Re: Connect a Wireless Router to my SBS Network

I'm going to try to lay it out as precise as possible.

My 1.5MB T1 line comes in and is connected to the ISP's DSL
router. -------->>>> line goes into the "uplink" port of the 10/100 5-port
Switch. Any port I can connect to using an external IP and my ISP's gateway,
subnet mask and for DNS. So basically anything plugged into the 10/100
5-port Switch is outside my firewall. Now I plug a cable into one of the
ports that goes to my external NIC on my SBS server using a static external
IP. From the internal NIC on my SBS server the line goes to a gigbyte
switch. My patch panels get plugged into here as well as my other Windows
2003 servers.

IP Config for SBS Server.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

H:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : abraham
Primary Dns Suffix . . . . . . . : MACCABEE.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MACCABEE.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 570x Gigabit Integrated
Controll
er
Physical Address. . . . . . . . . : 00-10-18-09-BA-FC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.16.2

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-06-5B-88-23-CC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 64.71.1.146
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . : 64.71.1.145
DNS Servers . . . . . . . . . . . : 192.168.16.2
NetBIOS over Tcpip. . . . . . . . : Disabled



Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:u1TpVYsPJHA.4848@xxxxxxxxxxxxxxxxxxxxxxx
So, what are you using for the IP address of the external NIC in your SBS
server (a public or a private IP address)? Posting the results of an
ipconfig /all for the SBS server may be a good idea.

If the DSL mode-router is in bridge mode, you may want to put the Airlink
in between the DSL modem and the SBS external NIC. Then you an use it as
an extra layer of protection for the SBS LAN and as a wireless deveice for
your guests.

Two Nics, a dynamic IP address, ISA and a router
(see the diagram for network physical set up)
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/articleId/74/Two-Nics-a-dynamic-IP-address-ISA-and-a-router.aspx

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:OC8r%23vrPJHA.4820@xxxxxxxxxxxxxxxxxxxxxxx

I believe it is more of a bridge. I use a 2 nic configuration on my SBS
server and ISA as my firewall. For the LAN on my SBS server the second
NIC is plugged into a gigabyte switch which then gets plugged into my
patch panel.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:OsNb0irPJHA.4412@xxxxxxxxxxxxxxxxxxxxxxx
I assume your DSL modem-router is acting as a router (with a WAN and a
LAN side) and not as a bridge (simply passing all traffic into the
network). If it's acting as a router, the WAN IP address assigned by your
ISP should be set on the WAN side of the DSL modem-router.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:uazjN2qPJHA.1164@xxxxxxxxxxxxxxxxxxxxxxx
that is correct and sffirmitive. I'm puzzled though as to how the
wireless resolves DNS requests? Shouldn't my WAN settings reflect my
ISP's settings? In other words for the WAN IP, Gateway, mask and dns?


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:eflkGuqPJHA.1908@xxxxxxxxxxxxxxxxxxxxxxx
Also, you should have the cable that comes from the DSL modem-router
plugged into the WAN port of the Airlink router (not one of the 4
available LAN ports).

--
Merv Porter [SBS-MVP]
============================


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:%23AX%23mfqPJHA.4008@xxxxxxxxxxxxxxxxxxxxxxx
Hey Merv,
OK so I think i'm almost there again. Followed your suggestions.

This setup is the Airlink wireless attached to the 5-port switch? YES

Assumption: the DSL router-modem is 192.168.1.1

If so, try this...

LAN IP Address: 192.168.2.1
Static IP Address: 192.168.1.2
Static Subnet Mask: 255.255.255.0
Static Gateway: 192.168.1.1
Primary DNS: 192.168.1.1
Secondary DNS: 192.168.1.1

Changed my laptop IP to 192.168.2.10 and the wireless to
192.168.2.1.and am able to connect directly to the wireless. Deleted
to old network. Created a new one and changed channels. Select
WPA-PSK

So now I am ble to connect to the AirLink wireless router either
directly with a cable or I'm also able to get to the administration
page via 192.168.2.1 via wireless. Checked my laptop IP settings and
I am getting

Dynamic IP 192.168.2.109
Subnet Mask 255.255.255.0
Gateway 192.168.2.1

So all looks good. Only problem is I can't get to the internet. Any
ideas? I've got no firewalls running. My Internet/Connections/LAN
Settings is set to "Automatically detect settings".




"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:eK8KD6gPJHA.2348@xxxxxxxxxxxxxxxxxxxxxxx
Are you using WPA-RADIUS authentication on the wireless router?
Should be WPA-PSK.

Also, what is the model number of the Airlink router?

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:eHzqNtgPJHA.4776@xxxxxxxxxxxxxxxxxxxxxxx
The error message I get when trying to connect to the wireless
network is "Windows was unable to find a certificate to log you
onto the network "wireless network name".


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:%23z$EWqgPJHA.4312@xxxxxxxxxxxxxxxxxxxxxxx
Looks like the NG does not allow me to attach this word document.
Can I eamil it to you somewhere else? Thanks.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:O1KPnPgPJHA.4224@xxxxxxxxxxxxxxxxxxxxxxx
This setup is the Airlink wireless attached to the 5-port switch?

