IP Addressing Problem!

HI,
I am facing follwoing problem, please sugest:

I have 4 locations all having VSAT connections.
The IP range given by VSAT company is 10.92.16..... to 10.92.16.....
The private network of VSAT company is in IP range 192.168.0...............
My local network is having IP range 192.168.0.1 to 192.168.0.254 used
exclusively at various locations.
NOw if i want to access the private network of VSAT people, i cant do it
because my IP clashes. So i have to disable my local LAN card and access
their private network.
My question is which range of IP i should use for my network at all 4
locations, I want to have VPN, what should be IP scheme at 4 locations.
Please Suggest.

Thanks
Ramandeep

Hi,
I am assuming that VSAT are providing the VPN service for you in which case
your IP ranges in each site will be determined by VSAT and you should use
them.
If you are using VSAT for connection to the internet then you may use any of
the private IPs Eg Site A 192.168.1.0/24 Site B 192.168.2.0/24 and so on for
each site and establish your own VPN.
You should read this first.
http://www.vsat-systems.com/satellit...eleration.html

"Ramandeep" wrote:

> HI,
> I am facing follwoing problem, please sugest:
>
> I have 4 locations all having VSAT connections.
> The IP range given by VSAT company is 10.92.16..... to 10.92.16.....
> The private network of VSAT company is in IP range 192.168.0...............
> My local network is having IP range 192.168.0.1 to 192.168.0.254 used
> exclusively at various locations.
> NOw if i want to access the private network of VSAT people, i cant do it
> because my IP clashes. So i have to disable my local LAN card and access
> their private network.
> My question is which range of IP i should use for my network at all 4
> locations, I want to have VPN, what should be IP scheme at 4 locations.
> Please Suggest.
>
> Thanks
> Ramandeep

If you want to have four sites connected by VPN, they need to be in
different IP subnets. You can use any of the reserved private IP addresses.

192.168.0.0/24 is not a good choice because it is used by a lot of SOHO
routers and also by ICS. I would use four different 192.168.0.x/24 subnets
or four 172.16.x.y/24 subnets. (If you are not familiar with the /24
notation, it simply indicates the length of the netmask. So /24 is a 24 bit
netmask, or 255.255.255.0. /8 would indicate an 8 bit mask, or 255.0.0.0).

Ramandeep wrote:
> HI,
> I am facing follwoing problem, please sugest:
>
> I have 4 locations all having VSAT connections.
> The IP range given by VSAT company is 10.92.16..... to 10.92.16.....
> The private network of VSAT company is in IP range
> 192.168.0............... My local network is having IP range
> 192.168.0.1 to 192.168.0.254 used exclusively at various locations.
> NOw if i want to access the private network of VSAT people, i cant do
> it because my IP clashes. So i have to disable my local LAN card and
> access their private network.
> My question is which range of IP i should use for my network at all 4
> locations, I want to have VPN, what should be IP scheme at 4
> locations. Please Suggest.
>
> Thanks
> Ramandeep

Thanks for the reply,
I am using VSAT for internet and later use VPN for remorte admin only. Can i
use 172.16.....series for 4 locations or not? Because normaly it is not used
much. ICS also use 192.168....
My main concern is that i do not get clashed with VSAT IP range and their
private network range. We can redesign our whole network range. BUt main idea
would be that i am able to access internet(10.92...series given), VSAT
Private network(192.168..used by VSAT ppl for their private network-which i
want to access for internal ftp etc.) and my 4 locations-remote admin.
What type of network adress system should use. 300 Pc's at every location

Thanks


"Bill Grant" wrote:

> If you want to have four sites connected by VPN, they need to be in
> different IP subnets. You can use any of the reserved private IP addresses.
>
> 192.168.0.0/24 is not a good choice because it is used by a lot of SOHO
> routers and also by ICS. I would use four different 192.168.0.x/24 subnets
> or four 172.16.x.y/24 subnets. (If you are not familiar with the /24
> notation, it simply indicates the length of the netmask. So /24 is a 24 bit
> netmask, or 255.255.255.0. /8 would indicate an 8 bit mask, or 255.0.0.0).
>
> Ramandeep wrote:
> > HI,
> > I am facing follwoing problem, please sugest:
> >
> > I have 4 locations all having VSAT connections.
> > The IP range given by VSAT company is 10.92.16..... to 10.92.16.....
> > The private network of VSAT company is in IP range
> > 192.168.0............... My local network is having IP range
> > 192.168.0.1 to 192.168.0.254 used exclusively at various locations.
> > NOw if i want to access the private network of VSAT people, i cant do
> > it because my IP clashes. So i have to disable my local LAN card and
> > access their private network.
> > My question is which range of IP i should use for my network at all 4
> > locations, I want to have VPN, what should be IP scheme at 4
> > locations. Please Suggest.
> >
> > Thanks
> > Ramandeep
>
>
>

Yes, all addresses beginning at 172.16.0.1 through to 172.31.255.254
are reserved for private use, just like those beginning with 192.168 and
10. .

