Static Ip Business uncapped account

[Greglsh]

Hi

We are looking at putting in a static ip uncapped business adsl account. What I wanted to ask is why do all the isp's want to sell or loan you a billion/cisco router with the setup. We already have a Netgear adsl router with all our port forwarding and firewall rules which has been working fine for the last 5 years.

If they supply you with their router I believe that you do not have access to the router(locked), so how do you do custom changes to the port forwards ect.

Please can somebody tell me why you need their equipment and why we can't just put the static ip into our exisiting router.

Thanks

 

[graviti]

Well, you normally get 5 IP addresses, and they are all passed through the router, so you can give one machine which has port forwards its own static IP, and just make sure firewall is on. Most companies who didn't have static IPs probably only had 2 or 3 machines that had stuff being forwarded. But for example, we have 3 different machines offering port 80 interfaces and one of them is actually a reverse proxy. So port forwarding rules would definitely not have helped us. The static IPs are for bigger infrastructure than one IP with forwarding.

 

[ambo]

Please can somebody tell me why you need their equipment and why we can't just put the static ip into our exisiting router.

Your Netgear does not support the protocols required to get the static IP service. Thanks to the convoluted way in which Telkom runs their ADSL network the ISPs have to use advanced routers with a very specific configuration to get the static IPs working. They provide the router preconfigured and locked down to avoid a situation where the configuration gets corrupted and you can't connect.

 

[Greglsh]

Thanks all

When I enquired about the router the isp's supply they tell me that you get a public ip on the lan port as well. What other device do you put between there router and our private (192.168.1.??) internal network range.

Thanks for the valuable info

 

[Greglsh]

We have been told to use the Billion 7402x router. What I wanted to find out is what device do you put between the Billion and your "internal network". What we have been told is that the "lan" port on the billion is also allocated a static ip in the range of 196.45.67.XX (this is just an example). We have an internal network ip range of 192.168.2.XX. What do we use to translate from the local ip (192.168.2.XX) to the lan(196.45.67.XX) on the lan port on the Billion.

Am I correct in saying any router with an RJ45 wan port. Which would then nat to the wan port from the internal lan.

Anybody running this sort of setup that can give me some pointers.

Thanks

 

[graviti]

Why would you get static IPs, if you have no idea what you are using them for?

You would assign public IP addresses to Internet facing servers. One of them could be a gateway, which would do the NAT for your internal network. Another could be a company email server, another a Apache/IIS HTTP server, etc.

You were doing port forwarding before. What were you forwarding and how many machines were being forwarded to.

Basically. Why do you want static IP addresses. What was your purpose to getting them? It'll help us help you.

 

[Greglsh]

Why would you get static IPs, if you have no idea what you are using them for?

You would assign public IP addresses to Internet facing servers. One of them could be a gateway, which would do the NAT for your internal network. Another could be a company email server, another a Apache/IIS HTTP server, etc.

You were doing port forwarding before. What were you forwarding and how many machines were being forwarded to.

Basically. Why do you want static IP addresses. What was your purpose to getting them? It'll help us help you.

We have an SBS 2011 server which is running exchange email. What we want to do is allow 3 guys in Cape Town to do outlook anywhere through our adsl line. We have been told to get a digital certificate so as to be able to authenticate these users. We are currently running a dyndns account but the digital certificate providers won't issue a certificate against a dyndns domain name.

What we are trying to do is this: Get a static ip for the adsl account, get the dns records changed to point remote.domainname.co.za to this static ip, issue a digital certificate on the exchange server. At the moment the sbs 2011 server is the only server on the network with an ip of 192.168.2.2.

Hope this is a bit clearer as to what we are trying to do??

 

[ShawnStar]

You can either ask the ISP to create all forwarding rules on the new router and put it in NAT mode, or you must assign a static external IP to your firewall which you place behind the new router to do the NAT part and forwarding....

Not a good idea to assign public IP's to any servers. You assign the IP's to your firewall and forward the requests to the internal servers, ie incoming traffic to external IP 196.*.*.* on port 25 must be forwarded to your internal 192 IP on port 25 etc

 

[nerf]

We have an SBS 2011 server which is running exchange email. What we want to do is allow 3 guys in Cape Town to do outlook anywhere through our adsl line. We have been told to get a digital certificate so as to be able to authenticate these users. We are currently running a dyndns account but the digital certificate providers won't issue a certificate against a dyndns domain name.

What we are trying to do is this: Get a static ip for the adsl account, get the dns records changed to point remote.domainname.co.za to this static ip, issue a digital certificate on the exchange server. At the moment the sbs 2011 server is the only server on the network with an ip of 192.168.2.2.

Hope this is a bit clearer as to what we are trying to do??

your can make remote.domainname.co.za as a CNAME record that points to your DynDNS name, perhaps try that.