Question
-
CreatorTopic
-
June 15, 2011 at 4:21 pm #2210472
Network gurus, can you help segment LAN using router?
Lockedby kratasek · about 12 years, 3 months ago
Folks, after many years abroad I came home and this is what I see. An antenna on the roof, ethernet cable from the antenna to a RJ-45 coupling, plugged into an electrical outlet, ethernet cable from the coupling to a 8-port switch. I’m guessing I have a microwave connection to my ISP, the “powered” coupling is a home made PoE injector powering the antenna and the whole setup is part of my ISP’s local network. Like my house was just another room in their building. All of my equipment is getting IP 192.168.1.xxx after plugging into the switch. I have a lot of personal stuff on my network, several NAS device and so on and I assume the ISP can easily see all of it..
I want to completely separate my home network from my ISP’s and add wireless. I have a Linksys WRT610N router. Can this be done? Can someone please advise me as to how?Topic is locked -
CreatorTopic
All Answers
-
AuthorReplies
-
-
June 15, 2011 at 4:21 pm #2845899
Clarifications
by kratasek · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Clarifications
-
June 15, 2011 at 5:06 pm #2845895
Simple really
by oh smeg · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Plug in the Ethernet Cable from the 8 Port Switch to the Uplink Port of the Router and then with a Ethernet Cable setup the Router and if you want/need to have the Wired and Wireless LAN’s communicate with each other bridge them in the Routers Setup.
Then from the Wired LAN Connections on the back of the router run a Ethernet Cable to the 8 Port Switch. That will isolate the Internal LAN from the Public side of the LAN.
Col
-
June 16, 2011 at 6:21 am #2845852
And if you want for extra security, add a SW firewall to your PC
by markp24 · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Hi,
you may want to also ensure you have a firewall enabled on your PC, (i tend to like Zone alarm)
-
June 16, 2011 at 8:09 am #2845843
We are each ‘another room’ in our Internet provider’s office…
by tekywanabe · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Having worked with microwave radios in the past to provide last-mile Internet access solutions, then it’s not unlikely that the ‘RJ-45 coupling’ is itself connected to another configurable device with at least 2 IP addresses….one facing the ISP and the other to serve as the gateway for your network. If you do a tracert to an external website or IP address, you may be able to see what the IP address facing your ISP is.
I guess we could say that every subscriber to a broadband provider or ISP is actually just ‘another room’ in the provider’s office in a manner of speaking… 🙂 -
June 16, 2011 at 8:43 am #2845839
Still a bit confusing..
by kratasek · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Thanks much everybody, appreciate your advice..
What would happen if I took out the switch and plugged that ethernet cable into the WAN port of the router? How does the router’s firewall work in this mess? Is the ISP gonna know that I put the router on the network? I obviously don’t want to create any problems for them.. And lastly, does RIP have to be enabled on the router?
I know, you probably say that I’m overthinking this but I was never faced with this situation before, I’m sure some of you were..
thanks again..
Mike-
June 16, 2011 at 3:28 pm #2845807
Reponse To Answer
by spitfire_sysop · about 12 years, 3 months ago
In reply to Still a bit confusing..
1. yes, do that.
2. Yes the router firewall will work. It filters trafic between the dish and your switch in the prescribed setup.
3. They certainly could. The only way to fool them is to spoof the MAC address of the device that they are expecting to see on the other end.
4. Directly connected networks come first in the routing table with no routing protocol required. (RIP = NO)
-
-
June 16, 2011 at 2:18 pm #2845814
Step by step.
by alpha_dog · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
First, plug your ISP’s connection, the one going to the PoE devise at the wall plug into your router’s WAN port, which in your case is labelled Internet. Plug the rest of the devices into the LAN side of the house; the rest of the ports.
Optional, but a good way to keep surprises to the minimum, set your router configuration to the default (soft reset).
Next change your internal IP address to something other than the 192.168.1.x it gets from the ISP device. 192.168.0.x is fine. Set the router’s IP at 192.168.0.1 and make sure DHCP is turned on with a sufficient pool of addresses for your devices.
Lastly, change the administration password to the router as well as the wireless settings to reflect the desired security.
Congratulations you are done.
-
June 17, 2011 at 3:46 am #2845773
Reponse To Answer
by tekywanabe · about 12 years, 3 months ago
In reply to Step by step.
Better still, he could turn off DHCP, use a 10.0.0.x subnet for his own LAN and assign static IP addresses depending on the number of devices he’s got and whether there’ll be a lot of traffic (I mean devices joining and leaving the network…which I doubt based on the setup he’s described)
-
-
June 17, 2011 at 6:54 am #2845759
Use a different subnet to avoid confusion
by oldbaritone · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Your router will get a 192.168.1.x address on the WAN side.
I ended up setting my internal network to the 172.16-31.0.0 (172.16/12 prefix – I use 172.22.33.x) so there is no confusion about which addresses came straight from the ISP and which are on the internal subnet. If you’re going to stick with the 192.168.x.x subnet, pick a recognizable number as your own, like 192.168.150.x or 192.168.250.x – something that is not generally used by ISPs or unconfigured consumer routers, like 0, 1, 2, or 100.
-
June 18, 2011 at 9:41 am #2845689
Thanks
by kratasek · about 12 years, 3 months ago
In reply to Network gurus, can you help segment LAN using router?
Spitfire_Sysop, Alpha_Dog, TekyWanabe and lastly oldbaritone, all of you guys deserve a big cheers for taking the time answering my question. I’m gonna set the whole deal up tomorrow and will definitely post results here..
thanks again everybody-
August 4, 2011 at 9:07 pm #2901535
Reponse To Answer
by thenetnanny · about 12 years, 1 month ago
In reply to Thanks
very curious about the issues brought up in this setup, how did it turn out?
-
-
July 14, 2011 at 12:46 pm #2844171
WISP and you
by will_smith · about 12 years, 2 months ago
In reply to Network gurus, can you help segment LAN using router?
IMO, its weak that your wireless internet provider is NATing a private address to you. These steps above are great. I have worked for a wireless internet provider, and i would be embarrassed to host a service where i could not promise each customer their own unique public address. IF one person within that WISP company gets black-listed and blocks the ip address, everyone behind this provider will no longer have access to the internet. I would suggest your contact your provider and make them give you a public ip address.
-
September 21, 2011 at 10:01 am #2895981
Shame on me, lost my manners :-)
by kratasek · about 12 years ago
In reply to Network gurus, can you help segment LAN using router?
It’s been forever and I forgot to tell you guys the resolution to this. Everybody involved, thank you one last time for all the good replies. So this is what I did:
I ended up talking to my ISP about what I wanna do anyway, just to make sure there’s no surprises. I was told, that there is an actual router inside the antenna with a DHCP server, hence the 192.168.1.x addresses I was getting. He told me just like some of you did to take the switch out and plug the ethernet cable feeding it to a WAN port of my router and change the router IP to a 192.168.100.1 so there’s no conflicts. Everything else stays the same, just like I had it when I was on cable in the US.will_smith – that’s a legit concern, do you think that with the fact, thant there’s a router inside the antenna itself, I actually have my own public address? I checked the iplookup on flashfxp.com and got 217.66.183.xx So it looks fine, right?
Everybody, thanks once more, it’s good to be part of a community that helps you..
-
-
AuthorReplies