Cable Modem with Static IP

Could someone please recommend a possible solution using what we have?

Currently we have one static IP address from our cable moden provider (Road
runner). They provided their cable modem which we attached our Linksys
router to. We only have 5 computers so this was feasible at the time;
however we now need 2 static IP address. Now, the Linksys does not have the
capability forward to certain public ip addresses to certain machines
(correction - does not know to forward HTTP request to certain IP). We will
have two IIS servers. One is Exchange and one is our true web server. So
we have 2 public - one going to Exchange HTTP and one going to HTTP of our
other web server.


QUESTION:
=========
What device could I use in conjunction with this cable modem that will allow
me to do a ONE to ONE NAT?

Does anyone know if the SonicWall TZ 170 (
http://www.sonicwall.com/products/tz170.html) this - wasn't sure as I am not
sure by reading their site.

Thank you for any suggestion - please NO ISAs.

In news:(E-Mail Removed),
Jeff Wells <(E-Mail Removed)> typed:
> Could someone please recommend a possible solution using what we have?
>
> Currently we have one static IP address from our cable moden provider
> (Road runner). They provided their cable modem which we attached our
> Linksys router to. We only have 5 computers so this was feasible at
> the time; however we now need 2 static IP address.

> Now, the Linksys
> does not have the capability forward to certain public ip addresses
> to certain machines (correction - does not know to forward HTTP
> request to certain IP). We will have two IIS servers. One is
> Exchange and one is our true web server. So we have 2 public - one
> going to Exchange HTTP and one going to HTTP of our other web server.
>
>
> QUESTION:
> =========
> What device could I use in conjunction with this cable modem that
> will allow me to do a ONE to ONE NAT?
>
> Does anyone know if the SonicWall TZ 170 (
> http://www.sonicwall.com/products/tz170.html) this - wasn't sure as I
> am not sure by reading their site.

This will work fine - you can have multiple public IPs and use 1-1 NAT etc.
>
> Thank you for any suggestion - please NO ISAs.

I use Cisco PIX and Juniper Netscreen firewalls and both can do it.

"Lanwench [MVP - Exchange]"
<(E-Mail Removed) ahoo.com> wrote in message
news:(E-Mail Removed)...
> In news:(E-Mail Removed),
> Jeff Wells <(E-Mail Removed)> typed:
>> Could someone please recommend a possible solution using what we have?
>>
>> Currently we have one static IP address from our cable moden provider
>> (Road runner). They provided their cable modem which we attached our
>> Linksys router to. We only have 5 computers so this was feasible at
>> the time; however we now need 2 static IP address.
>
>> Now, the Linksys
>> does not have the capability forward to certain public ip addresses
>> to certain machines (correction - does not know to forward HTTP
>> request to certain IP). We will have two IIS servers. One is
>> Exchange and one is our true web server. So we have 2 public - one
>> going to Exchange HTTP and one going to HTTP of our other web server.
>>
>>
>> QUESTION:
>> =========
>> What device could I use in conjunction with this cable modem that
>> will allow me to do a ONE to ONE NAT?
>>
>> Does anyone know if the SonicWall TZ 170 (
>> http://www.sonicwall.com/products/tz170.html) this - wasn't sure as I
>> am not sure by reading their site.
>
> This will work fine - you can have multiple public IPs and use 1-1 NAT
> etc.
>>
>> Thank you for any suggestion - please NO ISAs.
>
>
>

In article <(E-Mail Removed)>, (E-Mail Removed)
says...
> Could someone please recommend a possible solution using what we have?
>
> Currently we have one static IP address from our cable moden provider (Road
> runner). They provided their cable modem which we attached our Linksys
> router to. We only have 5 computers so this was feasible at the time;
> however we now need 2 static IP address. Now, the Linksys does not have the
> capability forward to certain public ip addresses to certain machines
> (correction - does not know to forward HTTP request to certain IP). We will
> have two IIS servers. One is Exchange and one is our true web server. So
> we have 2 public - one going to Exchange HTTP and one going to HTTP of our
> other web server.
>
>
> QUESTION:
> =========
> What device could I use in conjunction with this cable modem that will allow
> me to do a ONE to ONE NAT?

Do NOT use HTTP with Exchange: Use SSL (443) with Exchange

Use HTTP (80) with your Web Server.

Now you can forward those ports to different servers and you don't have
the security risks of using OWA over HTTP anymore.

OWA over HTTP is bad, just remember, HTTP=BAD, HTTPS=GOOD for Exchange.

You could get a DFL-700 that has a REAL LAN and DMZ networks and it will
do what you want, multiple public IP to any LAN/DMZ you want.

--

(E-Mail Removed)
remove 999 in order to email me

In newsG8Sg.2137$(E-Mail Removed),
Leythos <(E-Mail Removed)> typed:
> In article <(E-Mail Removed)>, (E-Mail Removed)
> says...
>> Could someone please recommend a possible solution using what we
>> have?
>>
>> Currently we have one static IP address from our cable moden
>> provider (Road runner). They provided their cable modem which we
>> attached our Linksys router to. We only have 5 computers so this
>> was feasible at the time; however we now need 2 static IP address.
>> Now, the Linksys does not have the capability forward to certain
>> public ip addresses to certain machines (correction - does not know
>> to forward HTTP request to certain IP). We will have two IIS
>> servers. One is Exchange and one is our true web server. So we
>> have 2 public - one going to Exchange HTTP and one going to HTTP of
>> our other web server.
>>
>>
>> QUESTION:
>> =========
>> What device could I use in conjunction with this cable modem that
>> will allow me to do a ONE to ONE NAT?
>
> Do NOT use HTTP with Exchange: Use SSL (443) with Exchange
>
> Use HTTP (80) with your Web Server.
>
> Now you can forward those ports to different servers and you don't
> have the security risks of using OWA over HTTP anymore.
>
> OWA over HTTP is bad, just remember, HTTP=BAD, HTTPS=GOOD for
> Exchange.

Ooh, I didn't notice that or I'd have mentioned it too. Thanks.

>
> You could get a DFL-700 that has a REAL LAN and DMZ networks and it
> will do what you want, multiple public IP to any LAN/DMZ you want.

"Jeff Wells" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> QUESTION:
> =========
> What device could I use in conjunction with this cable modem that will
> allow me to do a ONE to ONE NAT?
> Thank you for any suggestion - please NO ISAs.

You just threw out the best solution.
ISA can do all that with only one Public IP# by just replacing the Linksys
box with the ISA box.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com