|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] WAP DHCP & Cable DHCP and some static IP's
|
Bob Schwier wrote:
> My question is probably more basic than the person seeking this
> reply, so I am
> top posting as as far as I can tell I am on the same subject but at a
> far more
> lower level. I've never had to create a network before.
> I want to create an internal network for three computers and two printers.
> Cavalier is my internet provider and takes 24 bits, so the network
> must work
> on the remaining eight bits if I understand correctly the IP statement.
> This computer uses Ubantu 8.04 and( connects by ethernet cable to the box
> provided by Cavalier Zhone 6218-I2-200-0CL) The upstairs printer is an
> old 9 pin attached by serial port to this computer. The two other
> machines
> will have to use wireless. One will be attached to a Canon printer.
> The other
> is a laptop. The one on the Canon has to be a Windows box because
> Wine did
> not work with the Brother/Babylock embroidery program.
> I know that the answer has to be in the howtos but my eyes keep
> glazing over
> from the turgid prose before I get to the meaty part.
> Thanks.
> bs
>
The Zhone box is an ADSL WiFi Router with Port Translation (PAT)
So your external connection to the world is an assigned Dynamic IP
address, but internally you use a Class-C network 192.168.10.xx
192.168.xx.xx addresses are NOT legal IP's on the Internet, they
are reserved "private IP's so that many people can use the same
IP's without stepping on each other.
So none of your internal devices have 'real' internet addresses, the Zhone
translates them to your currently assigned Dynamic address.
This provides security ( since all your internal devices appear as a single
dynamic address ) and also all inbound connections are filtered by the box.
Generally with your level of knowlege, you wouldn't want any connections
from the outside getting into your network past the Zhone, and this is
likely the default setup unless you enable 'port forwarding'.
Generally it's easiest to setup DHCP for all internal computers, but then
your printer etc may possibly change IP's and cause Linux to lose
track of them. That is why printer, or other servers should be setup to
use 'static' IP's assigned from the routers ( but your router may not
have this feature )
You probably need to read up on the Linux Networking Howto, or
basic networking books.
Maybe you should find someone local and have them set this up
for you ( ~1hour ) and buy them a beer if you don't understand
the Howto's.
Lee
> --- On *Mon, 12/21/09, Lee Marzke /<lee@marzke.net>/* wrote:
>
>
> From: Lee Marzke <lee@marzke.net>
> Subject: Re: [PLUG] WAP DHCP & Cable DHCP and some static IP's
> To: "Philadelphia Linux User's Group Discussion List"
> <plug@lists.phillylinux.org>
> Date: Monday, December 21, 2009, 4:36 PM
>
> Claude M. Schrader wrote:
> > Ed,
> > I would give the WAP a static IP in the same subnet as the cable
> > modem/router, and disable the DHCP server on the wap, and plug
> everything
> > in. Let the cable device manage IPs.
> >
> > You do not want to plug everything in as is. Having 2 DHCP
> servers on a
> > network may cause problems, and even if it doesn't, it
> overcomplicates things
> > and will make troubleshooting future problems more difficult in the
> > future.
> > Claude
> >
> The existing static IP's can't be inside the range of assigned IP's.
>
> I agree with using one DHCP. If you want to have static IP's for your
> print server use a DHCP server that supports 'static IP's'
>
> For instance the Linksys WRT-54G, with OpenWRT or DD-WRT firmware
> will
> do this.
>
> If your using web and mail servers inside your office, you might want
> to consider
> a multi-zone firewall and UTM in place of the commodity cable device
> for improved
> security. The cable device wasn't really designed for security for
> hosting local servers.
>
> Also putting outside hosted servers ( email + web ) on the same server
> as your
> DNS and file server is very bad security practice.
>
> You generally put your outside servers in a DMZ (orange) zone so
> if they
> get rooted
> they still don't have access to your file servers on your LAN.
>
> I use the free opensource Endian Firewall
> http://www.endian.com/en/community/overview/
>
> This does DNS, DHCP, Transparent Proxy of( DNS, SMTP, Web, FTP ),
> virus filtering, Spam checking, QoS ( for VOIP ) , OpenVPN
> and more.
>
>
> Lee
>
> --
> "Between subtle shading and the absence of light lies the nuance
> of iqlusion..." - Kryptos
>
> Lee Marzke, lee@marzke.net
> </mc/compose?to=lee@marzke.net> http://marzke.net/lee/
> IT Consultant, VMware, VCenter, SAN storage, infrastructure, SW CM
> +1 484-961-0369 voice +1 484-348-2230 fax
>
>
>
> > On 11:57 Mon 21 Dec , Ed Ackerman wrote:
> >
> >> It's something that is right at the edge of what passes for my
> brain, but
> >> I need a nudge to accomplish this.
> >> There is a cable device (xxx.xxx.xxx.126), can/serves DHCP
> (192.168.10.50-99),
> >> a WAP (xxx.xxx.xxx.125) that can/serves DHCP (192.169.10.100-150),
> >> a printserver (xxx.xxx.xxx.124) that everyone needs to use,
> >> a Linux server (xxx.xxx.xxx.122), runs mail, web, dns, and Samba.
> >>
> >> What I want is for everything to work together. There are 5
> static IPs
> >> available, and 10 devices. Cable, WAP, and server all need
> static IP's.
> >> The printserver is a maybe. There are other devices, laptops,
> desktops
> >> nothing that requires a static IP.
> >>
> >> Now to the question can I just plug everything into the
> existing switch
> >> and plug the switch into the cable device and will it all work
> or what am
> >> I missing?
> >>
> >> ---
> >>
> >>
> ___________________________________________________________________________
> Philadelphia Linux Users Group --
> http://www.phillylinux.org
> Announcements -
> http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion
> -- http://lists.phillylinux.org/mailman/listinfo/plug
>
>
--
"Between subtle shading and the absence of light lies the nuance of iqlusion..." - Kryptos
Lee Marzke, lee@marzke.net http://marzke.net/lee/
IT Consultant, VMware, VCenter, SAN storage, infrastructure, SW CM
+1 484-961-0369 voice +1 484-348-2230 fax
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|