Page 71 / 82 Scroll up to view Page 66 - 70
Configuring Mulitple Static IP Addresses
69
If you did not receive a subnet mask from your ISP
, but were provided with a number of addresses has been,
you can look up the associated subnet mask in the table below. Because this information may have been
identified in a number of different ways, it has been presented here in a number of different ways.
Step 2: Allocate Public IP Addresses to the LAN Clients
This step requires that all network devices that you wish to configure with a broadband IP address be turned
on and connected to the 3700HGV-B. Devices should be configured to use their DHCP client for obtaining
an IP address, although this is not an absolute requirement as identified below.
Once the gateway is configured to use multiple broadband IP addresses, network devices can be configured
for one of three modes. Access the Address Allocation page of the MDC to select the desired option (Figure
2) for each LAN device. This information can also be set by clicking the
EDIT ADDRESS ALLOCATION
button on
the Home Network - Advanced Settings page.
Mode 1: DHCP Private Network. The network client is given a private IP address on the private network
(Default is the 192.168.1.0 network). This is the normal mode of operation for all LAN devices by
default (with or without the use of multiple broadband addresses.)
Mode 2: Public Fixed Network. The network client is given one of the currently available broadband IP
addresses. The address may change as the IP address lease is renewed, but will always come from the
pool of available broadband IP addresses.
Mode 3: DHCP Fixed Address. The network client is permanently assigned one of the broadband IP
addresess. The address will not change until the gateway is reconfigured via the Address Allocation
page. This will be the most common configuration for publicly accessible network devices.
In all the above cases, the network devices should be configured to enable their DHCP client. From this
point on, the IP addresses for these LAN devices are managed by the 3700HGV-B. However, if DHCP is
unavailable or its use undesirable, devices can be configured (hard-coded) with a static IP address.
For devices in the Private Network (NAT), the proper range must be used. The default range is 192.168.1.0,
so the network device may statically use 192.168.1.1 through 192.168.1.64, inclusive. Devices assigned
with these addresses act as if they were assigned an IP address (Mode 1 above).
Total
Address
Used by the
Subnet
CIDR
Number of
Useable
Addresses
Address
Required for
DSL Router
Addresses
Available for
LAN
Devices
Subnet Mask to Use
8
/29
6
1
5
255.255.255.248
16
/28
14
1
13
255.255.255.240
32
/27
30
1
29
255.255.255.224
64
/26
62
1
61
255.255.255.192
128
/25
126
1
125
255.255.255.128
256
/24
254
1
253
255.255.255.0
Page 72 / 82
Configuring Mulitple Static IP Addresses
70
For devices using the Public Network addresses, simply configure the device to use the IP address (subnet
mask and default gateway) as assigned by the ISP
. The gateway will automatically detect the usage of a
broadband IP address on the LAN network and correctly route the return traffic to the appropriate LAN
device. Once a broadband IP address has been detected by the gateway as being statically coded on the
device, its entry in the Address Allocation page will no longer be displayed.
Note:
The ability to use DHCP in assigning WAN addresses to LAN devices is different from how
some other routers operate. These other routers usually require that the address be hard coded
on the LAN device.
Upon successful configuration of the gateway, refresh the IP address of the network device (this may require
restarting that device). It should now have the desired public, or private, IP address assigned by the
3700HGV-B. Confirm proper configuration by attempting to access the public Internet.
Figure 2
Step 3: Configure Firewall Rules
LAN devices using addresses from the Public Network are still protected by the gateway firewall. To allow
unsolicited inbound traffic to any of these LAN devices, you must modify the firewall settings specified for
that device. That is, a LAN device can receive inbound traffic associated with outbound traffic (e.g., web
browsing) but needs to have a firewall rule established to function as a server.
To change the firewall settings, access the Firewall - Settings page of the MDC or the Firewall Settings page
of the standard web pages to configure the Hosted applications allowed for each device to be used with
unsolicited traffic.
Note:
This is different from how some other routers operate. These other routers automatically
allow all traffic to pass through from the WAN to the LAN devices configured with WAN IP
addresses.
The type of traffic to be received by the device determines the type of firewall configuration required:
If the device only requires the public IP address then no rules need to be established.
In some cases, all broadband traffic destined for a device is to be passed to that device. In this case,
the 3700HGV-B should be configured to
Allow all applications
for the specific device.
In other cases, only the traffic associated with a specific application (e.g., ftp server) is to be passed to
a device. In this case, the “hosted application” feature of the 3700HGV-B will be used to configure
which traffic to send to the device.
Note:
The 2Wire firewall only allows traffic for a public network IP address to be directed to a
local LAN device with the same public network IP address. That is, except for traffic sent to the
single broadband IP address assigned to the router and shared through NAPT, traffic sent to other
specific broadband IP addresses associated with the connection cannot be directed to local LAN
devices that may be using private IP addresses.
Page 73 / 82
Configuring Mulitple Static IP Addresses
71
Sample Configuration
In the sample network below, the customer has subscribed to service with an 8 IP address subnet (i.e., 5
usable broadband IP addresses). The customer wants to host dedicated VPN and web servers in addition to
having PCs with private IP addresses. The subnet assigned to the customer is 208.35.230.192/29. The
sample network is shown in Figure *.
Figure *. Sample Network
Following are the steps required to configure the gateway for this configuration.
Page 74 / 82
Configuring Mulitple Static IP Addresses
72
First, configure the gateway to support “Public Network” static IP addressing using the service provider
assigned IP addresses of 208.35.206.198 for the gateway and a subnet mask of 255.255.255.248 as
shown in Figure xxx. Click
SAVE
to ensure the changes are saved.
Figure xx
Second, assign static IP addresses to the Network Servers from the available. This can be done by hard
coding these on the network interface for these servers or via the gateway using DHCP
. The later is shown in
this example.
Check that the gateway-connected network interface for each server is configured as a DHCP client (i.e. to
“Obtain an IP address automatically”).
Page 75 / 82
Configuring Mulitple Static IP Addresses
73
Edit the addresses assigned to each device as shown below. Assign an available static IP address to each
server, selecting the “DHCP Fixed” option from the list box next to each server name. For this example,
select the following options:
Click
SAVE
after making your selections in order to ensure the addresses are properly assigned.
After this step, restart each server so that it is issued the desired static IP address.
Finally, configure the gateway to allow the appropriate broadband traffic to flow to the network servers.
In this example, all broadband traffic destined for the VPN server will be allowed. Allowing all inbound traffic
disables the inbound port blocking feature of the gateway firewall. However, stateful packet inspection will
still occur as the traffic passes through the gateway providing continued protection against Denial of
Service and other common Internet attacks.
Device
IP Address
VPNSRV
DHCP Fixed 208.35.230.193
WEBSRV
DHCP Fixed 208.35.230.194

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top