Re: Multiple Public IP Pools and routing Issues



The only way I can see that work is introducing a second router with 1to1
NAT capability sitting between the Cisco and the LAN. The goal would be to
route ALL traffic to that new router. You would need a static route on it
that redirects the traffic for the SBS box to the WAN NIC of the SBS. On the
SBS you would need to create a set of static routes for those subnets
pointing to the LAN IP of that new router. If there are enough IP addresses
I probably wouldn't use the public IP subnet that the SBS is on. If you do
use it you need to make sure that you exclude the public IP that should go
to the SBS WAN of the router in the routing tables.

Security is one other issue that I can see. The traffic on the new router
should be restricted to only the ports that are needed for those
connections.

This is really messy. I would see if the ISP isn't able to give you one
continues subnet with enough public IPs.

--
Claus
"lmiller" <lmiller@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0151195C-DE59-4B9F-BFC1-61BBA203D051@xxxxxxxxxxxxxxxx
I have multiple machines inside the private network that need public IP
addresses for specific reasons, mostly IP video, 3rd party VPN solutions
for
insurance verification and medicare submission etc. So, I need to tap
into
my second set of public IP addresses in order to assign them to specific
machines or devices. The SBS is technically the router, with a public IP
that is connected to a Cisco router that is connected to the outside world
(the cisco router only passes through traffic and is used to establish a
L2
with the state for specific video traffic) and an internal IP that is
connected to the switch stack. I hope this makes more sense. The Cisco
router does no DHCP, NAT or any other function related to the internal
network.

"Cris Hanna [SBS-MVP]" wrote:

As Claus alluded to, its not clear what you are trying to accomplish.
Typically in a "normal" SBS config, the peripheral router has one public
IP on its external side and then a "PRIVATE" ip range on the internal
side and the NIC has a static IP to match the IP of the router. DHCP
on the router should be turned off

There should be no public IPs listed in RRAS

We need many more details!

--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Claus" <cjobes@xxxxxxxxxxxxx> wrote in message
news:u4gRanXMIHA.4272@xxxxxxxxxxxxxxxxxxxxxxx
Why are you trying to do this? What is the purpose? Maybe understanding
what
you are trying to do will help us giving you advice.

--
Claus
"lmiller" <lmiller@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7E98F364-C59A-42B4-934C-CB71A9BDDCAB@xxxxxxxxxxxxxxxx
>I have SBS 2003 standard in a dual NIC configuration. I have 3
different
>IP
> pools assigned from my ISP. The primary (first one used) is
208.X.X.X/29,
> second is 67.X.X.X/28 and the last is 68.X.X.X/28. All is well in
routing
> if
> I only list the first 208 series in the RRAS public IP pool. I can
set
> reservations etc. But, if I list either of the 67 series or the 68
> series,
> routing freezes, mappings all disappear and no external traffic is
allowed
> in
> or out. My peripheral router (2nd NIC of SBS with public address) is
not
> stopping the traffic, that much has been confirmed with a traceroute,
but
> when it hits the SBS box, it dies. I'm not real clear on NAT and
wonder
> if I
> need to setup DNS manually to handle the other 2 public IP pools that
are
> on
> different subnets? Any help would be greatly appreciated


.



Relevant Pages

  • Re: Dual Nic vs. Single Nic
    ... I never like to hook an SBS server ... I also agree with that router you would be better ... served with more firewall capabilities such as packet filtering. ... A simple NAT router in front of either ...
    (microsoft.public.windows.server.sbs)
  • Re: Seperate networks using 1 Gateway
    ... function provided by SBS. ... If you remove the NAT router and have ... > clients on this network point straight to the gateway, ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Site to Site VPN config advice?
    ... I have installed a baby Cisco router/firewall/vpn device off to the ... No toy router involved. ... SBS should work. ... Linksys router at the network edge. ...
    (microsoft.public.windows.server.sbs)
  • Re: Installing ISA Server for first time
    ... "Configure Network Connections". ... SBS server, the SBS and your internal network will safer than before. ... the NAT before ISA is not indispensable. ... add a NAT router or firewall before SBS will further improve ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Access and Outlook Web Access on SBS 2003
    ... decent quick-fix Wizard for Remote Access on SBS 2003, ... I have a client whose SBS 2003 server has 1 (yes, ... router. ... NAT, get your ISP to disable NAT on their router. ...
    (microsoft.public.windows.server.sbs)

Loading