Re: Connect a Wireless Router to my SBS Network

First of all Merv I do need to thak you for your time and input as this
thread seems to have gotten longer than I expected. So thank you for your
time.
Second of all I am against your suggestions. My main purpose is to keep this
wireless off my network outside my firewall. You would think taking a cable
and plugging it into the 10/100 5-port switch would work.
I can take any computer or laptop and plug it into the 10/100 5-port switch,
assign it a external static IP, my isp's gateway, mask and dns and have an
internet connection outside of my network. I do this quite often as there
are times I need to troubleshoot exteranl access into my network.

That all said can I take a cable, plug on end into the 10/100 5-port switch
, the other end into the wireless router (not the WAN port), assign the WAN
settings with a static from my ISP. it's gateway and dns servers.

Again thnak you very very much. Thank god this isn't critical or production.



"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:uvjc6HtPJHA.2228@xxxxxxxxxxxxxxxxxxxxxxx
What is the model number of the Airlink router?

The switch may not even be necessary unless it serves some purpose for
you.

Unless you have a good reason against it, I would connect the Airlink
router to a port on the switch and give the WAN side of the Airlink the
static WAN IP address that you get from your ISP. The Ethernet cable
would go from the switch to the WAN port on the Airlink. Then connect the
other end of the cable to the external NIC on your SBS server. Then give
the SBS external NIC a static IP in the same range as the Airlink LAN side
(currently 192.168.2.x so maybe assign the external NIC 192.168.2.3); with
GW 192.168.2.1 and SM 255.255.255.0. Now, in the Airlink router, forward
your required ports (maybe 443, 4125, 3389, 25, etc.) to the IP address of
the SBS external NIC (192.168.2.3). After that, re-run CEICW, enable the
firewall, select your services and complete the rest of CEICW.

Two Nics, a static IP address, ISA, router
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/articleId/76/Two-Nics-a-static-IP-address-ISA-router.aspx

CEICW Walkthrough
http://www.sbs-rocks.com/sbs2k3/sbs2k3-n2.htm

This should allow your wireless clients to remain outside your network
(automatically getting 192.168.2.x addresses from the Airlink router)
while adding another layer of protection to your network. This
configuration is also a bit easier when it comes to troubleshooting
Internet access or router problems.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:OpVIbjsPJHA.4008@xxxxxxxxxxxxxxxxxxxxxxx
I'm going to try to lay it out as precise as possible.

My 1.5MB T1 line comes in and is connected to the ISP's DSL
router. -------->>>> line goes into the "uplink" port of the 10/100
5-port Switch. Any port I can connect to using an external IP and my
ISP's gateway, subnet mask and for DNS. So basically anything plugged
into the 10/100 5-port Switch is outside my firewall. Now I plug a cable
into one of the ports that goes to my external NIC on my SBS server using
a static external IP. From the internal NIC on my SBS server the line
goes to a gigbyte switch. My patch panels get plugged into here as well
as my other Windows 2003 servers.

IP Config for SBS Server.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

H:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : abraham
Primary Dns Suffix . . . . . . . : MACCABEE.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MACCABEE.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 570x Gigabit Integrated
Controll
er
Physical Address. . . . . . . . . : 00-10-18-09-BA-FC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.16.2

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-06-5B-88-23-CC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 64.71.1.146
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . : 64.71.1.145
DNS Servers . . . . . . . . . . . : 192.168.16.2
NetBIOS over Tcpip. . . . . . . . : Disabled



Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:u1TpVYsPJHA.4848@xxxxxxxxxxxxxxxxxxxxxxx
So, what are you using for the IP address of the external NIC in your
SBS server (a public or a private IP address)? Posting the results of
an ipconfig /all for the SBS server may be a good idea.

If the DSL mode-router is in bridge mode, you may want to put the
Airlink in between the DSL modem and the SBS external NIC. Then you an
use it as an extra layer of protection for the SBS LAN and as a wireless
deveice for your guests.

Two Nics, a dynamic IP address, ISA and a router
(see the diagram for network physical set up)
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/articleId/74/Two-Nics-a-dynamic-IP-address-ISA-and-a-router.aspx

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:OC8r%23vrPJHA.4820@xxxxxxxxxxxxxxxxxxxxxxx

I believe it is more of a bridge. I use a 2 nic configuration on my SBS
server and ISA as my firewall. For the LAN on my SBS server the second
NIC is plugged into a gigabyte switch which then gets plugged into my
patch panel.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:OsNb0irPJHA.4412@xxxxxxxxxxxxxxxxxxxxxxx
I assume your DSL modem-router is acting as a router (with a WAN and a
LAN side) and not as a bridge (simply passing all traffic into the
network). If it's acting as a router, the WAN IP address assigned by
your ISP should be set on the WAN side of the DSL modem-router.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:uazjN2qPJHA.1164@xxxxxxxxxxxxxxxxxxxxxxx
that is correct and sffirmitive. I'm puzzled though as to how the
wireless resolves DNS requests? Shouldn't my WAN settings reflect my
ISP's settings? In other words for the WAN IP, Gateway, mask and dns?


