ecavedude <(E-Mail Removed)> wrote:
> Hello All!
>
> I have a situation I need to resolve for a small non-profit. The
> situation
> is rather critical at this point. The user purchased a Static IP
> Package from our local cable company and was provided 5 static IP
> addresses. He was provided with a cable modem and a Cisco 851 Router.
> According to the cable company he can only us the static IP's with
> that router, and he is using 6 PC's and 6 IP Phones that need an IP.
> The router address is the gateway address. The IP's are in the
> 24.89.XXX.XXX and I have 5 other static address's.
>
> How can I use this to make everything work? I have a 2003 SBS server
Note that you should post all SBS-related questions in
microsoft.public.windows.server.sbs....and I suspect you may want to start
lurking in there, as SBS does a lot of things differently.
That said, here are my basic comments -
Your Cisco ought to be doing NAT (network address translation), so you can
use non-routable/private IPs on the LAN. It would be a highly unusual to run
any network with public IPs directly assigned - and if your Cisco is
configured to allow this, it indicates your network security may be a bit
lax! I am not a Cisco guru and don't know the capabilities of this router,
but your network needs to be protected by a good firewall. NAT alone won't
be enough.
If you need every phone to have a corresponding public IP ( which I find odd
& unlikely), you will need more public IPs, obviously, and will need to
create firewall rules to map public to private (such as a one-to-one NAT).
However, if they can use private IPs, then you're probably fine. Check with
the vendor.
Note that your workstations & server should definitely be configured with
private IPs - no public IPs at all, not even for DNS (outside of forwarders
in the DNS server you're running on SBS).
Here are the reserved IP address ranges for private networks:
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
OT, but using a cable modem to share data and voice, even in a small office,
may not be the best plan.
> (Never used it , I am using 2000 Server at the non-profit I work for
> full-time) and five Vista PC's. The user needs a one static IP for
> somekind of video conferencing that provides video conferences
> between schools here and other countries. I can use a port on the
> Cisco 851 for that by just plugging it into the Cisco router and
> providing it one of the IP's I was given.
No - set this up with a one-to-one NAT in the router, and give the device an
IP address on your LAN (192.168.x.x). Open the ports inbound it needs to
communicate for videoconferencing. Do not give anything inside your network
a public IP.
>
>
> If I assign a Static address on the Phone and a Static address on the
> PC's,
> I was able to get everything connected and on the Internet. But, this
> is not feasible because I won't have enough IP's and it just seems
> WRONG to me.
>
> The problem I have is how do I connect everything through the switch
> then to the Cisco 851 and make this work! I need this up tomorrow!
>
> The user locations have one Data Jack, this connects to a VOIP device
> (My first experience with VOIP) and then to the PC's NIC. I have
> figured out how to setup the VOIP device which uses DHCP by default
That's fine
>
> (I was able to figure out how to use Static IP's and it works, but as
> I stated earlier I run out of IP's and it's WRONG).
Don't use static IPs....you don't need them, do you?
>
> I was told by the cable company to connect the users to a switch and
> then, the switch to a port on the Cisco 851 and assign the switch one
> of the addresses I was provided. Then connect all my users to the
> switch. To me it seems I would need to setup the 2003 SBS to be the
> DHCP server and assign the addresses to the LAN. The 2003 SBS server
> is connected to the cisco and has a 24.89.XXX.XXX address.
Ixnay....
>
> I didn't configure the 2003 SBS server
Who did?
> but it seems to be all working
> OK
> even though I can't get any kind of network together unless I use the
> Static IP's provided.
>
> I set the DHCP to use 192.168.0.1 through 150.
Well that's fine because it's private, but if your DHCP scope doesn't match
the subnet you're using for the rest of the network, you can see that this
simply isn't going to work. See above. Your server needs to be on the same
192.168.0.0 network....as do the LAN-facing ports on your Cisco, after it's
configured properly to do NAT.
Frankly, I'd also recommend changing the private IP addressing scheme to
something less commonly used....something like 192.168.5.0/24 would be
better, as it's less likely to be used elsewhere and hence cause a problem
with VPN. SBS has a wizard to change the IP addresses everywhere....as in
everything else SBS, use the !@#$$%% wizards or you'll be sad.
>
> Basically I would like help with the setup of this network. What do I
> configure the users settings too? I want the users on the LAN to get
> their addresses assigned through DHCP so that the phones will work
> and, I have enough IP's to work with for a LAN. And I want to keep
> the Cisco so I can use the Static address they will need.
>
> The final outcome I basically need is to have each user on a LAN with
> Internet access.
>
> I realize I have been stagnant at my current location( been their
> since NT,now on 2000, 2003 SOON) but I am starting another MCSE
> course for 2003 to get up to speed but I need help soon as I will be
> there tomorrow at 7:00AM EST. I will have access to the newsgroup
> while there though my laptop but am hoping someone can help tonight
> (crossing fingers) .
Hope this helps. Not to overstate the obvious, but this is the sort of job
you really ought to allow time to research and plan, so you don't end up
behind the 8-ball like this. Even small companies & nonprofits need some
degree of project planning!
>
> I don't know if Microsoft does this or some would like help me with
> this ,
> I can provide them the documentation that they or their company,
> donated X amount of dollars and it would be tax deductible as we are
> a non-profit for children.
If you want to call PSS you'll have to pay for the call (it's a flat rate),
but hopefully you won't need to. Your ISP and phone vendor should be able to
help you out with this.
>
> If anyone can help please post as soon as possible!
>
> Thanks in advance for any help...it will be appreciated by me and
> MANY others.
>
>
> Rich (ecavedude)
|