supernet/subnet + NAT

I posed a similar question a couple of days ago, may be it was the subject
(mispelled!) of or the way i posed the questions but there wasnt much
feedback. Hopefully, this time around more ppl will see it fit to reply
:-).

Situation: A small university gets 6 public addresses. Has 3 faculties and
i library, each having around 300 workstations.

Issues:

** For the private addresses for lans of each faculty/lib, should i subnet
a class B or take several class C and super net them. If i subnet, then i
can produce subnets with 512 addresses but with huge number of subnets or
i can have subnets with huge number of addresses and smaller number of
subnets. Which of these would be a better option from managing the lan
point of view.

** What kind of services can i run from begind a NAT; eg. can i run
webservers, mail servers from NATed computer (ie having a private IP
address). How do u think i should use the six public IP addresses?

For the routers of each subnet? Webservers?

please feel free to give any addtional insights.

Thank you

ASiF

ASiF wto 11. listopada 2003 01:46 wrote:
> I posed a similar question a couple of days ago, may be it was the subject
> (mispelled!) of or the way i posed the questions but there wasnt much
> feedback. Hopefully, this time around more ppl will see it fit to reply
> :-).
> [...]
> please feel free to give any addtional insights.
>

No, your prevoius post wasn't overlooked.
Are you sure this NG is a proper forum to desing a network of your
Univeristy? Hire some professional to see all local conditions properly.

Yours Virtually,
Zbigniew A.

On Tue, 11 Nov 2003 01:59:19 +0000, Zbigniew A. wrote:

> ASiF wto 11. listopada 2003 01:46 wrote:
>> I posed a similar question a couple of days ago, may be it was the subject
>> (mispelled!) of or the way i posed the questions but there wasnt much
>> feedback. Hopefully, this time around more ppl will see it fit to reply
>> :-).
>> [...]
>> please feel free to give any addtional insights.
>>
>
> No, your prevoius post wasn't overlooked.
> Are you sure this NG is a proper forum to desing a network of your
> Univeristy? Hire some professional to see all local conditions properly.
>
> Yours Virtually,
> Zbigniew A.

LOL. Its actually a small assignment for my class. I am sure if i had to
implement such a network i would consult several consultants rather than
post it to a NG. My primary reason to post was to elicit opinions from ppl
who are already out there and working/implementing such networks. May be i
should have explained better

On Tue, 11 Nov 2003 13:10:29 +1100, ASiF wrote:

> On Tue, 11 Nov 2003 01:59:19 +0000, Zbigniew A. wrote:
>
>> ASiF wto 11. listopada 2003 01:46 wrote:
>>> I posed a similar question a couple of days ago, may be it was the subject
>>> (mispelled!) of or the way i posed the questions but there wasnt much
>>> feedback.[...]
>>
>> No, your prevoius post wasn't overlooked.
>> Are you sure this NG is a proper forum to desing a network of your
>> Univeristy? Hire some professional to see all local conditions properly.
>
> LOL. Its actually a small assignment for my class. I am sure if i had to
> implement such a network i would consult several consultants rather than
> post it to a NG. My primary reason to post was to elicit opinions from ppl
> who are already out there and working/implementing such networks. May be i
> should have explained better

Do your own homework. I'm betting the computer science profs at The
University of New South Wales would prefer that you do. Unless of
course the assignment was to get USENET denizens to give you an
answer. But I don't see how any prof would think that would help you
learn how to solve this problem.

Regardless, good luck with your assigment. Many of us have been there
and done that and got the degree. Not necessarily a CS degree
although for some strange reason we end up in IT jobs and several of
us land in alt.sysadmin.recovery on occasion. ;-)

Gene (e-mail: gene \a\t eracc \d\o\t com)
--
Linux era4.eracc.UUCP 2.4.21-0.25mdk i686
00:01:19 up 9 days, 12:32, 9 users, load average: 0.00, 0.02, 0.04
ERA Computer Consulting - http://www.eracc.com/
eCS, OS/2, Mandrake GNU/Linux, OpenServer & UnixWare resellers

In alt.os.linux.mandrake ASiF <(E-Mail Removed)> wrote:
> ** For the private addresses for lans of each faculty/lib, should i subnet
> a class B or take several class C and super net them. If i subnet, then i

This is entirely up to your tastes. It makes no odds, since the netmask
is all you care about, and you can set that arbitrarily. This class
B/class C idea is just a couple of particular choices of netmask.

> can produce subnets with 512 addresses but with huge number of subnets or
> i can have subnets with huge number of addresses and smaller number of
> subnets. Which of these would be a better option from managing the lan
> point of view.

Depends on how you intend to admin it!

> ** What kind of services can i run from begind a NAT; eg. can i run
> webservers, mail servers from NATed computer (ie having a private IP
> address). How do u think i should use the six public IP addresses?

6 is far too few to do anything sensible with. You'll have to do an
immense amount of NAT for random faculty wanting to telnet and ftp out,
and probably leave the students imprisoned.

If it were me I'd dedicate one external address to getting the mail, and
another to being a DNS server and maybe http server, and use the
remaining 4 for NAT.

You have a problem with http. Every department will want their own http
server, and you haven't got any good way of making them accessible.
You'll have to make subpages on the main http server which redirect
people to particular ports which are forwarded to particular internal
addresses. Yecch.

You have the same problem with ftp, but worse.

> For the routers of each subnet? Webservers?

Peter

On Tue, 11 Nov 2003 08:00:32 +0000, P.T. Breuer wrote:

> You have a problem with http. Every department will want their own http
> server, and you haven't got any good way of making them accessible.
> You'll have to make subpages on the main http server which redirect
> people to particular ports which are forwarded to particular internal
> addresses. Yecch.

Hi PT,

With Apache on linux you can have as many domains as you want and they can
all share the same IP address. For instance, www.domain1.com,
www.domain2.com and www.domain3.com can all point to the same IP address
(1.2.3.4) and, as long as you have Apache configured correctly, the web
surfer will see three different websites. No port forwarding or anything
like that involved.

--
Benny
Remove your rose colored glasses before e-mailing me

ASiF wrote:

> On Tue, 11 Nov 2003 01:59:19 +0000, Zbigniew A. wrote:
>
>> ASiF wto 11. listopada 2003 01:46 wrote:
>>> I posed a similar question a couple of days ago, may be it was the
>>> subject (mispelled!) of or the way i posed the questions but there wasnt
>>> much feedback. Hopefully, this time around more ppl will see it fit to
>>> reply
>>> :-).
>>> [...]
>>> please feel free to give any addtional insights.
>>>
>>
>> No, your prevoius post wasn't overlooked.
>> Are you sure this NG is a proper forum to desing a network of your
>> Univeristy? Hire some professional to see all local conditions properly.
>>
>> Yours Virtually,
>> Zbigniew A.
>
> LOL. Its actually a small assignment for my class. I am sure if i had to
> implement such a network i would consult several consultants rather than
> post it to a NG. My primary reason to post was to elicit opinions from ppl
> who are already out there and working/implementing such networks. May be i
> should have explained better

Okay.... now going completely off-topic:

What's computer science like at UNSW? Advantages? Disadvantages? Good
things? Bad things? etc? I'm finishing school this year and am deciding
between that and UTS. I presume you're doing the normal computer science
course, not the co-op scholarship.

Any ideas would be much appreciated...

Regards
Luke

PS: btw, I don't have any clue as to an answer for the original question