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:eflkGuqPJHA.1908@xxxxxxxxxxxxxxxxxxxxxxx
Also, you should have the cable that comes from the DSL modem-router
plugged into the WAN port of the Airlink router (not one of the 4
available LAN ports).

--
Merv Porter [SBS-MVP]
============================


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:%23AX%23mfqPJHA.4008@xxxxxxxxxxxxxxxxxxxxxxx
Hey Merv,
OK so I think i'm almost there again. Followed your suggestions.

This setup is the Airlink wireless attached to the 5-port switch?
YES

Assumption: the DSL router-modem is 192.168.1.1

If so, try this...

LAN IP Address: 192.168.2.1
Static IP Address: 192.168.1.2
Static Subnet Mask: 255.255.255.0
Static Gateway: 192.168.1.1
Primary DNS: 192.168.1.1
Secondary DNS: 192.168.1.1

Changed my laptop IP to 192.168.2.10 and the wireless to
192.168.2.1.and am able to connect directly to the wireless.
Deleted to old network. Created a new one and changed channels.
Select WPA-PSK

So now I am ble to connect to the AirLink wireless router either
directly with a cable or I'm also able to get to the administration
page via 192.168.2.1 via wireless. Checked my laptop IP settings
and I am getting

Dynamic IP 192.168.2.109
Subnet Mask 255.255.255.0
Gateway 192.168.2.1

So all looks good. Only problem is I can't get to the internet. Any
ideas? I've got no firewalls running. My Internet/Connections/LAN
Settings is set to "Automatically detect settings".




"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:eK8KD6gPJHA.2348@xxxxxxxxxxxxxxxxxxxxxxx
Are you using WPA-RADIUS authentication on the wireless router?
Should be WPA-PSK.

Also, what is the model number of the Airlink router?

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:eHzqNtgPJHA.4776@xxxxxxxxxxxxxxxxxxxxxxx
The error message I get when trying to connect to the wireless
network is "Windows was unable to find a certificate to log you
onto the network "wireless network name".


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:%23z$EWqgPJHA.4312@xxxxxxxxxxxxxxxxxxxxxxx
Looks like the NG does not allow me to attach this word
document. Can I eamil it to you somewhere else? Thanks.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:O1KPnPgPJHA.4224@xxxxxxxxxxxxxxxxxxxxxxx
This setup is the Airlink wireless attached to the 5-port
switch?

Assumption: the DSL router-modem is 192.168.1.1

If so, try this...

LAN IP Address: 192.168.2.1
Static IP Address: 192.168.1.2
Static Subnet Mask: 255.255.255.0
Static Gateway: 192.168.1.1
Primary DNS: 192.168.1.1
Secondary DNS: 192.168.1.1

----------------------------------------------------------
Internet
|
DSL Modem-Router
| |
| | Switch
| | Airlink Router (static, WAN side, 192.168.1.2)
| ||
| | Airlink Router (LAN side, 192.168.2.1)
| | | |
| Wireless clients
|
SBS External NIC (192.168.1.3)
||
SBS Internal NIC
||
Switch
| | | | |
SBS LAN Workstations
----------------------------------------------------------

--
Merv Porter [SBS-MVP]
============================


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:u9xt3EgPJHA.3884@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Merv. you're the greatest. Here is what I see and what
I did.

LAN IP Address: 192.168.2.1
Static IP Address: external static ip
Static Subnet Mask: 255.255.255.248
Static Gateway: external gateway IP
Primary DNS: (points to my mail server providors DNS servers
(SBS Servers forwards DNS requsts to same IP's)
Secondary DNS


OK so now I'm almost there I think. I did the above and can
now see my wireless network when I do a search. It shows it is
a "security-enabled wireless network (WPA)". however when I go
to connect it shows all bars connected but appears it is in a
"Validating Identity" state.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:OWxkVyfPJHA.4708@xxxxxxxxxxxxxxxxxxxxxxx
I believe the Airlink has default IP of 192.168.1.1. Connect
the Airlink wireless unit directly to a "non-domain" spare
laptop or workstation (give the laptop a static IP of
192.168.1.10) and access the Airlink web interface by typing
in 192.168.1.1 in a browser window. Now change the IP scheme
of the Airlink to 192.168.2.x. Then change the laptop IP to
192.168.2.10. You should be able to get backup to the Airlink
web interface now. Now turn on DHCP for the Airlink and set
the WAN IP to (static) 192.168.1.2. You may have want to
select WPA Personal (TKIP passphrase) for the security of the
Airlink wireless. Then connect the Airlink to the 5-port
switch, set your laptop to get an IP automatically and test to
see if you can get a connection.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:%23LxRrjfPJHA.4152@xxxxxxxxxxxxxxxxxxxxxxx
Hey Merv thanks for the input. My problem is that I can't
get to the browser interface of the wireless router and
therefore cannot input any information.


