Topic: Router problems

[Matt]

Please can someboby give me a little help?  I have just installed sme 7.0

Everything went smoothly, but I am having trouble connecting to the internet.  I am trying to use a router and I also want to connect the server to my Apple extreme base station. I have connected everything up ok and I can connect to the server via the server manager Ok, but when I run the internet test it fails.  The server ip is set to 10.0.0.1 I have tryed to setup DMZ on the router but when I enter my static IP I don't get the sme webpage I just get the router login screen.  Happy to let someone take a look at my router.  

Cheers

Matt

[pfloor]

Draw us a picture such as this:

Lan---SME (Server/Gateway)---Router---Internet

Tell us what all the internal IP's are also.

P.S. If you are setup like above, you may have a problem accessing the server from you public IP address from within the lan.

Paul

[WA-Naemr]

Are you trying to use the SME server as a router?  or do you have a stand alone?


If you have a stand alone router:
   Did you make shure to tell SME server that you want it to be server only?
   Did you disable the DHCP on the SME server?

If you are trying to use SME server as a router:
   Did you make shure to tell SME server that it is a server/gateway?
   Did you reset (power cycle) your cable/dsl modem if aplicable AFTER getting your server set up?
   Do you have a STATIC WAN IP, (These often times can not be retrived by DHCP, u have to tell the server, what ALL the WAN info is

If you are running SME server as a SECOND INLINE ROUTER:
   Is it getting a WAN ip from the main router?
   Have you forwarded the nessisary ports from the router to the SME server? or set the SME as a DMZ host?
   

Does the internet work WITHOUT the SME server in the setup, if you take the SME server out, and hook everything up the way it was before, DOES THE INTERNET WORK?

[Matt]

I have my sme setup in server gateway mode behind the router,  I think I have set the router to DMZ and put the sme IP address into the router for dmz server but I still cannot get the internet to work at all.  The internet is denfinatly working so I would be garteful is someone could check my domain name from where they are.

It is www.balingout.org.uk

Whenever I try to access it from within my network I just get the router login.    Also could I ask someboby to login to my router and check my settings?

[WA-Naemr]

you domain is not accessable to me..  

chech to make shure, that the LAN ip of the SME server and the router are NOT THE SAME,   if your router is 192.168.1.1  make your sme servers LAN ip         192.168.0.1 or 192.168.2.1

if your routers ip is 192.168.0.1 make the sme 192.168.1.1

remember, these ips are for the LAN side of both the router and sme, the WAN of the router should be left alone, and the WAN for the SME should be set by the DHCP server built into the router.

also, so that your SME server does not "drift" (get a differant ip assined to it)
and provided your router supports it, reserve your SME server an ip, this is usualy assined by mac address and most routers have an easy to use setup for reserving ips to spesific computers/devices


if your router does not support it, the best alternative is to STATIC the WAN on the SME server,



if your routers LAN ip is 192.168.0.1   then a good WAN for the SME would be 192.168.0.2
also, most routers are DNS servers also, make shure you input the routers LAN into the SME WAN info
EXAMPLE:

WAN Ip: 192.168.0.2
Subnet: 255.255.255.0
Gateway: 192.168.0.1
DNS server: 192.168.0.1


see if any of this helps  




Naemr

[Matt]

Still having problems

Could someone login to my router and see if they can help, Please!

user name= admin
password=epicrouter

[WA-Naemr]

do you have remote admin on? what is the remote admin port?

[WA-Naemr]

is the domain www.balingout.org.uk correct?  is your wan ip 83.151.199.77 ?

[Matt]

balingout.org.uk is the domain

I think you should be able to login to the router from there

[WA-Naemr]

conversation went to AIM for a bit,

(02:56:55) mattpitts@mac.com: does this work
(02:57:15) coolgy100: no
(02:57:18) coolgy100: i cant log in
(02:57:25) coolgy100: make shure u have remote management on
(02:57:33) coolgy100: Server not found
         

