Setting up an internal linksys wrt45g and external linksys befsr81

Hi there,
i have a windows 2003 server with dual nics. i am trying to set up a wirless
wrt54g on the internal subnet and a linksys befsr81 on the external nic. Is
there a way to set up the internal user to access the internet with nat or
should i use forwarding on the internal router.

thanks



Ash

In news:9F319E9E-F9B6-4FE2-9E94-(E-Mail Removed),
Ash <(E-Mail Removed)> stated, which I commented on below:
> Hi there,
> i have a windows 2003 server with dual nics. i am trying to set up a
> wirless wrt54g on the internal subnet and a linksys befsr81 on the
> external nic. Is there a way to set up the internal user to access
> the internet with nat or should i use forwarding on the internal
> router.
>
> thanks

Which router is currently offering NAT? You listed 3 of them including the
2003 server. Is this multihomed server a DC?

If I understand your infrastructure, tt seems like:

Internet -> BEFSR81 -> 2003 Server -> WRT54G

Is that correct?

If so, why not just use the wireless WRT54G as you incoming router instead
of the BEFSR81 and remove or disable one of the NICs on the server?


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

Not sure how? It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Assimilation Imminent. Resistance is Futile.
Infinite Diversities in Infinite Combinations.

The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy.
===========================

Thank you for answering. This is a sandbox environment for testing purposes.
I have a dual nics on the 2003 server. One router (linksys BEFSR81)is on the
external nic configured for internet access. The other router(linksys
wrt54g) is on the internal nic for internal workstations and internal
wireless access. I want to keep the internal network as far away as possible
from intrusion from the outside. Is this possible? I have heard that its not
a good idea to have a multihommed environment on windows 2003 server. Why
??...I would like my server to do NAT for both internal and external clients.

"Ace Fekay [MVP]" wrote:

> In news:9F319E9E-F9B6-4FE2-9E94-(E-Mail Removed),
> Ash <(E-Mail Removed)> stated, which I commented on below:
> > Hi there,
> > i have a windows 2003 server with dual nics. i am trying to set up a
> > wirless wrt54g on the internal subnet and a linksys befsr81 on the
> > external nic. Is there a way to set up the internal user to access
> > the internet with nat or should i use forwarding on the internal
> > router.
> >
> > thanks
>
> Which router is currently offering NAT? You listed 3 of them including the
> 2003 server. Is this multihomed server a DC?
>
> If I understand your infrastructure, tt seems like:
>
> Internet -> BEFSR81 -> 2003 Server -> WRT54G
>
> Is that correct?
>
> If so, why not just use the wireless WRT54G as you incoming router instead
> of the BEFSR81 and remove or disable one of the NICs on the server?
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Having difficulty reading or finding responses to your post?
> Instead of the website you're using, I suggest to use OEx (Outlook Express
> or any other newsreader), and configure a news account, pointing to
> news.microsoft.com. This is a direct link to the Microsoft Public
> Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
> to easily find, track threads, cross-post, sort by date, poster's name,
> watched threads or subject.
>
> Not sure how? It's easy:
> How to Configure OEx for Internet News
> http://support.microsoft.com/?id=171164
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft MVP - Windows Server Directory Services
> Microsoft Certified Trainer
> Assimilation Imminent. Resistance is Futile.
> Infinite Diversities in Infinite Combinations.
>
> The only thing in life is change. Anything more is a blackhole consuming
> unnecessary energy.
> ===========================
>
>
>

In news:AE9984BC-2CC4-4563-9F0D-(E-Mail Removed),
Ash <(E-Mail Removed)> stated, which I commented on below:
> Thank you for answering. This is a sandbox environment for testing
> purposes. I have a dual nics on the 2003 server. One router (linksys
> BEFSR81)is on the external nic configured for internet access. The
> other router(linksys wrt54g) is on the internal nic for internal
> workstations and internal wireless access. I want to keep the
> internal network as far away as possible from intrusion from the
> outside. Is this possible? I have heard that its not a good idea to
> have a multihommed environment on windows 2003 server. Why ??...I
> would like my server to do NAT for both internal and external
> clients.
>

Actually multihomed DCs is NOT recommended because it's effect on AD
registration in DNS.

Honestly, on the same token, I would not use a Windows machine for a router
anyway. It's Windows. Costly. Routers are much cheaper and are dedicated.
Same with NAT devices, they are essentially specialized routers that route
AND translate headers at Layer 4 of the OSI.

You can do that. If you want to route internally, you need to understand how
routing works. NAT translates, where routers purely send the packet on with
translating anything. If you have three segemented networks, it's advised
the edge router is your NAT device and the internal routers are just
routing. To allow access from the internal segments, you need to configure
static routes. Check this example to see what I mean and apply it to your
scenario.

http://fekay.com/SupportBlogs/StaticRouteExample.htm

Ace