Re: [PLUG] WAP DHCP & Cable DHCP and some static IP's

[Lee Marzke <lee@marzke.net>]

Claude M. Schrader wrote:
> Ed,
> I would give the WAP a static IP in the same subnet as the cable
> modem/router, and disable the DHCP server on the wap, and plug everything
> in. Let the cable device manage IPs.
>
> You do not want to plug everything in as is. Having 2 DHCP servers on a
> network may cause problems, and even if it doesn't, it overcomplicates things
> and will make troubleshooting future problems more difficult in the
> future.
> Claude
>   
The existing static IP's can't be inside the range of assigned IP's.

I agree with using one DHCP.  If you want to have static IP's for your
print server use a DHCP server that supports 'static IP's'

For instance the Linksys WRT-54G,  with OpenWRT or DD-WRT firmware will
do this.

If your using web and mail servers inside your office,  you might want
to consider
a multi-zone firewall  and UTM in  place of the commodity cable device
for improved
security.  The cable device wasn't really designed for security for
hosting local servers.

Also putting outside hosted servers ( email + web ) on the same server
as your
DNS and file server is very bad security practice.

You generally put your outside servers in a DMZ (orange) zone so if they
get rooted
they still don't have access to your file servers on your LAN.

I use the free opensource Endian Firewall
http://www.endian.com/en/community/overview/

This does DNS, DHCP,  Transparent Proxy of( DNS, SMTP, Web, FTP ),
virus filtering,  Spam checking,  QoS ( for VOIP )  ,   OpenVPN  and more.


Lee

-- 
"Between subtle shading and the absence of light lies the nuance of iqlusion..."  - Kryptos

Lee Marzke,  lee@marzke.net   http://marzke.net/lee/
IT Consultant, VMware, VCenter, SAN storage, infrastructure, SW CM
+1 484-961-0369  voice         +1 484-348-2230 fax



> On 11:57 Mon 21 Dec     , Ed Ackerman wrote:
>   
>> It's something that is right at the edge of what passes for my brain, but 
>> I need a nudge to accomplish this.
>> There is a cable device (xxx.xxx.xxx.126), can/serves DHCP (192.168.10.50-99),
>> a WAP (xxx.xxx.xxx.125) that can/serves DHCP (192.169.10.100-150),
>> a printserver (xxx.xxx.xxx.124) that everyone needs to use,
>> a Linux server (xxx.xxx.xxx.122), runs mail, web, dns, and Samba.
>>
>> What I want is for everything to work together. There are 5 static IPs 
>> available, and 10 devices. Cable, WAP, and server all need static IP's. 
>> The printserver is a maybe. There are other devices, laptops, desktops 
>> nothing that requires a static IP.
>>
>> Now to the question can I just plug everything into the existing switch 
>> and plug the switch into the cable device and will it all work or what am 
>> I missing?
>>
>> --- 
>>     
>>
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug