Koozali.org: home of the SME Server

New Server being setup

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
New Server being setup
« on: December 21, 2008, 01:34:35 PM »
Hi,
I am in the process of setting up a web server to Host about 10 websites that I have.

I have been around the block a number of times installing Ubuntu, SuSe, Centos, Fedora but there always seems to be an issue with some part of the installation.

SME appears to hold the key to success, as always being new there are questions and problems to be resolved.

I have SME 7.4 installed and working fine, I think, I am using another computer on the local network.

My first challenge is to gain access to MYSQL using MYSQLADMIN, I have it installed but I can not run it, my root access fails.

My second question is; I have the SME server setup as a server / gateway and I have SpeedStream router 10.0.0.138 for Internet access, I don,t seem to be able to get through the SME server to get to the Router to make adjustments, should I be able to.

I have looked about for info on webhosting on the SME server, have not found much at all

I would be very grateful to be pointed in the right direction on these initial issues.

Cheers

Ron   
Cheers

Ron

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: New Server being setup
« Reply #1 on: December 21, 2008, 02:19:52 PM »
My first challenge is to gain access to MYSQL using MYSQLADMIN, I have it installed but I can not run it, my root access fails.

please read carefully this howto and this one too.. almost everything you need to know abount mysql on SME is there :)

Quote
My second question is; I have the SME server setup as a server / gateway and I have SpeedStream router 10.0.0.138 for Internet access, I don,t seem to be able to get through the SME server to get to the Router to make adjustments, should I be able to.

how did you setup wan and lan? I'm in the same situation, but I have no problem to go to 10.0.0.138 from lan pc..

ciao
Stefano
« Last Edit: December 21, 2008, 02:54:01 PM by nenonano »

Offline m

  • *****
  • 276
  • +0/-0
  • Peet
Re: New Server being setup
« Reply #2 on: December 21, 2008, 02:42:47 PM »
My first challenge is to gain access to MYSQL using MYSQLADMIN, I have it installed but I can not run it, my root access fails.
Log into phpmyadmin with user "admin" and the root password

Offline christian

  • *
  • 369
  • +0/-0
    • http://www.szpilfogel.com
Re: New Server being setup
« Reply #3 on: December 21, 2008, 03:30:17 PM »
I have looked about for info on webhosting on the SME server, have not found much at all

If it is hosting where you control everything then you should be able to find everything you need in http://wiki.contribs.org/SME_Server:Documentation.

If it is hosting for others then it is all still possible without having to dig under the covers but it may not be completely obvious.

iBays may be what you are looking for (in the doc at http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter14).

iBays can be used for web sites and file server and maintain proper user/group permissions. You can also access these remotely if your remote user has the permissions you have given them specifically.

Depending on what you are doing, most of what you want you will be able to do from the web admin interface. As a beginner, I would strongly recommend you use the web admin interface by default until you learn and understand the architecture.

If you are asking about mysql then you likely have a good grasp of linux and mysql. In general managing databases here is safe. Per nenonano's comment, the mysql FAQ will tell you how it is used in this system.


Hope that helps get you started.
SME since 2003

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: New Server being setup
« Reply #4 on: December 21, 2008, 07:09:15 PM »
My first challenge is to gain access to MYSQL using MYSQLADMIN, I have it installed but I can not run it, my root access fails.
This should work out of the box. How are you executing the command and what user are you using?
Normally when logged in as root user you do not need and username or password as this is supplied using some magic. You are sure you did not tamper with the MySQL root user password?
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #5 on: December 21, 2008, 09:24:05 PM »
Sincere thanks for all replies, every one of them has been helpful and positive.
I now have access to phpmyadmin, the day has only just begun here so I am still working on the rest.

Is it possible, sensible or stupid to ad a link to phpmyadmin from the server-manager?
Cheers

Ron

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: New Server being setup
« Reply #6 on: December 21, 2008, 09:28:28 PM »
Sincere thanks for all replies, every one of them has been helpful and positive.
I now have access to phpmyadmin, the day has only just begun here so I am still working on the rest.
Did you have to do anything to fix you issues or was it just a matter of reading up? For future reference to other users.

Is it possible, sensible or stupid to ad a link to phpmyadmin from the server-manager?
It might be possible, but please request new feature requests against this contrib in the server-manager so they do not get lost in the forums. Not sure if it is sensible as you can just as well type in https://server/phpmyadmin as you can https://server/server-manager of course.
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #7 on: December 21, 2008, 09:46:15 PM »
I have only resolved the phpmyadmin issue, stupidly I was calling phpmysqladmin and not phpmyadmin and I did not 'twig' to the problem as I was being presented with a logon screen.

