 | want to open up LAN IP address this is a little deeper than setting up a "pinhole"...
My ISP (Pacific Bell/SBC) gave me a Cayman 3220. I have 5 static IP addresses, but they are on the LAN side of the routher... The WAN and LAN sides are DIFFERENT networks - WTF?
Is there some way I can configure the CAYMAN to be "wide open" for all my static IP addresses?
I have a dedicated Firewall (with DMZ) between the Cayman, and my Internal network. I wanted to use my static IP addresses to set up web servers, FTP servers, and email bastion/forwarding.
I want the cayman to be "wide open", so that I can manage security at my dedicated firewall - and set up a DMZ.
Any and all hints are appreciated!
wwwgeek |
|
 uccPremium join:2000-09-25 Marietta, GA | Did you see this thread, or are you talking about something else? »Multiple Static IPs on 3220H with Static Routes. |
|
 leevisGrowing Older But Not UpPremium,ExMod 2001-04 join:2000-10-28 Pascagoula, MS
| reply to wwwgeek If you were provided you with 5 static IP for the your PC's and an IP address for the WAN side of the Cayman (that's in a different subnet), that's the correct setup to use the 5 static IP's. Setup is very easy:
1. From the Cayman browser interface, click "Ethernet (LAN)" and assign one of your Static IP's to the Cayman (unless they have given you a specific LAN side IP address. If that's the case, us it instead. DO NOT use the WAN IP address here!).
2. Assign each PC an IP address from your pool of 5 statics. Make sure that you set the Gateway and DNS addresses on each PC to the IP address you gave the Cayman in Step 1.
3. From the Cayman browser interface, click "DSL Port (WAN)". Click "Configure" next to the VCC that corresponds to your ISP entry (probably VCC1).
4. Set "NAT" to "off".
5. If your WAN address is static, enter it in the "Local Address" field. If it's dynamic, leave it set to "0.0.0.0" (don't let the work "dynamic" here fool you, you PC's will still be static).
6. If you have been give a gateway address, enter it in the "Gateway" field. If not, leave it set to "0.0.0.0".
That's it. Your PC's will now be seen on the internet and all ports on all PC's are wide open. No need for pinholes, DMZ's, etc. are needed.
Lee -- I've had good days and bad days and going half mad days -- JB [text was edited by author 2001-12-10 23:51:47] |
|
 kmac1Off in new directionsPremium,VIP join:2001-06-07 Port Neches, TX | reply to wwwgeek Here's one even better. Set the first WAN IP in the router. Select EXPERT mode and select BRIDGE. Turn bridging on and enable the 2 interfaces. Leave the PPPoE and VC-VC bridging off. Save and restart. This will allow you to use your other WAN IPs and DHCP with NAT at the same time. Just remember that the WAN IPs will be on the DMZ so make sure and run a firewall on each comp. -- Will trade tech skills for Tool Points!! |
|
 | reply to wwwgeek Just wanted to say that what ADSL Guy is suggesting worked perfectly for me. By turning on bridging I was able to use my static IPs for certain machines and still use the routers NAT to assign private IPs to other machines. We use MS Operating systems so all machines are still on the same LAN as far as Microsoft Printer and File sharing is concerned (I used NetBEUI for sharing but I'm not sure if that was critical). Basically, the static IPs are "wide open" I drove myself crazy for a few days trying to figure out how to accomplish this--Cayman and SBC tech support told me it was impossible but I finally worked my way through it (with the help of a Sys Admin friend of mine) and learned a heck of a lot in the process. Wish I could have talked to ADSL guy back then!
Anyway, if you need any assistance in doing this with your setup I'd be glad to tell you how our system is set up. I'm not a network guru but I believe that I understand enough to help if you need it. |
|
 kmac1Off in new directionsPremium,VIP join:2001-06-07 Port Neches, TX | Well when you're installing and setting up Cayman routers almost everyday you get pretty good at configuring them for all the different ways customers want them. We (ASI) also use the Efficient 5861, but I prefer the Cayman. -- Will trade tech skills for Tool Points!! |
|
 | reply to wwwgeek Here is the answer in case anyone is interested...
It was MUCH easier than I expected...
Since I have a dedicated Firewall BEHIND the Cayman, but in FRONT of my network - and that dedicated firewall is doing NAT...
All I had to do was turn NAT OFF on the cayman - now all of the static IPs are "visible" from the internet.
I hate it when I make things more difficult than they have to be... |
|
 | reply to wwwgeek Ok, lets add a twist to this. How about if you want to use private IPs on ALL of your internal systems? I have the same deal with the 5 static IPs. I would like to be able to use a couple of them and route all traffic from one external Ip to one internal Ip. (ie any traffic coming to public IP1 goes to Private IP1, Public IP2 goes to Private IP2. )
However, according to the config the Lan Ip on the router has to be set up with a different network address than my private network. There is no extra firewall between these systems and the cayman. Because of the nature of our setup and some of the software we use, these machines must retain a private IP. Ideas? Or will I need to put something else behind the cayman for it to work? |
|
 fuzzFuzzPremium join:2000-06-05 FuzzLand | You can do it using IP Mapping in vers. 6.2.0. I don't know if or how you can in vers. 5.x.x. -- In the jungle, the quiet jungle... |
|
 | reply to wwwgeek I was hoping, but what would the config on the router have to be? I do have 6.2 |
|
 | reply to wwwgeek I mean, I know how to set the ip maps, but what would the configuration look like for the router. For the life of me I can't get it straight. |
|
|
|
 fuzzFuzzPremium join:2000-06-05 FuzzLand | I'm not sure what you mean? Are you talking about DHCP settings or NAT settings or DSL connection settings? Do you want to start from the beginning? -- In the jungle, the quiet jungle... |
|
 | reply to wwwgeek Ok I'll start a new thread with more specific details. Man you are a big help, took me a week to get that upgrade key. The whole Netopia/Caymen merger thing has them running in circles. I did find that the Netopia people were VERY happy to help, while the cayman folks were a little standoffish. Maybe they were pissed. |
|
 fuzzFuzzPremium join:2000-06-05 FuzzLand | Yeah, they're probably all going to lose their jobs. It's always like that when companies merge.
I'll be looking for your new thread.:) -- In the jungle, the quiet jungle... |
|