will try this and post results. Meanwhile please post
comments
of yours if any, suggestions etc.

TIA

Doug Sherman [MVP] wrote:
Not familiar with this product and although most routers support
static
routes, not all do. Replacing a modem/router combo unit is
comparatively
difficult because these devices are not nearly as common as separate
modems
and separate routers. Before replacing your unit with a modem and a
router,
check with your ISP and make sure that the modem you choose is
compatible
with their service. However, this is becoming kind of expensive,
AND:

it may not be necessary depending on what you are ultimately trying
to
do
and why your network is configured this way. Why do you have two
routers?
Do they both connect to the Internet? Do you really need/want two
subnets?
If so, why? etc.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"W2K Programmer" <w2k_programmer@xxxxxxxxx> wrote in message
news:1161873804.485504.287760@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
For step 2: The modem is a Bellsouth provided Westell Wirespeed
(A90-210030-04) modem. I don't see a section in the configuration
(web
interface) for routes. Any suggestions? Can a different modem be
used
if thsi modem does support the route tabel updates?

TIA.

Doug Sherman [MVP] wrote:
1. To enable routing on a Windows machine:

a. Click Start/Run regedit ENTER

b. Navigate to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

c. Double click on IPEnableRouter and set its value to 1.

2. Per your discription Server 6's 192.168.1.x card is
connected to
a
DSL
modem. However, the 'modem' is actually a router. How you
configure a
static route on a router is s product specific and you will have
to
consult
your manual.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"W2K Programmer" <w2k_programmer@xxxxxxxxx> wrote in message
news:1161806683.054637.204240@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
To quote from your reply: "Enable routing on server 6; And
create
a static route back to 192.168.15.x on whatever is at
192.168.1.254."

Could you please show me how to do accomplish these 2 steps on
Windows
2000 Pro OS?

TIA.


Doug Sherman [MVP] wrote:
If subnet A machines have a default gateway of 192.168.15.1,
they
will
not
be able to access the Internet via subnet B. You would have
to
give
subnet
A machines the 192.168.15.x address of server 6 as a
gateway;
Delete
the
192.168.15.1 gateway from server 6; Enable routing on server
6;
And
create
a static route back to 192.168.15.x on whatever is at
192.168.1.254.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"W2K Programmer" <w2k_programmer@xxxxxxxxx> wrote in message
news:1161803465.140553.104370@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Need help from experienced MS networking pros for step by
step
config
of network segment A and B.


1. Server 4, 5, and 6 make a LAN segment A using a router
R
(subnet
192.168.15.x/Gateway 192.168.15.1)

2. Server 6 is multihomed (dual LAN card). External Card
is
directly
connected to DSL modem/WAN forming segment B (subnet
192.168.1.x/gateway 192.168.1.254). Internal card is
connected
to
router R described in step 1.

Segement A and B by themselves are fine.

But I can't seem to succesfully bridge/IP forward between
the
two
cards
in order for segment A to access the *internet/WAN* via
segment B.
Please give *step by step intructions* for this required
configuration.
Server 4,5 run windows 2000 Pro, server 6 runs XP Pro.

Help is appreciated. TIA.







.

Relevant Pages

  • Re: Cannot connect to RWW from home PC
    ... That would be the address you need a DNS record for. ... You say "And in the router you need to forward to your external nic IP" ... Still can't telnet to any of your ports at your public ip address. ... Heres' the info for our server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Simultaneous DSL and cable modem access on a SBS network...sorf ot.
    ... Internet Connection wizard on the SBS box, ... "More Information" button on what ports need to be opened to the SBS. ... The server and the fax (the line the DSL modem ... The cable modem already has a router attached to it as well, ...
    (microsoft.public.windows.server.sbs)
  • Re: probably an easy routing question, so please help
    ... plugged into the same gigabit switch as Server B in Block 2 and they ... from a 10Mb link to the router and the computers are both hooked into ... router with gig ports, you will potentially have limits for any ...
    (comp.dcom.sys.cisco)
  • Re: Active Directory New Site
    ... the networks, new subnet object, new site then configure DFS. ... the same server room, appearing to AD as though its remote. ... Switch w/ Replica DFS Store" is a working model or will it just go down like ... Would it be as simple as putting the router between the existing switch, ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS 20003 R2 Newbie
    ... Try using a smarthost to send outbound mail from your SBS server. ... you may have better luck using the Earthlink ... In the router, you need to forward some ports to your SBS NIC: ...
    (microsoft.public.windows.server.sbs)
Loading