I will report progress back here.
Cheers

Ron

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #8 on: December 25, 2008, 04:08:20 PM »
Quote
My second question is; I have the SME server setup as a server / gateway and I have SpeedStream router 10.0.0.138 for Internet access, I don,t seem to be able to get through the SME server to get to the Router to make adjustments, should I be able to.

If you enter into your browser 10.0.0.1 you should get a (111) Connection refused.
That tells you that your ISP's upstream router is refusing the connection as it should.
That also tells you that your ISP is using that address space as most do.

What's the model # of the router?

DSL or Cable?

Business or Residential account?

The 10.0.0.138 address space is reserved for WAN's not Lan's, so if your using that address space for the Lan Zone (SME gateway) then expect problems.

It's not likely you will need 16 million address as the 10.0.0.0 space provides.

192.168.0.0 provides 65,535 address, more then you will likely need.... ever.

Your ISP is more then likely using the 10.0.0.0 address space.

If your ISP is handing out the 10.0.0.0 to you, then they need to learn how to setup their network and equipment properly.

You should be using the 192.168.0.0 address space Lan side or 172.16.0.0 on the DMZ side.

You also will not be able to setup SME in server-gateway mode on a Lan Zone, DMZ yes, Lan NO.

Server-only mode on a Lan Zone.

Server-only or Server-gateway mode on a DMZ Zone.

What's your network setup look like?

modem > SpeedStream > switch > SME > clients
or
SpeedStream > SME > clients

or ??

Note: Never setup a external access server of any kind/type on a Lan Zone that maintains client systems.

The only exception to that rule is if the server is ONLY providing local LAN access (no Router port FORWARDS), if there are port forwards to a lan sever then the server needs to be on the DMZ Zone.

Basic Network Security 101

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: New Server being setup
« Reply #9 on: December 25, 2008, 07:03:42 PM »
@electroman:

almost Alcatel's router have internal ip set to 10.0.0.138/8 since... well, 2001.. it's not a ISP setup, it's a factory default

@RKB: set your SME's wan ip to 10.0.0.1/8 and default GW to 10.0.0.138
you should be able to see router's web interface from every pc in lan.. if not, there should be some issues with your router..

ciao

Stefano

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #10 on: December 27, 2008, 09:56:54 PM »
Thanks for all of the feedback.
I have moved on a bit, ditched the SpeedStream Router replaced with NetGear NB5V2
The External side refuses to connect to the internet.
The local side is fine I can see it on the network.

I have read of others having this issue so I will do some move reading.

The bit I am confused about is the Extenal IP address.

Cheers

Ron
Cheers

Ron

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #11 on: December 27, 2008, 10:13:10 PM »
Why do I get the feeling it's not a Netgear NB5 v2??

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #12 on: December 27, 2008, 10:26:51 PM »
We I guess the only reason is that when I put the network into the Router it all works fine. ?

Cheers

Ron
Cheers

Ron

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #13 on: December 28, 2008, 12:29:41 AM »
We I guess the only reason is that when I put the network into the Router it all works fine. ?
Cheers
Ron

Well when I searched the Netgear support site & Google, that model wasn't available, so..... is it only available in Australia and a unit so new that Netgear hasn't updated their site yet??

Or is it a NetComm NB5 because that is available??

Also since you state "it all works fine" does that mean we can assume you have rectified all your problems?

As a side note it's important to provide imperative information i.e. model #'s since most here have a limited crystal ball range, usually less then a few hundred miles in most cases. :grin:

Since Alcatel, Netgear, NetComm produces many different products, it help's to narrow it down a bit to a specific model #.

In which case it might provide a specific answer to a specific question about a specific model, leading to a specific solution.

In your OP you state for example.....

Quote
I have the SME server setup as a server / gateway and I have SpeedStream router

Well they make the Series: 5100, 5200, 5400, 5500 just to name a few all of which are different.

IOW it's like going into a auto parts store and saying I need brakes for my Chevy.

If you said SpeedStream 1000 would we know exactly what your model is?

I have about 8 different model SpeedStream units here.

All of which have various issues, which solution do you want.

I have many Netgear products, all with various issues, which solution do you want.

I can't find any info on a Netgear NB5V2....to my knowledge they don't make one.

I know of a NetComm NB5.

What solution do you want.

or

You don't have anymore problems/issues and we can consider this a closed issue?

