Help! BT broadband static ips and VPNs

Hello,

I have a really desperate problem with the a VPN connection at my
work....

Problem: We have a ADSL package by Demon Internet, this has been down
since Monday morning due to an unknown fault. Demon have said the
earliest a BT engineer will arrive is 5th April !! This Demon ASDL
line makes a VPN connection to our head office and has static IP
addresses (1 assigned to the Demon Router and 1 assigned our VPN
router)

Backup: Just in case we ever had a problem with our Demon ADSL
service, i also installed a BT broadband network service from BT, with
5 static ip addresses.

How does the BT broadband work with the static ip-addresses? BT have
told be the IP-address range but problem is the ip-address of the BT
router does appear to be a ping-able public ip-address.

They say that the router ip-address is 217.45.149.134 but i can't
ping this address across the internet?
I have assigned another of the static ip-address to our VPN router but
again this is not ping-able across the internet?
I'm i doing something wrong? or does the BT broadband static ip-
address work differently?

Router is a BT Business Hub 2700HGV if this help.

Basic what i need is two visable public ip-addresses to make the VPN
connection with the head office...

ANy suggestions would be a god-send!!

Regards
JAK

On 27 Mar, 17:19, john.ke...@hoerbiger.com wrote:

> I have assigned another of the static ip-address to our VPN router but
> again this is not ping-able across the internet?

That's right - you have set the default gateway of your VPN router to
217.45.149.134 (if that's the router IP BT told you), given it the
subnet mask of 255.255.255.248 and made sure it has an IP address
within that range?

> Router is a BT Business Hub 2700HGV if this help.

OK, go to the 192.168.1.254 address of this router, click on local
network/advanced settings and look for the public network box, enter
your router IP address in there along with your subnet mask. Your
HG2700 will then route this public IP range as well as do NAT for the
192.168 range. However you are still not done, you need to open up
the firewall on your HG2700 for your VPN device. Some new version of
the HG2700 have an "auto firewall open" option in the local network/
advanced setting.

Because you have set the IP address manually on your VPN routers WAN
port it might take the HG2700 router longer to find out it is there
and for the VPN router to appear in the listing of local devices.
Once it is in that listing of local devices, edit its firewall
settings on the HG2700 so it is in DMZ mode (firewall turned off).

If it doesn't appear in the HG2700 device listing straight away then
you have a few options:

1) if you can set the VPN router to pick up it's WAN IP via DHCP then
do so - you can assign it a public IP easily from the HG2700 using the
address allocation and it will appear straight away in the local
device listing

2) set up a continous ping from the VPN router to the HG2700 and vice
versa - to get into advanced section of the HG2700 to do pings, just
go to 192.168.1.254/mdc and look for "network tests"

> Basic what i need is two visable public ip-addresses to make the VPN
> connection with the head office...
>
> ANy suggestions would be a god-send!!

If you get stuck call 08456007020 and ask to be transferred to the
network heldesk (tell the technical helpdesk you need help configuring
static IPs on your BT router).

HTH

Regards

William MacLeod

Hi,
I think there's more to this than first meets the eye IMHO.


>How does the BT broadband work with the static ip-addresses? BT have
>told be the IP-address range but problem is the ip-address of the BT
>router does appear to be a ping-able public ip-address.



>
>They say that the router ip-address is 217.45.149.134 but i can't
>ping this address across the internet?


If you have a range of IPs from BT then they are most likely public
addresses yes.
And the 217.45 address below is not a reserved RFC1918 address, so yes
it's public.

Just because it's a public address doesn't mean you can PING it. To
ping it you'd need to ensure that the router allows incoming ICMP,
which is probably not enabled, and so that's why you can't ping it.

>I have assigned another of the static ip-address to our VPN router but
>again this is not ping-able across the internet?
>I'm i doing something wrong? or does the BT broadband static ip-
>address work differently?

You need to follow through from endpoint to endpoint.
Firstly your "VPN router" as you call it. Needs to be able to go out
through your BT router, so I suspect it needs to have it's default
gateway address either changed, or the advertised static route to the
remote office needs to go via the BT router and not your Demon one.
Don't forget this is the INTERNAL LAN address of the router not the
public facing one.
It may be easier to make sure your BT router's internal IP address is
set to the same as the Demon one, and switch the demon one off for now
if you say the whole connection is stuffed.


Then you may have to do some work at the remote end.

The remote site's VPN router may have a static route pointing back to
your main site based on the demon public IP address range, we don't
have details so can't comment on this.. But be aware you may need to
reconfigure routes at the remote end too.

Enabling ICMP on all the routers wil help you to check IP connectivity
from main site to remote site. I'd focus on that first, then worry
about the VPN tunnel side afterwards.

Hope this helps as starter for 10

Regards
Steve