Firefox can't find the server at balingout.org.uk.
(02:57:44) coolgy100: when i ping ur domain
(02:57:50) coolgy100: i get no responce
(02:58:05) coolgy100: can you surf the web wial connected directly to the router?
(02:58:13) mattpitts@mac.com: yes
(02:58:20) coolgy100: goto mywanip.com
(02:58:29) coolgy100: and find out what your ip is plz
(02:58:37) mattpitts@mac.com: ok
(02:59:12) mattpitts@mac.com: 83.151.199.77
(02:59:33) coolgy100: your ping is still dead,
(02:59:38) coolgy100: what router are u using?
(02:59:52) mattpitts@mac.com: some cheap one safecom
(03:00:25) coolgy100: ok, lets try this, does your SME server have a webpage set up yet?
(03:00:53) mattpitts@mac.com: only the under construction page
(03:01:01) coolgy100: thats fine,
(03:01:02) coolgy100: ok
(03:01:42) coolgy100: lets take ur cheap router out, put your SME in its place, reboot the cable/dsl modem, and see what happens, lets see if u can get on the internet, and if i can get to your page..
            03:01
(03:02:06) mattpitts@mac.com: I am also using an airport base station might that be a problem
(03:02:22) coolgy100: i dont think so..
(03:02:28) mattpitts@mac.com: its a router modem
(03:02:34) coolgy100: :/
(03:02:41) coolgy100: ok
(03:02:56) mattpitts@mac.com: is there a way of just setting it as modem
(03:02:57) coolgy100: log into the router and lets see if we can find remote management
(03:03:04) mattpitts@mac.com: ok
(03:04:11) coolgy100: if there is a way of setting it up as just a modem that may work,
(03:05:23) mattpitts@mac.com: i am looking for remote access cannot find anything as yet
(03:05:36) coolgy100: ok, then lets try modem only,
(03:05:46) mattpitts@mac.com: maybe try searching the web
(03:06:17) mattpitts@mac.com: I'm not that confident with all the router setting so gets a little confusing
(03:06:22) coolgy100: you will need to move every thing to the LAN side of the SME server, then reboot the little modem/router after setting it to modem only
(03:06:32) coolgy100: then see if you can get on the net
(03:06:48) coolgy100: also, try using the cmd prompt on your sme server
(03:06:51) coolgy100: lig in as admin
            03:06
(03:07:00) coolgy100: and use the test internet feature
(03:07:21) coolgy100: what is the modle number of your router?
(03:07:24) mattpitts@mac.com: I am just checking the safecom webiste
(03:07:49) mattpitts@mac.com: http://safecom.cn/code/default.asp
(03:08:11) mattpitts@mac.com: the router is a samr-4114
(03:08:20) coolgy100: oh great, generic buffalo
(03:09:37) mattpitts@mac.com: just found this on the sat
(03:09:43) mattpitts@mac.com:
SAMR-4114 does not support Remote Management.
(03:10:28) coolgy100: http://safecom.cn/code/product/adsl/samr-4110/port-forwarding.htm
(03:10:33) coolgy100: make shure port 80
(03:10:44) coolgy100: is forwarded to the SME server
            03:11
(03:12:17) coolgy100: goto your wan configuration screen
(03:12:31) coolgy100: and see if theres a "respond to ping on WAN port"
(03:12:36) coolgy100: or ICMP
(03:12:52) mattpitts@mac.com: no
(03:13:12) mattpitts@mac.com: not sure how to set up port fowarding
(03:13:49) coolgy100: ok
(03:14:02) coolgy100: on the left, under configuration
(03:14:09) coolgy100: goto "Virtual servers"
(03:14:28) mattpitts@mac.com: ok
(03:14:33) coolgy100: in public port - start put 80
(03:14:42) coolgy100: in public port end also 80
(03:14:44) mattpitts@mac.com: ok
(03:14:50) coolgy100: and in private port 80
(03:14:55) coolgy100: port type tcp
(03:15:01) coolgy100: and in host ip address
(03:15:12) coolgy100: put the ip of your SME servers WAN port
(03:15:26) mattpitts@mac.com: ok