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #14 on: December 28, 2008, 12:57:57 PM »
Thanks for the reply,
The SpeedStream is a 4200
The Router currently in place is a NetGear DG834 V2
The Switch is a Cisco Catalyst 1900

The SME server will connect to the internet in Server Only mode, no problem.
The Network side works fine.

My ISP has allocated my Static IP of 60.240.199.106, Sub 255.255.255.255 the ISP Gateway server is 202.7.162.162

When I try to do this from the manual,
'If you have a static IP address and your ISP does not offer DHCP or PPPoE, then your ISP will give you the static IP address, subnet mask (or netmask), and the gateway IP address of the device that your server should connect to in order to communicate with the Internet. Assuming you have this information on hand, you can go ahead and select Option 4. Successive screens will prompt you to enter each parameter. the SME Server / Gateway will not except the above values.'

When I select Static IP and enter 60.240.199.106, 255.255.255.255 SME forces Gateway IP to 60.240.199.1 and if I change the sub to 255.255.255.0 then the IP is forced to 60.240.199.107.

Regardless no internet connection

Any idea's gratefully received
Cheers

Ron

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #15 on: December 29, 2008, 04:39:06 PM »
Can you draw us a picture?

I am having a hard time understanding just where your SME is in your network.

It sounds like it could be like this.

   Wan
     v
Speedstream
     v
     v
Netgear
     v
Cisco Catalyst
  v            v
Lan           v
            SME (with ports forwarded or in DMZ?)

If you are using a router, the router will have the Static IP address from the ISP (60.240.199.106)

The recommended setup would be that SME would be put in Server Only mode with a single network card. A static address would be assigned on the LOCAL NETWORK subnet and the internal router IP address would be set as the gateway. Any needed ports would be forwarded on the router to the static IP assigned to the SME.
   

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #16 on: December 29, 2008, 10:09:53 PM »
Good Morning,

Thanks for your questions,

Here's the picture,
When in Server only mode;
Router
to
Cisco Switch and it has the Computers on the network and the SME (external) Ethernet Cable plugged in.

When in Server Gateway mode
Router
to
SME Server (External) ethernet card
from
SME Server (Network) ethernet card to Cisco Switch
The rest of the network in also into the Cisco Switch.

For some reason when I use the SpeedStream Router the Router can not be seen on the Network, but the NetGear router can be seen, I do not believe this is a SME issue just something in the hardware.

When in the Server / Gateway mode I think the settings in the router 'fight' the settings in the SME Server /Gateway.

Are you saying to me 'forget' using SME in Server / Gateway mode, just use it in Server Mode

« Last Edit: December 29, 2008, 10:12:31 PM by RKB »
Cheers

Ron

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #17 on: December 29, 2008, 10:16:13 PM »
It's really difficult to understad your layout.

Internet >>>   DG834 |>>>    SME (gateway mode) >>>     Switch1 >>>    SME Lan Clients
                             |
                             | >>> Switch2 >>> Lan Clients

Can you Lay it out something like this and if you have two different setups, layout each one.

Thanks

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #18 on: December 29, 2008, 10:48:28 PM »
Sorry for the confusion.

SME in Server Only mode uses one ethernet card (eth0)
SME in Server/Gateway mode uses two cards (eth0) and (eth1)

so I have it setup like this,

SME in Server Only Mode:
Internet >>>   DG834 >>> Cisco Switch >>>  SME (eth0) and LAN Clients.

SME in Server / Gateway Mode:
Internet >>>   DG834 >>> SME (eth0) | SME (eth1) >>> Cisco Switch and LAN Clients

I hope this is clearer
Cheers

Ron

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #19 on: December 29, 2008, 10:52:32 PM »
Quote
Are you saying to me 'forget' using SME in Server / Gateway mode, just use it in Server Mode

If the Speedstream is truely a router and not a modem set in "bridge" mode I would not use SME as a server gateway. If you have any other forwards on the LAN you will have not end of headaches getting them to work through two router/gateways.

If the speedstream is a modem that is not routing (only connecting you to your ISP's WAN router that is in their office), you have the choice of using SME in Server/Gateway mode directly behind the Speedstream or using another routing device and putting the SME in Server only mode on the local LAN.

With SME in Server only mode you only forward the ports you need to the SME box. The downside is that when you enable a "new" service on the SME you must set the port forwards for that service.

With SME as the Gateway most of the firewall ports are opened by enabling (and closed by disabling) services in server-manger on the SME. The one caveat is that all other forwards to the LAN are handled on the SME. This may, or may not, be more difficult then setting them up on a stand alone router.

