Re: Help with RAS configuration and multiple IP's

From: Bill Grant (not.available_at_online)
Date: 07/09/04


Date: Fri, 9 Jul 2004 10:47:17 +1000


    Hi,

    DMZ stands for Demilitarised Zone (from the army idea of a zone between
two opposed groups). It refers to an area which is not really exposed to the
Internet (it is usually behind some sort of firewall) and is not really on
the local LAN (because it is in a different IP subnet). Some people set up a
DMZ between the Internet and their local LAN. But the routing can get pretty
tricky.

    If you are currently running these servers on a private LAN with private
IP addresses, the using address mapping is probably the easiest way to go.

    Best wishes,
        Bill
MVP - Networking
      Sydney

"Anubis" <anubis@bluestreem.com.au> wrote in message
news:ePw0foKZEHA.1048@tk2msftngp13.phx.gbl...
> Hello,
>
> Thank you so much for your response.
> These news groups are fantastic!
>
> Just one (stupid) question...
>
> DMZ? What is it?
>
> Thanks
> -Steve
>
>
> "Bill Grant" <not.available@online> wrote in message
> news:unfdKMKZEHA.3752@TK2MSFTNGP12.phx.gbl...
> > It is more a network design problem than a RRAS problem.
> >
> > To actully use the "real" IP addresses, the machines you mention
would
> > need to be in a DMZ, not "inside" the RRAS router on the private subnet.
I
> > suspect what you really want is to have these machines on your private
LAN
> > but have direct access to them from the Internet. To do this, you need
to
> > configure the RRAS server's public interface to use the full range of IP
> > addresses you have been allocated. You then configure NAT to map
> particular
> > public addresses to particular private IP addresses on the LAN. This is
> > called address mapping, and works in a similar way to port forwarding.
> > Packets addressed to the public IP will be forwarded to the machine on
the
> > LAN.
> >
> > See KB 329754 for a description of mapping IP addresses and/or ports
> in
> > the NAT section of RRAS.
> >
> >
> > "Anubis" <anubis@bluestreem.com.au> wrote in message
> > news:uiy35oIZEHA.2408@tk2msftngp13.phx.gbl...
> > > Hello,
> > >
> > > I have what may seem a simple answer to some but it continues to
illude
> > > me...
> > >
> > > Attached is an example of what I'm trying to explain here... hope you
> can
> > > understand it.
> > >
> > >
> > > I am trying to figure out how to configure my network RAS to route
with
> > > multiple IP addresses.
> > >
> > > For example let's assume my ISP has given me a block of IP's from
> > > 200.100.10.30 through to 200.100.10.39
> > >
> > > As per the example image, I am wanting to assign three of these
> addresses
> > to
> > > web servers in my local network, one to a dns server which is the name
> > > server for my domain(s) and a mail server.
> > >
> > > What I am trying to work out is how can I configure my connection from
> my
> > > ISP to make the servers in my network available by IP address to the
> > > internet. I have experimented with NAT but this only routes all
queries
> > > internally through one IP address..
> > >
> > > I'm not sure if Win RAS is capable of this... the part I may be
missing
> is
> > a
> > > network router? I'm not sure.
> > >
> > > I hope i've explained it well enough... Thanks in advance to anyone
who
> > can
> > > offer any assistance!
> > >
> > >
> > > Thanks
> > > -Steve
> > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • RE: Secure Remote access - windows 2003
    ... a few questions before I start th eimplementation - I will setup the RRAS ... RRAS is very flexible as a small scale remote access ... All traffic between the client and the RRAS Server will be pushed down ... This is only suitable for access by known machines, not for internet ...
    (Focus-Microsoft)
  • RE: remote access SBS 2003 Inop
    ... I removed and reran RRAS and CEICW, I only get one error and I will send you ... On the SBS 2003 Server open the Server Management console. ... Click the "Connect to the Internet" link. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Internal adaptor IP address
    ... Win2K Server SP4 running RRAS. ... Internet sharing is accomplished through NAT on the RRAS. ... proper IP routing takes place through the RRAS between remote and private LAN ... because the internal adaptor also leases its remote client IP addresses from ...
    (microsoft.public.win2000.ras_routing)
  • Re: Routing and RRAS Problem - Pleasehelp
    ... use RRAS but if will fail I will run RRAS server as NAT Router, ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... Traffic from your "internal" subnet can get ... You need to add an extra route to the Linksys router so that it knows how to ...
    (microsoft.public.windows.server.networking)
  • Re: How to set Default Gateway for a connection using RRAS and NAT
    ... How do you setup RRAS or which option? ... > connect to Internet using the Internet connection present in the server. ... several months and I always end in configuring ICS ...
    (microsoft.public.windows.server.networking)