(03:15:58) mattpitts@mac.com: ok thats done
(03:16:16) mattpitts@mac.com: i need to reboot router
(03:16:21) coolgy100: still cant load your website
(03:16:24) coolgy100: kk
            03:16
(03:17:11) mattpitts@mac.com: try now
(03:18:13) coolgy100: nope, still nothing
(03:18:20) coolgy100: goto wan under configuration
(03:18:39) mattpitts@mac.com: ok
(03:18:43) coolgy100: look for igmp
(03:19:05) coolgy100: if it is disabled, enable it
(03:19:26) mattpitts@mac.com: there is no such option
(03:20:00) coolgy100: is this what you see in WAN?   Select Adapter: Adapter:  
(03:20:08) mattpitts@mac.com: yes
(03:20:25) mattpitts@mac.com: i have Pvc 0
(03:20:32) mattpitts@mac.com: and a drop down
(03:20:35) coolgy100: ok, select the first adapter in the list and hitsubmit
(03:20:50) mattpitts@mac.com: ok
(03:21:05) mattpitts@mac.com: big menu
(03:21:11) coolgy100: do you now see an IGMP?
(03:21:18) mattpitts@mac.com: yes
(03:21:29) coolgy100: ok, lets enable it,
(03:21:31) mattpitts@mac.com: its disabled
(03:21:33) mattpitts@mac.com: ok
(03:21:41) mattpitts@mac.com: done
(03:21:50) coolgy100: ok, hit submit at the botom of the page
            03:21
(03:22:16) mattpitts@mac.com: i need a reboot
(03:22:19) coolgy100: kk
(03:22:22) coolgy100: go ahed
(03:23:13) mattpitts@mac.com: should be up again
(03:24:03) coolgy100: ok, i am gonna need you to go to wan, and select each adapter one by one and enable IGMP
(03:24:11) mattpitts@mac.com: ok
(03:24:25) mattpitts@mac.com: there are 9
(03:24:31) coolgy100: or, go on ebay and find the NETGEAR ADSL/Router
(03:24:33) coolgy100:
(03:25:00) coolgy100: yess, all 9 adapters must have IGMP enabled
(03:25:18) mattpitts@mac.com: ok i will gib
(03:25:24) mattpitts@mac.com: give it a go
(03:25:39) coolgy100: k
            03:26
(03:26:58) coolgy100: then, after that, i need you to go to firewall    way down at the botom left, and disable it
(03:27:07) mattpitts@mac.com: this is going to take a while
(03:27:16) mattpitts@mac.com: firewall is already disabled
(03:27:19) coolgy100: k
(03:27:40) coolgy100: on the firewall page, click service filtering
(03:27:52) coolgy100: is the ping checkbox filled in?
(03:28:08) mattpitts@mac.com: i just ticked it
(03:28:13) coolgy100: k
(03:28:19) coolgy100: submit and reboot
(03:29:08) mattpitts@mac.com: can you ping now
(03:29:19) coolgy100: no, ping still dead,
(03:29:24) coolgy100: you may want to try this
(03:29:33) coolgy100: many ISPs BLOCK outside trafic
(03:29:36) coolgy100: like web pages
(03:29:41) coolgy100: i am through cox
(03:29:47) coolgy100: and for me to set up a web site
(03:29:54) coolgy100: i had to get a buisness account
(03:30:00) coolgy100: to open the ports up
(03:30:17) mattpitts@mac.com: maybe i should ask them
(03:30:42) coolgy100: it would probably be a good idea, i know i stressed and ripped my hair out for weeks
(03:30:45) coolgy100: only to lern
(03:30:50) coolgy100: my setup was good
(03:31:00) coolgy100: they just had what i was tryin to do blocked
(03:31:25) mattpitts@mac.com: think i might get hold of a netgear router anyway
(03:31:37) mattpitts@mac.com: seems much easier
(03:31:49) coolgy100: yes, it would be a good idea, the netgear adsl one
            03:31
(03:31:57) coolgy100: is an adsl modem/router
(03:32:02) mattpitts@mac.com: is that what you use?
(03:32:03) coolgy100: but a mutch higer quality
(03:32:10) coolgy100: no, i am on cable now
(03:32:18) coolgy100: but i know many who use that one
(03:32:36) coolgy100: i use the standard netgear cable/dsl router
(03:32:44) coolgy100: with an rj45 wan port
(03:32:54) coolgy100: u need the adsl router with the rj11 wan

[Matt]

Just thought I would post now and explain how I solved my problems

I have a safecom SAMR 4114 router modem which i got free with my ASDL package.  I have just installed sme 7 and wanted to host my own web and mail server.  I was having problems with the hardware setup and finally figured it out as follows:-

1.  The modem router has an IP of 10.0.0.2
2.  So I set the local IP of the sme to 10.0.0.100 same range as the router
3.  Set sme to server and gateway
4.  set the external static IP in the same range as the modem router, I chose 10.0.0.3
5.  Set the Gateway IP address to that of the router 10.0.0.2

I the made sure I had all the wires pumped in the right way round, if in doubt double check and try the other way, just in case.  

Then I stuck a switch between my sme and my apple powerbook.

Everything works just as it should as far as I can see.  

Even uploaded some webpages to www.balingout.org.uk which I can view from within my network.  

Could somebody confirm that the site is working for me and try sending me an email to matt@balingout.org.uk

Thanks as always, for your help  

[Matt]

Just thought I would post now and explain how I solved my problems

I have a safecom SAMR 4114 router modem which i got free with my ASDL package.  I have just installed sme 7 and wanted to host my own web and mail server.  I was having problems with the hardware setup and finally figured it out as follows:-

1.  The modem router has an IP of 10.0.0.2
2.  So I set the local IP of the sme to 10.0.0.100 same range as the router
3.  Set sme to server and gateway
4.  set the external static IP in the same range as the modem router, I chose 10.0.0.3
5.  Set the Gateway IP address to that of the router 10.0.0.2

I the made sure I had all the wires pumped in the right way round, if in doubt double check and try the other way, just in case.  

Then I checked the Test Inernet access on the server console and it worked!

Then I stuck a switch between my sme and my apple powerbook.

Everything works just as it should as far as I can see.  

Even uploaded some webpages to www.balingout.org.uk which I can view from within my network.  

Could somebody confirm that the site is working for me and try sending me an email to matt@balingout.org.uk

Thanks as always, for your help  

[Matt]

I forgot to mention that I also enabled  DMZ in the router admin and set the DMZ IP to that of my sme server.

I also disabled to routers firewall,  I am told this  is safe as sme server has its own firewall, so in effect everything on the sme should work just fine.  Is that right?

[byte]

Yup your site works here.

[idp_qbn]

Hi, Matt,
You wrote:
1. The modem router has an IP of 10.0.0.2
2. So I set the local IP of the sme to 10.0.0.100 same range as the router
3. Set sme to server and gateway
4. set the external static IP in the same range as the modem router, I chose 10.0.0.3
5. Set the Gateway IP address to that of the router 10.0.0.2

I would have tried:
1. Set sme to server and gateway
(Should be set first, I think)
2. The modem router has an IP of 10.0.0.2/255.255.255.0
RE-ENABLE the Modem/router firewall
3. Set the RED (EXTERNAL) IP of the sme to 10.0.0.3/255.255.255.0 same range as the router
4. Set the Gateway IP  address to that of the router 10.0.0.2
(You could try DHCP on Modem router to give SME its red address in wich case you would not need to do 3 and 4)

5. set the GREEN (INTERNAL) static  IP of the SME to 192.168.x.1
(x is the subnet of your choice eg 0,1,2...254)
6. Turn on DHCP for SME, with a range of 192.168.x.y - 192.168.x.z
(y and z could be 100 & 200, for example)
7. Let each workstation then gets its address from the SME. You can tell them their gateway is 192.168.x.1 if you need to.

Your network you have described is a "flat" one...your router, gateway and workstations all on the same subnet. If I can hack your modem router (and you need to change the password on that now you have put it on the internet) then I can hack any system on that system easily. And, I could go directly from one of your workstaions out through the modem/router bypassing the SME.

It would be safer to  have a "layered" network (like I decribed), which puts the modem/router and the RED side of the SME on one subnet and the GREEN side of the SME and your workstations on another:

modem (10.0.0.2) <===> RED SME (10.0.0.3) <===> GREEN SME (192.168.x.1) <===> workstations (192.168.x.100-200)
This gives you a double line of defence (and SME is pretty good firewall) AND the workstations have to go through the gateway SME to get to the internet....and DHCP and email etc.

Anyway, good luck and cheers

Ian