Re: Network configuration question

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Phillip Windell (_at_.)
Date: 09/14/04


Date: Tue, 14 Sep 2004 14:42:35 -0500


"PC" <paulm DOT c at iol DOT ie> wrote in message
news:enOHX4jmEHA.2140@TK2MSFTNGP11.phx.gbl...
> My network remains as is on say 192.168.1.0 subnet. Add one router to
> forward traffic from the new users to my network. Place them in a
different
> subnet e.g 192.168.2.0. Then add one more router and route traffic via
> leased line to and from the new users old network through this (e.g. To
> subnet 10.0.0.0)

Sounds perfectly fne.

> Some questions:
> 1. How do I configure the clients on both mine and the new user networks.
> i.e. currently the default gateway for my clients is the internet
firewall.
> The new users will probably use their own network resources initially so I
> would imagine their default gateway will be the router connecting them to
> thier own network. How do I allow communication between me and the new
staff
> and the new staff and their own network

Perfect example of why an "Internet sharing device" (pick your favorite
type/model) should never be the Default Gateway of a system, *except* when
the system only has one subnet and no other router in the system.

.......I am assuming everyone will use the same Firewall for the
Internet......
The Default Gateway of the clients will *always* be the router that directly
faces them. If there is more than one router facing them, then it will be
the router representing the path to the most "subnets" and not a router that
leads to a "dead-end".

All routers will have their own Default Gateway set so that the routed
traffic eventually works its way router to router to the one router that
directly faces the Firewall Device. That partcular router then uses the
Firewall Device as its Default Gateway.

> 2. Would there be any point in creating a child domain for the new staff
and
> creating trusts between each of the networks?

Domains have no relationship to subnets. It is apples and oranges, two
differnt things,..no relationship at all. Neither effects the other. I
would probably maintain two distinct Domains (as they probably already are)
and just establish a Trust between them if you need them to interact. But
there is no way I can predict your company's needs with respect to Domain
Security and Domain Interoperability. You will have to study the many
different possibilities and decide that for yourself.

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


Relevant Pages

  • Re: [SLE] connection redundancy
    ... which is the router just this side of the ... >>because it's own gateway is still up. ... You'll also need three network cards to put into this Linux box. ... your internal LAN can route packets to the Internet. ...
    (SuSE)
  • Re: Cant access secure Web pages
    ... and which need to be contacted via the Default Gateway. ... The Default Gateway being the software process that does the network ... Gateway (as set up by your ISP's DHCP packet to the router), ... me so I can send it directly (to the MAC address discovered by ARP). ...
    (uk.comp.sys.mac)
  • Re: gateway IP address
    ... An Ethernet network is a 'local' environment, ... a gateway IP address can ... send the Ethernet frame to the router, so that it can pass it to the device ... Device A on Subnet 1, needs to talk to Device B on Subnet 2. ...
    (comp.dcom.sys.cisco)
  • Re: Just an interesting note.
    ... The Linksys box is NAT'g for the internal network of 192.168.1.0/24. ... real router but an illusion. ... 192.168.1.0/24 subnet, the other NIC is on the 192.168.2.0/24 subnet connected to a different switch ...
    (alt.internet.wireless)
  • Re: RRAS server separating two subnets - one subnet cannot reach the Internet and computers cant
    ... I have a small lab with a bunch of servers setup on two different subnets, 192.168.1.1 is the gateway for one and 172.16.1.1 is the gateway for the other. ... The RRAS server can reach the Internet as well as the computers in the 192.168.1.0/24 subnet. ... You will need to add some extra routing to your gateway router to get it running. ...
    (microsoft.public.windows.server.networking)