please help

[mikeleahy]

hi
i have a client who has a building with 80 seats. there are ten companies there with 10 seats each . each company has its own subnet. the only thing they have that is common is the internet. the client wants to put in servers so the companies can host their own websites on them etc. how do i go about this. do i have to have a dmz. how do i secure it??i have no clue where to start

 

[smah]

Personally, I'd get 10 public IP addresses from the ISP and assign one to each company and keep them all seperate. Once people start making public services available, bad things can happen very quickly. Your client will want to protect the 9 companies from the possible mistakes of 1.

There are other alternatives, like having all the companies share one webserver and many other possibilities, depending on what the exact needs are, but if not managed properly, the potential exists for 1 mistake to harm all the others.

 

[mikeleahy]

ok, thanks for that.ten public ips will happen i think. can you explain this.... if i have

http://www.company1.ie

pointing to the static ip on the router, how will

http://www.company2.ie

web traffic get throug the router if the router can have only one ip????should i use a dmz or one to one nat... and do you have any idea on how to secure and setup the IIS. sorry for all the questions. im under pressure

 

[smah]

It sounds like you're trying to do a lot with a little. Be sure to think everything through about your approach to this problem. Perhaps I'm not envisioning what you intend. You keep mentioning one IIS server - will only 1 of the 10 be using this? Do you expect the 10 companies to 'see' each other or remain entirely seperate? Will the client who owns the building be managing & maintaining the 10 seperate (or 1 combined) networks or is each company expected to take care of themsleves. There is a lot to consider here.

For my intial suggestion, you'd use probably set each company with their own router.

However, 'One to one Nat' sounds like you have a RV series Linksys router. Depending on which one you have and what your final plans are, you could concievably set each company with a seperate Vlan (maximum of 4, 8, or 16 depending on model) and if only 1 company needs the server, just put the server in the DMZ. This configuration would only really need 1 public IP address. Again, what you're after is not something to undertake lightly. You really need to define the security, capablility, & functional criteria before going any further.

 

[mikeleahy]

sorry for delay
each company will b totally seperate and will have their own IIS and host their own web site . the client who owns the building will be maintaining the infrastrucutre via us.
each company will have its own vlan and will not be routed between each other. they will access the same router just to get to the internet....