NAT on a private network of a private network

Hi,

Our office runs a private IP address space of 10.0.1.x and uses one of
the generic Linksys router (NAT) for internet access. I am planning to
setup a subnet (for testing purpose) within our office network and would
like to use Windows 2003 as a NAT device for that purpose. My question
is that would the new subnet be able to access the internet (I will be
using 192.168.1.* for the new subnet) with such configuration? I am sure
IP routing would work if private IP address is going from one NAT device
to another NAT device before it goes to Internet.

Thanks

OM <(E-Mail Removed)> wrote:
> Hi,
>
> Our office runs a private IP address space of 10.0.1.x and uses one of
> the generic Linksys router (NAT) for internet access. I am planning to
> setup a subnet (for testing purpose) within our office network and
> would like to use Windows 2003 as a NAT device for that purpose. My
> question is that would the new subnet be able to access the internet
> (I will be using 192.168.1.* for the new subnet) with such
> configuration? I am sure IP routing would work if private IP address
> is going from one NAT device to another NAT device before it goes to
> Internet.
> Thanks

For outbound access? Sure, why not - but I'd recommend that you not have
windows do this. You can put lipstick on a pig, or teach a pig to dance, or
something like that...but, well, you get the picture. Even another cheap and
cheerful Linksys router device would do.

And I'd recommend you get a more robust firewall for your perimeter device;
check out the Sonicwall or Watchguard line, among others. NAT alone is just
a wet paper bag.

If you have two NICs on the server and setup RRAS correctly, the 192 subnet
should be able to access the Internet.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com


"OM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> Our office runs a private IP address space of 10.0.1.x and uses one of the
> generic Linksys router (NAT) for internet access. I am planning to setup a
> subnet (for testing purpose) within our office network and would like to
> use Windows 2003 as a NAT device for that purpose. My question is that
> would the new subnet be able to access the internet (I will be using
> 192.168.1.* for the new subnet) with such configuration? I am sure IP
> routing would work if private IP address is going from one NAT device to
> another NAT device before it goes to Internet.
>
> Thanks

Yes it would work fine if the Win03NAT box uses the Linksys as its default
gateway.

You must also keep in mind that the main network will never know the new
network exists (won't happen, don't go there, forget it). However your new
network can access the main network (in a limited way) as long as the
communication was initiated from the new network.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


"OM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> Our office runs a private IP address space of 10.0.1.x and uses one of the
> generic Linksys router (NAT) for internet access. I am planning to setup a
> subnet (for testing purpose) within our office network and would like to
> use Windows 2003 as a NAT device for that purpose. My question is that
> would the new subnet be able to access the internet (I will be using
> 192.168.1.* for the new subnet) with such configuration? I am sure IP
> routing would work if private IP address is going from one NAT device to
> another NAT device before it goes to Internet.
>
> Thanks

Thanks for all the input.

Lanwench [MVP - Exchange] wrote:
> OM <(E-Mail Removed)> wrote:
>> Hi,
>>
>> Our office runs a private IP address space of 10.0.1.x and uses one of
>> the generic Linksys router (NAT) for internet access. I am planning to
>> setup a subnet (for testing purpose) within our office network and
>> would like to use Windows 2003 as a NAT device for that purpose. My
>> question is that would the new subnet be able to access the internet
>> (I will be using 192.168.1.* for the new subnet) with such
>> configuration? I am sure IP routing would work if private IP address
>> is going from one NAT device to another NAT device before it goes to
>> Internet.
>> Thanks
>
> For outbound access? Sure, why not - but I'd recommend that you not have
> windows do this. You can put lipstick on a pig, or teach a pig to dance, or
> something like that...but, well, you get the picture. Even another cheap and
> cheerful Linksys router device would do.
>
> And I'd recommend you get a more robust firewall for your perimeter device;
> check out the Sonicwall or Watchguard line, among others. NAT alone is just
> a wet paper bag.
>
>

"OM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> Our office runs a private IP address space of 10.0.1.x and uses one of the
> generic Linksys router (NAT) for internet access. I am planning to setup a
> subnet (for testing purpose) within our office network and would like to
> use Windows 2003 as a NAT device for that purpose. My question is that
> would the new subnet be able to access the internet (I will be using
> 192.168.1.* for the new subnet) with such configuration? I am sure IP
> routing would work if private IP address is going from one NAT device to
> another NAT device before it goes to Internet.
>
> Thanks


To add, if you are going to multihome a server, which I disagree and rather
see you get another Linksys or better firewall, just please make sure this
is NOT a domain controller. Multihomed DCs (with more than one NIC and/or
IP) are problematic due to DNS registration of multiple records, which
requires sone registry entries altered and other settings to force it to
work. Otherwise, I guarantee you will be posting back with AD problems.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
(E-Mail Removed)

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker