Netgear DG834 and Multiple Internet IP Addresses

Hi all,

I've recently had another 3 IP addresses added to my broadband
connection bringing the total to 4 usable IP addresses for my
connection. This is mainly used to provide HTTP on one server and HTTPS
+SPOP3 on another. However, I have a Netgear DG834 as the ADSL modem/
router on my network, and it does not seem to provide an option for
setting the netmask of the external IP address. As a result, I can
only use traffic on one IP address at the moment.

Does anyone know a way of setting the configuration on the router so I
can change the netmask? I's presuming it may be possible to login via
busybox and change the netmask there, but restarting the router
obviously wipes any comfiguration done of the router while the kernel
is loaded in its RAM, so I'm looking for a more permanent solution.

Regards,
Ronald.

On 9 Mar 2007 01:33:30 -0800, "rmacd" <(E-Mail Removed)> wrote:

> I've recently had another 3 IP addresses added to my broadband
> connection bringing the total to 4 usable IP addresses for my
> connection. This is mainly used to provide HTTP on one server and HTTPS
> +SPOP3 on another. However, I have a Netgear DG834 as the ADSL modem/
> router on my network, and it does not seem to provide an option for
> setting the netmask of the external IP address. As a result, I can
> only use traffic on one IP address at the moment.

The way my ISP does this is to send routing of the assigned IP addresses
via the WAN address which is separate and additional. So I just have the
Netgear router's Basic Settings use "Get Internet IP Address Dynamically
From ISP" for the WAN side, disable NAT and have the hosts connect to the
router with each using one of the allocated IP address. If you have
enough addresses the router can assign them from the pool with DHCP.

Getting just 4 addresses is not so useful. If you were to make them into
a LAN (assuming they are sequential addresses on a correct boundary) you
will lose the network address and broadcast address plus a LAN address for
the router as the LAN gateway, so not much left! I asked my ISP for 16
addresses and so I get 13 LAN hosts with public addresses as well as
losing the three for those housekeeping needs. Sorry Telewest is so mean
with their addresses. Without being able to LAN your addresses I guess
your hosts will route inter-host traffic via your ISP and that may eat
into any limited monthly traffic allowance.

One fudge is to use a larger netblock which includes addresses you have
not been assigned. Then your LAN address and broadcast address can be
outside the ones assigned. That will prevent you routing packets to any
real external IP address within that netblock, but as those are probably
just other Telewest subscriber addresses that may be a very small price.

Tony

Anthony R. Gold wrote:

> On 9 Mar 2007 01:33:30 -0800, "rmacd" <(E-Mail Removed)> wrote:
>
>> I've recently had another 3 IP addresses added to my broadband
>> connection bringing the total to 4 usable IP addresses for my
>> connection. This is mainly used to provide HTTP on one server and HTTPS
>> +SPOP3 on another. However, I have a Netgear DG834 as the ADSL modem/
>> router on my network, and it does not seem to provide an option for
>> setting the netmask of the external IP address. As a result, I can
>> only use traffic on one IP address at the moment.
>
> The way my ISP does this is to send routing of the assigned IP addresses
> via the WAN address which is separate and additional. So I just have the
> Netgear router's Basic Settings use "Get Internet IP Address Dynamically
> From ISP" for the WAN side, disable NAT and have the hosts connect to the
> router with each using one of the allocated IP address.

Agreed, the WAN IP will pick up its address via DHCP and your ISP will route
traffic for your static IP addresses down the same wire.

My experience with this router is that you can switch off NAT but not the
firewall. And the firewall can only be set to DMZ all traffic to a single
IP address.

What I would advise is a D-Link DSL-524T. You can switch off NAT and the
firewall. Then on the LAN side of this router set it up with the little
subnet you have been assigned and plug in one or more heftier routers which
will then handle firewalling and NAT for a LAN. You could also plug your
web server with an external IP address into the LAN side of the D-Link.

Kev

"kevin bailey" <(E-Mail Removed)> wrote in message news:essl89$58e$1$(E-Mail Removed)...
> Anthony R. Gold wrote:
>
> > On 9 Mar 2007 01:33:30 -0800, "rmacd" <(E-Mail Removed)> wrote:
> >
> >>... However, I have a Netgear DG834 as the ADSL modem/......
>

> My experience with this router is that you can switch off NAT but not the
> firewall. And the firewall can only be set to DMZ all traffic to a single
> IP address.

The latest firmware (V4.01.20 ) for the Netgear DG834G Version 3 added
an option to disable both NAT and Firewall.

( http://documentation.netgear.com/dg8...M03-04-15.html

http://documentation.netgear.com/dg8...M03-04-16.html )

On Sat, 10 Mar 2007 13:57:29 -0000, "Mel" <(E-Mail Removed)>
wrote:

> The latest firmware (V4.01.20 ) for the Netgear DG834G Version 3 added
> an option to disable both NAT and Firewall.

AFAIR disabling of NAT and the Firewall rules has been available for all
versions of DG834, and for as long as I have used these boxes, which is 2
years and back to firmware v1.05.00.

Tony

On Sat, 10 Mar 2007 17:10:16 +0000, "Anthony R. Gold"
<not-for-(E-Mail Removed)> wrote:

> AFAIR disabling of NAT and the Firewall rules has been available for all
> versions of DG834, and for as long as I have used these boxes, which is 2
> years and back to firmware v1.05.00.

Whoops, 2004 was three years ago.

Tony

"Anthony R. Gold" <not-for-(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
> On Sat, 10 Mar 2007 17:10:16 +0000, "Anthony R. Gold"
> <not-for-(E-Mail Removed)> wrote:
>
> > AFAIR disabling of NAT and the Firewall rules has been available for all
> > versions of DG834, and for as long as I have used these boxes, which is 2
> > years and back to firmware v1.05.00.
>
> Whoops, 2004 was three years ago.
>
> Tony

There might be on a DG834 V1 & V2, I wouldn't know.

I don't recall there being an option to disable the firewall on my DG834G
version 3 model with the factory supplied firmware, of course I may well
be mistaken,

But:-

http://kbserver.netgear.com/release_notes/d103043.asp

"5. Added a checkbox to disable the firewall with Network Address
Translation (NAT) disabled. If the firewall is disabled with NAT disabled
the protections normally provided to your network will be disabled."



And the disable firewall option is not shown on the graphic in the older manual:-

http://kbserver.netgear.com/pdf/dg83...al_03Jun05.pdf

On Sat, 10 Mar 2007 18:04:23 -0000, "Mel" <(E-Mail Removed)>
wrote:

> I don't recall there being an option to disable the firewall on my DG834G
> version 3 model with the factory supplied firmware, of course I may well
> be mistaken,

The default has always been no firewall rules on outbound services and to
disable the default rule which blocks inbound service one has always been
able to add rules to allow all services for each LAN/local address.

Tony

On 3ÔÂ9ÈÕ, ÏÂÎç5ʱ33·Ö, "rmacd" <ronky...@gmail.com> wrote:
> Hi all,
>
> I've recently had another 3 IP addresses added to my broadband
> connection bringing the total to 4 usable IP addresses for my
> connection. This is mainly used to provide HTTP on one server and HTTPS
> +SPOP3 on another. However, I have a Netgear DG834 as the ADSL modem/
> router on my network, and it does not seem to provide an option for
> setting the netmask of the external IP address. As a result, I can
> only use traffic on one IP address at the moment.
>
> Does anyone know a way of setting the configuration on the router so I
> can change the netmask? I's presuming it may be possible to login via
> busybox and change the netmask there, but restarting the router
> obviously wipes any comfiguration done of the router while the kernel
> is loaded in its RAM, so I'm looking for a more permanent solution.
>
> Regards,
> Ronald.

Good!
http://fy4.net/03.htm