IP address setup

[ceebster]

Hi Folks

Sorry if i have posted this in the wrong place - Bit new to this, so bear with me......
I have got involved with a company setting up the internet etc, and now on SBS2003. We have our ADSL on the way, we have 5 IP addresses isued to us as follows (ps i think i ned to get another NIC for the server?)

Router addresses is 82.***.***.1

Useable IP address range 82.***.***.2
I have 5 addresses so i assume

82.***.***.2
82.***.***.3
82.***.***.4
82.***.***.5
82.***.***.6

There is only a router being supplied, so the SBS2003 server will look after the firewall etc. In the first instance when setting up, would you give the server the on the EXT NIC Ip address of 82.***.***.2.

and then the other network card an ip address of 192.168.1.10

I hope this is clear

Thanks

 

[cyberspace]

Worth noting that you have mentioned 6 IP addresses there!

Is there any particular reason why you want the server to have an external IP? Not 100% on this but I would say that that's a bit of a security risk if it's not necessary. What is on this server? AD? DNS etc?

If you have a decent router you are better off using port forwarding/firewall rules and keeping servers & hosts on a private scheme and use NAT to get out.

 

[KiscoKid]

Depending on the capabilities of the router you are using, my preference would be to have this device do your perimeter firewalling and Network Address Translation (NAT).

If this is feasible, you can then allocate your first usable public address 82.***.***.1 to the router. Make sure this device is totally locked down in terms of who can remotely access it, how it responds to ICMP etc.

Then you should hopefully be able to configure NAT on the router also. You can define a static NAT translation for any device on your network that you feel needs to be accessed remotely, e.g. web server, email server, VPN server etc.

LAN users don't need static NAT allocation in general and, as such, you can probably use PAT (sometimes called overloading) to allow them access to the Internet. PAT is where all the local LAN users will actually use the public IP address of the router but will be assigned a different port number on the router to distinguish between each user traffic stream.

HTH