Quote
My ISP has allocated my Static IP of 60.240.199.106, Sub 255.255.255.255 the ISP Gateway server is 202.7.162.162

This line makes no sense to me as an IP of 60.240.199.106 with a subnet mask of 255.255.255.255 cannot "see" the gateway address of 202.7.162.162. This setting cannot work without the ISP doing some sort of background magic. The Gateway address MUST be in the routeable subnet and that is not the case with this statement.

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #20 on: December 29, 2008, 10:56:21 PM »
RKB,

Do you have the SME and the clients able to connect to the internet and lan with either one of your configurations shown?

Do you still have a problem or have you resolved it?

(I am not sure if your original problem has been resolved)


Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #21 on: December 30, 2008, 12:08:24 AM »
Thanks for reply and info,
I will consider which way to go during the day, server only or server / gateway.

Where I am up to at the moment.
The server can see the internet.
The network can see the SME server.
The network can not see or connect to the internet through SME.

Thanks 
Cheers

Ron

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #22 on: December 30, 2008, 02:12:27 PM »
Hi Mercyh,
I have decided that I would prefer to use the Gateway Server Mode.

So as I mentioned before, The SME box can connect to the Internet on the External nic, and the Network can see the SME box, but the computers on the network can not connect to the internet.

I am confused about two settings;
1) The External Static IP is this from the ISP or me
2) The Gateway IP is this my Modem IP or the ISP's default Gateway IP

Comments would be appreciated,
Cheers

Ron

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #23 on: December 30, 2008, 03:00:00 PM »
The IP address, Subnet Mask and Gateway assigned to the external interface of the SME box are all supplied by your ISP. The only way the Gateway would be the Modem's IP address would be if the Modem is actually set up as a router. If your ISP gave you a gateway address when they gave you your static IP address this is the one you want set on the external interface. If your server can complete the internet connection test on the setup screens, this is working OK and you can eliminate this as your problem.

If you are assigning IP addresses on the workstations, You do not need to know anything about what the external IP's are.

Lets say your INTERNAL (LAN) IP address on the SME is 192.168.1.1 with a subnet mask of 255.255.255.0 (This is possibly the most common simple setting). If you have DHCP turned off on the SME server you can assign any unused address from 192.168.1.2-192.168.1.254 with a subnet mask of 255.255.255.0. The gateway would be 192.168.1.1 (the internal (LAN) address of the SME which is your GATEWAY/router). With what you describe above where the SME can see the internet and the Workstations can see the SME but NOT route to the internet, if all other setting are correct, you must have an incorrect gateway set on the WORKSTATIONS.

One way to test this is to turn ON the DHCP server on the SME and set one workstation to obtain an IP automatically. This should eliminate this problem as the SME will hand out proper settings.

Another thing that could be causing this problem is if you have another router/server acting as a DHCP server that is handing out an incorrect gateway. You WILL have problems if you have 2 DHCP servers running on the same network. (Yes, there are exceptions to this rule in advanced network situations but I don't think this is one of those situations.)

IF you are using DHCP server on the SME and choose to assign some IP addresses, you must set the DHCP server to only hand out a range of addresses (e.g. 192.168.1.100-192.168.1.200). You can then assign addresses that are outside of this range without a conflict.


Please let us know if this resolves your problem and post back if you need further information.
« Last Edit: December 30, 2008, 03:04:33 PM by mercyh »

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #24 on: December 30, 2008, 05:36:16 PM »
RKB

Keep in mind, the more relevant and accurate the info you give, the more and better the help will be given.

My guess is that you may not know how to copy/paste the info requested to your WinXP client to post it here.
Which would make things a lot easier and quicker.

You may want to take some time and learn how to use these tools if you haven't already done so.
If your using WinXP then go here SFTP and set this up and suggest using notepad+++ if you don't have a favorite editor, the link is on the page.
The three tools are WinSCP, putty and an editor.
You can make a connection to SME's gateway LAN and you will be able to copy/paste SME info to winxp to post here.

When in Server Gateway mode
Router
to
SME Server (External) ethernet card (requires a static IP assignment from the pre-router 4200 or 834)
from
SME Server (Network) ethernet card to Cisco Switch
The rest of the network in also into the Cisco Switch.


The last two highlighted can not be on the same subnet.

You will need separate switches or a vlan switch to accomplish that setup.
OR
You can disconnect SME or the router LAN from the Cisco switch, one or the other.
Your choice.