Assumption: the DSL router-modem is 192.168.1.1

If so, try this...

LAN IP Address: 192.168.2.1
Static IP Address: 192.168.1.2
Static Subnet Mask: 255.255.255.0
Static Gateway: 192.168.1.1
Primary DNS: 192.168.1.1
Secondary DNS: 192.168.1.1

----------------------------------------------------------
Internet
|
DSL Modem-Router
| |
| | Switch
| | Airlink Router (static, WAN side, 192.168.1.2)
| ||
| | Airlink Router (LAN side, 192.168.2.1)
| | | |
| Wireless clients
|
SBS External NIC (192.168.1.3)
||
SBS Internal NIC
||
Switch
| | | | |
SBS LAN Workstations
----------------------------------------------------------

--
Merv Porter [SBS-MVP]
============================


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:u9xt3EgPJHA.3884@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Merv. you're the greatest. Here is what I see and what I
did.

LAN IP Address: 192.168.2.1
Static IP Address: external static ip
Static Subnet Mask: 255.255.255.248
Static Gateway: external gateway IP
Primary DNS: (points to my mail server providors DNS servers
(SBS Servers forwards DNS requsts to same IP's)
Secondary DNS


OK so now I'm almost there I think. I did the above and can now
see my wireless network when I do a search. It shows it is a
"security-enabled wireless network (WPA)". however when I go to
connect it shows all bars connected but appears it is in a
"Validating Identity" state.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:OWxkVyfPJHA.4708@xxxxxxxxxxxxxxxxxxxxxxx
I believe the Airlink has default IP of 192.168.1.1. Connect
the Airlink wireless unit directly to a "non-domain" spare
laptop or workstation (give the laptop a static IP of
192.168.1.10) and access the Airlink web interface by typing in
192.168.1.1 in a browser window. Now change the IP scheme of the
Airlink to 192.168.2.x. Then change the laptop IP to
192.168.2.10. You should be able to get backup to the Airlink
web interface now. Now turn on DHCP for the Airlink and set the
WAN IP to (static) 192.168.1.2. You may have want to select WPA
Personal (TKIP passphrase) for the security of the Airlink
wireless. Then connect the Airlink to the 5-port switch, set
your laptop to get an IP automatically and test to see if you
can get a connection.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:%23LxRrjfPJHA.4152@xxxxxxxxxxxxxxxxxxxxxxx
Hey Merv thanks for the input. My problem is that I can't get
to the browser interface of the wireless router and therefore
cannot input any information.


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:%233U%23vyePJHA.4916@xxxxxxxxxxxxxxxxxxxxxxx
I suspect it the "LAN side" of your DSL modem-router that is
192.168.1.1. If you can't set the Airlink up as a WAP
(Wireless Acccess Point), you may need to use it as a router
with it's WAN IP set to 192.168.1.2 (static with GW
192.168.1.1); then change the Airlink's LAN side IP range to
192.168.2.x with the LAN side of the wireless router set to
192.168.2.1. After that, turn on DHCP for the wireless portion
and test. At that point, a wireless client should get an IP
address of 192.168.2.x.

--
Merv Porter [SBS-MVP]
============================


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:O$jPgVePJHA.5044@xxxxxxxxxxxxxxxxxxxxxxx
OK so again I can ping 192.168.1.1 however I can get a repy
from the defualt IP whether or not the wireless is plugged
in or not. So there must be another device out there I'm
getting a reply from.
I'm using my laptop with a static IP and a direct connection
to the 10/100 5-port switch.


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote
in message news:%23maWyBePJHA.4304@xxxxxxxxxxxxxxxxxxxxxxx
Attach the Airlink to a port on your 5-port switch; give it
a static IP in the same range as the DSL router's LAN side
and a gateway of the DSL router itself; turn off any DHCP
service on the DSL router's LAN side; turn on the Airlink's
DHCP service; test to see if a laptop pick's up a wireless
connection from the Airlink.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:uAU605dPJHA.588@xxxxxxxxxxxxxxxxxxxxxxx
I got a AirLink 101 54 Mbps 802.11G Wireless Router I want
to attach to my SBS network. I'm a bit unsure as to where I
need to place the router to work best. Here's my
environment......

SBS 2003 Premium SP2 w/2 Nics
ISA 2004 SP3

We use a 1.5MB T1 DSL connection for our internet access.
Here is the network topology layout...........

Inbound Internet --> DSL Router --> 10/100 5-port
Switch --> External NIC SBS Server ---> Outbound Internal
NIC SBS Server ---> 1GB Switch ---> Patch Panels

Now I use the 5-port Switch so that I can utilize my
additional external IP's for testing and being outside the
firewall. I have 2 other Windows 2003 Standard member
servers that I connect directly into the 1GB Switch.

So my question is where along the line do I place the
wireless router. I tried removing the 10/100 5-port switch
and placing it there. I also tried connecting it to an
available port on the 10/100 5-port Switch which would be
outside my firewall which is ok for me.

I would like to use this so that we can have wireless in
our conference room to accomodate guests and clients who
have laptops.



































.

Relevant Pages