Discussion Locked

DSL Network

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We presently have a LAN with 253 Public IP Addresses because many of the people need to get to a VPN. We have grown and need to have more people get internet access. So the question is, I think we need to get another DSL line to run over the same switches and backbone. We don't need anymore Public addresses. NAT is fine for the other people. What do I need to get or know to allow 2 DSL's to be available on my LAN. Presently the DSL goes into a flowpoint router. We have no firewall.

9 replies

by timwalsh

You don't mention which router model you have.

Couple of options:

Get your ISP to issue you a larger block of IP addresses and redo your IP addressing scheme.

I question the need for so many public IP addresses just to access a VPN unless some sort of reverse lookup is being done on computers attempting to access the VPN. Is this the case? If not, NAT your entire network. Using a subnet mask of 255.255.192.0 will give you 2 subnets of approximately 16,000 host each. You can addjustthe number in the 3rd octet to give you more subnets of fewer hosts each. But since these are private IP addresses, you don't have to be concerned with efficiency (yet).

If you go with a second DSL line, you will have to get a second router. You would also need a second set of switches/hubs to service your users. This will essentially leave you with 2 distinctly seperate physical networks.

If your router happens to be the 5781 model, you have the capability of setting up 2 seperate subnets. Use your public IP addresses on one ethernet interface and NAT the second one. You will have to get another public IP addresses from your ISP for the WAN side of the second interface.

by iphicles

yes, i would go with answer one. why the need for all the public IP's? combine with NAT or use Citrix or a better VPN solution.

however, if you do decide to get a second dsl line (and another subnet), make sure you use WINS servers on each subnet.

by henrywi

talk to your IPS to give you a large block of ip and used a NAT address take the third octect and convert into 255.255.255.192 that is equal to 2 subnet 1600 host so that will be fine and if you need to expand just use the third octect were you candivide and have more subnet and hostest

This discussion is closed to new replies.