Since you have more than 254 machines at a site, a /24 subnet would not
cover them. So you could use 172.16/16, 172.17/16 etc.

Ramandeep wrote:
> Thanks for the reply,
> I am using VSAT for internet and later use VPN for remorte admin
> only. Can i use 172.16.....series for 4 locations or not? Because
> normaly it is not used much. ICS also use 192.168....
> My main concern is that i do not get clashed with VSAT IP range and
> their private network range. We can redesign our whole network range.
> BUt main idea would be that i am able to access
> internet(10.92...series given), VSAT Private network(192.168..used by
> VSAT ppl for their private network-which i want to access for
> internal ftp etc.) and my 4 locations-remote admin.
> What type of network adress system should use. 300 Pc's at every
> location
>
> Thanks
>
>
> "Bill Grant" wrote:
>
>> If you want to have four sites connected by VPN, they need to be
>> in different IP subnets. You can use any of the reserved private IP
>> addresses.
>>
>> 192.168.0.0/24 is not a good choice because it is used by a lot
>> of SOHO routers and also by ICS. I would use four different
>> 192.168.0.x/24 subnets or four 172.16.x.y/24 subnets. (If you are
>> not familiar with the /24 notation, it simply indicates the length
>> of the netmask. So /24 is a 24 bit netmask, or 255.255.255.0. /8
>> would indicate an 8 bit mask, or 255.0.0.0).
>>
>> Ramandeep wrote:
>>> HI,
>>> I am facing follwoing problem, please sugest:
>>>
>>> I have 4 locations all having VSAT connections.
>>> The IP range given by VSAT company is 10.92.16..... to 10.92.16.....
>>> The private network of VSAT company is in IP range
>>> 192.168.0............... My local network is having IP range
>>> 192.168.0.1 to 192.168.0.254 used exclusively at various locations.
>>> NOw if i want to access the private network of VSAT people, i cant
>>> do it because my IP clashes. So i have to disable my local LAN card
>>> and access their private network.
>>> My question is which range of IP i should use for my network at all
>>> 4 locations, I want to have VPN, what should be IP scheme at 4
>>> locations. Please Suggest.
>>>
>>> Thanks
>>> Ramandeep

Thanks a lot.
Can i get some tutorial online where such information is available about
using which private range.
Second why we dont hear much about using 172...range and mostly 192 is
used..is there specific reason.
Will there be any effect on day to day working of our various locations if
we use 172 addressing system.

Thanks

"Bill Grant" wrote:

> Yes, all addresses beginning at 172.16.0.1 through to 172.31.255.254
> are reserved for private use, just like those beginning with 192.168 and
> 10. .
>
> Since you have more than 254 machines at a site, a /24 subnet would not
> cover them. So you could use 172.16/16, 172.17/16 etc.
>
> Ramandeep wrote:
> > Thanks for the reply,
> > I am using VSAT for internet and later use VPN for remorte admin
> > only. Can i use 172.16.....series for 4 locations or not? Because
> > normaly it is not used much. ICS also use 192.168....
> > My main concern is that i do not get clashed with VSAT IP range and
> > their private network range. We can redesign our whole network range.
> > BUt main idea would be that i am able to access
> > internet(10.92...series given), VSAT Private network(192.168..used by
> > VSAT ppl for their private network-which i want to access for
> > internal ftp etc.) and my 4 locations-remote admin.
> > What type of network adress system should use. 300 Pc's at every
> > location
> >
> > Thanks
> >
> >
> > "Bill Grant" wrote:
> >
> >> If you want to have four sites connected by VPN, they need to be
> >> in different IP subnets. You can use any of the reserved private IP
> >> addresses.
> >>
> >> 192.168.0.0/24 is not a good choice because it is used by a lot
> >> of SOHO routers and also by ICS. I would use four different
> >> 192.168.0.x/24 subnets or four 172.16.x.y/24 subnets. (If you are
> >> not familiar with the /24 notation, it simply indicates the length
> >> of the netmask. So /24 is a 24 bit netmask, or 255.255.255.0. /8
> >> would indicate an 8 bit mask, or 255.0.0.0).
> >>
> >> Ramandeep wrote:
> >>> HI,
> >>> I am facing follwoing problem, please sugest:
> >>>
> >>> I have 4 locations all having VSAT connections.
> >>> The IP range given by VSAT company is 10.92.16..... to 10.92.16.....
> >>> The private network of VSAT company is in IP range
> >>> 192.168.0............... My local network is having IP range
> >>> 192.168.0.1 to 192.168.0.254 used exclusively at various locations.
> >>> NOw if i want to access the private network of VSAT people, i cant
> >>> do it because my IP clashes. So i have to disable my local LAN card
> >>> and access their private network.
> >>> My question is which range of IP i should use for my network at all
> >>> 4 locations, I want to have VPN, what should be IP scheme at 4
> >>> locations. Please Suggest.
> >>>
> >>> Thanks
> >>> Ramandeep
>
>
>