Re: Public and Private IP addresses

thanks Ace. No, I am just trying to make use of the pubnlic IP's I was given.
I didn't like the two nics running different subnets either, but that is the
only way I have even seen it setup. I wasn't sure what dns problems I might
run into by using public ip's on some of the servers, but not all. I was also
worried of the effects on symantec av, wsus and active directory. I just want
to make sure 1) people connecting from the internet can get to our webpage
using the public address I assign, 2) people on the lan can get to the
webserver, email server, etc, 3)all of the servers on the LAN can get to the
public ip servers.

"Ace Fekay [MVP]" wrote:

In news:0DAFE313-F208-4277-AD12-5ABF74C69AC5@xxxxxxxxxxxxx,
rodge <rodge@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I commented on below:
I am running a network with 6 windows 2003 r2 servers. I run ad
integrated dns with two domain, ccnsnet.local(private) and
ccnsnet.com(public). I have an exchange server(2003), webserver,
symantec server, wsus server, isa server. I recently upgraded my
verizon account to static with a block of 5 public ip addresses. How
can I implement the public addresses into my current setup? I've
worked in a similar(although much bigger) environment previously. It
was accomplished by adding a DC(running dns) with 2 nics and giving
the second nic one of the public ip addresses and having all of the
servers running public addresses point to the new dns server(the one
with two nics) for dns. Unfortunately we also had two different
routers, one that connected to the public subnet and one that was
used for everyone else. I can't afford a sparate router. So, how can
I implement this?

If your question is "how to make my Exchange server handle mail for my
domain with my public IP address?", in your router, simply port remap port
25 to the Exchange servers's private IP address. In Exchange, Recipient
policy, add "@ccnsnet.com" and allow it to update all users. If you want to
allow OWA, port remap 80 to the Exchange box under one of the public IP
addresses. Of course, this requires a router or firewall device, such as a
PIX, that will handle multiple IPs on it's external interface. A linksys or
Netgear cannot do this.

I wouldn't use the DC with two NICs or you will be inviting yourself to a
host of issues. Multihomed DCs do NOT play well and require extensive
modifications to alter it's default behavior to do so. Use a router and let
the DC be a DC.

If this is not what you are looking for, please elaborate on what you are
trying to accomplis and what you mean by :
How can I implement the public addresses into my current setup?

--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...



.

Relevant Pages

  • Re: Urgent! New router and big disaster
    ... NIC, you need to specify an external DNS server for DNS, instead of the ... Both NICs should point to his internal IP for DNS. ... forward ports to it reliably in the router. ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... No Phantom NICs as far as I can see. ... that it can not find the server. ... Configure your Router as an Eithernet Bridge. ... Once you have this then configure the Routers Firewall and Port ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... No Phantom NICs as far as I can see. ... that it can not find the server. ... Configure your Router as an Eithernet Bridge. ... Once you have this then configure the Routers Firewall and Port ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... laptop plugged into port on DSL router. ... service, e-mail, and RWW is available to all users on the network. ... The server is a SBS2003 SP1 Standard box without ISA, ... of the two NICs by clicking the Advanced tabs, it won't open that box, ...
    (microsoft.public.windows.server.sbs)
  • Re: more than two MX record
    ... the second ip address and therefore to my router number two ... domain that can directly send messages to your Exchange server. ... outside email to bypass your spam firewall at some point.. ...
    (microsoft.public.exchange.admin)
Loading