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote
in message news:%233U%23vyePJHA.4916@xxxxxxxxxxxxxxxxxxxxxxx
I suspect it the "LAN side" of your DSL modem-router that is
192.168.1.1. If you can't set the Airlink up as a WAP
(Wireless Acccess Point), you may need to use it as a router
with it's WAN IP set to 192.168.1.2 (static with GW
192.168.1.1); then change the Airlink's LAN side IP range to
192.168.2.x with the LAN side of the wireless router set to
192.168.2.1. After that, turn on DHCP for the wireless
portion and test. At that point, a wireless client should
get an IP address of 192.168.2.x.

--
Merv Porter [SBS-MVP]
============================


"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:O$jPgVePJHA.5044@xxxxxxxxxxxxxxxxxxxxxxx
OK so again I can ping 192.168.1.1 however I can get a
repy from the defualt IP whether or not the wireless is
plugged in or not. So there must be another device out
there I'm getting a reply from.
I'm using my laptop with a static IP and a direct
connection to the 10/100 5-port switch.


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote
in message news:%23maWyBePJHA.4304@xxxxxxxxxxxxxxxxxxxxxxx
Attach the Airlink to a port on your 5-port switch; give
it a static IP in the same range as the DSL router's LAN
side and a gateway of the DSL router itself; turn off
any DHCP service on the DSL router's LAN side; turn on
the Airlink's DHCP service; test to see if a laptop
pick's up a wireless connection from the Airlink.

--
Merv Porter [SBS-MVP]
============================

"SBS Golfer" <Mr.Bogus@xxxxxxxxxxxxxxx> wrote in message
news:uAU605dPJHA.588@xxxxxxxxxxxxxxxxxxxxxxx
I got a AirLink 101 54 Mbps 802.11G Wireless Router I
want to attach to my SBS network. I'm a bit unsure as to
where I need to place the router to work best. Here's my
environment......

SBS 2003 Premium SP2 w/2 Nics
ISA 2004 SP3

We use a 1.5MB T1 DSL connection for our internet
access. Here is the network topology layout...........

Inbound Internet --> DSL Router --> 10/100 5-port
Switch --> External NIC SBS Server ---> Outbound
Internal NIC SBS Server ---> 1GB Switch ---> Patch
Panels

Now I use the 5-port Switch so that I can utilize my
additional external IP's for testing and being outside
the firewall. I have 2 other Windows 2003 Standard
member servers that I connect directly into the 1GB
Switch.

So my question is where along the line do I place the
wireless router. I tried removing the 10/100 5-port
switch and placing it there. I also tried connecting it
to an available port on the 10/100 5-port Switch which
would be outside my firewall which is ok for me.

I would like to use this so that we can have wireless in
our conference room to accomodate guests and clients who
have laptops.







































.

Relevant Pages

  • Re: Router/Wireless Install
    ... >> in when you connected to the wireless. ... SBS Standard is just allowing the outbound connection to the Internet ... >> - Best security is WPA2 with IAS authentication. ... > SBS or the router to correct the problem. ...
    (microsoft.public.windows.server.sbs)
  • Re: Networking Question - VLANs on SBS 2003 Premium SP1
    ... DHCP running on the router. ... Set the DHCP on the router, to make a exclusion of IP range. ... you can set the SBS use fix IP by run the CEICW. ... all gust wireless clients will get IP address from DHCP on the ...
    (microsoft.public.windows.server.sbs)
  • Re: Networking Question - VLANs on SBS 2003 Premium SP1
    ... DHCP running on the router. ... Set the DHCP on the router, to make a exclusion of IP range. ... you can set the SBS use fix IP by run the CEICW. ... all gust wireless clients will get IP address from DHCP on the ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect a Wireless Router to my SBS Network
    ... What is the model number of the Airlink router? ... The switch may not even be necessary unless it serves some purpose for you. ... This should allow your wireless clients to remain outside your network ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect a Wireless Router to my SBS Network
    ... you should have the cable that comes from the DSL modem-router plugged ... This setup is the Airlink wireless attached to the 5-port switch? ... So now I am ble to connect to the AirLink wireless router either directly ...
    (microsoft.public.windows.server.sbs)
Loading