Networks

Ask something
Discussion Locked

Home Network Topology

0 helpful
4 replies

by gmichaels

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am hosting a public web server at home across a DSL connection with my ISP. I have a block of 12 static IPS, most of which are used up by the DSL modem, a firewall/router, WAP, public IP, etc. After all is said and done I have only 4 IPs of the block of 12 available for my web server and PC workstations. In other words I'm all out of IPs. Rather than try to add another block of IPs, I though I could split the network into 2 segments. One segment would be static IPs and the other DHCP both sharing the DSL router as a gateway. I would put the public web server on the static IP side adn my PC work stations on the DHCP side. So I added a 5 port switch between my DSL modem and the firewall/router and then added a second firewall/router connected to the switch thereby splitting the network. That all seemed to work fine until I tried to hit my public web server from the DHCP side of the network. Before DHCP I had to use the hosts file for this routing as my firewall does not support a loopback. My question is, how can I access the public web server from the DHCP side of the network? I am guessing I need to enter a static route from one firewall to the other?

4 replies

by cg it

you bought a block of routable IP addresses from your ISP? 12 of them? how much does that cost? and if it's reasonable, which ISP?

This smells like a TCP/IP routing and subnet test question. Especially with the Home Network Topology title and the DSL connection via a cable/dsl router.

Now, if you do have a consumer level cable/DSL firewall/router, oh say a linksys or D-Link, the default router setup is with DHCP enabled and is on the 192.168.1./24 subnet which allows up to 254 hosts. If your running out of IP address change the subnet from 192.168.1./8 to a /24 which will give you 254 hosts.

by k12linux

As I understand it, your network looks like this now...

Internet
|
Firewall --- Public Visible Servers
|
2nd Firewall
|
DHCP Network (Assumed 192.168.0.1/24)

If that is correct, then make sure that either your main Firewall (attached to the Internet) has a static route for 192.168.0.0/24 pointing to your 2nd Firewall. OR. Set static routes on each of the public-visible servers you want to be able to access from the DHCP subnet.

by tlath1972

You could put a second network card in the web server. put one on the public ip address and one on the private adress and give it a static ip adress. You should either be able to get to it by going out through the internet or you can get to it internally using the internal adress. make sure you have the gateway correct for each of the network cards. The internal should be pointing to the router and the external should be set by default by your isp. Depending on what kind of routers you may have to set up the two routers to be able to talk to each other by setting routes between them.

This discussion is closed to new replies.