Internet  >>>  DG834 1|  >>> SME (gateway mode) SME Lan  >>>  Switch1  >>>  SME LAN Clients
                              2|                                                                        \
                                                                                     hardwired connected via switch and on same subnet
                              3|                                                                        /
                              4| DG834 LAN >>>                                    Switch1  >>>  Lan Clients

What you have is SME's internal interface connected thru the Cisco (switch1) to the LAN of the 4200 or DG834 and the subnets are the same.
SpeedStream is obviously using a different default subnet for it's LAN.

That's why one works and one doesn't.

As you can see above, by making those connections to the Cisco (irregardless of the subnet) or (whether it works or not), you will have
circumvented SME's gateway firewall via the DG834 LAN and likewise circumvented the DG834 firewall via SME's LAN.

As well as create a routing issue, possible duplicate responders at the switch cannot respond, thus some routing confusion.

One possible solution...

Internet  >>>  DG834 1| DMZ  >>> (static IP assignment) to SME (gateway mode) SME Lan  >>>  Switch1  >>>  SME LAN Clients
                              2|
                              3|
                              4| DG834 LAN >>> Switch2 >>> Lan Clients

That will work if all is setup correctly.
Switches 1 & 2 can be substituted with a single vlan switch.

Quote
This line makes no sense to me as an IP of 60.240.199.106 with a subnet mask of 255.255.255.255 cannot "see" the gateway address of 202.7.162.162.
This setting cannot work without the ISP doing some sort of background magic.
The Gateway address MUST be in the routeable subnet and that is not the case with this statement.

No magic.

Should be...

Static IP = 60.240.199.106
Mask = 255.255.255.255
Gateway server = 60.240.199.1
DNS Server = 202.7.162.162

Since the ISP was never reported back for checking, it's just a good WAG and knowing that 202.7.162.162 is a DNS server. :P

The above info is for the modem/router, not to be used to config SME, except for the DNS Server which may need to be set in SME.

Please report this info....using this manual, which I believe is for your DG834 http://kbserver.netgear.com/pdf/dg834_reference_manual_2.pdf

A snapshot of the Router Status of the DG834 manual page 5-4.

AND

SME ifconfig results.

Without that info, nobody can effectively help you.

If the Speedstream is truely a router and not a modem set in "bridge" mode I would not use SME as a server gateway. If you have any other forwards on the LAN you will have not end of headaches getting them to work through two router/gateways.

The Speedstream & DG834 are both ADSL routers, modem/router devices.
So bridging is not an option if used for WAN access & routing.
Also with these units it's likely if you bridge them you will loose ADSL+ capability, you'll be ADSL.

Quote
If the speedstream is a modem that is not routing (only connecting you to your ISP's WAN router that is in their office), you have the choice of using SME in Server/Gateway mode directly behind the Speedstream or using another routing device and putting the SME in Server only mode on the local LAN.

Doesn't matter if it's routing or not routing, it's dependent on the type of routing....... 1 to many or..... 1 to 1.

Server-only.... 1 to many or 1 to 1.          (1 to many will work, you have to chase the dynamic IP of the server)
Server-Gateway only 1 to 1.                   (1 to many yields double NAT unlike server-only, no internal gateway)

IOW Server-Gateway mode will NOT work when deployed within the DHCP address pool, whereas (not ideally) Server-only mode will.

However SME will work Server-Gateway mode if you assign a static IP outside the DHCP address pool of the pre-routing.

So either SME modes should be setup 1 to 1 NAT, static IP and also on the DMZ of the router not the LAN.

Don't know why people on this forum keep telling others to put their server on a LAN.

Maybe you all should do some research and realize why.....no one should ever suggest that to anyone.

The implications of suggesting that can be extremely severe to that individual, under the right conditions.

There's a very few instances where server-only mode is required and strips away many options you may desire to have, that Gateway mode offers.

If you can't switch from server-only mode to gateway mode and everything works as it should, then you have a foobar network setup
or you have cabling or SME NIC problems.

That Simple.

Also the problem with the Speedstream 4200 and DG834 is that they employ "virtual DMZ" not "physical DMZ".

IOW they only have one hardware internal interface electronics thus the "virtual DMZ" capability.

However they work great for the gamers because, that's what they were designed to be used for.

As for using them with a server, that's an entirely different ball game.

There are ADSL Routers that have daul or multi hardware interfaces within them, however they cost a bit more and are designed to work with servers.

The other choices are...
1. Use one unit as modem/router and the other bridged as only a router and use it for routing to server.
    The bridge router in essence becomes a DMZ router to the server/s
2. Use one  modem/router and purchase another plain router and use that for the server.

Both will need some networking expertise as well as #1 device configuration expertise.
Both the 4200 & 834 have hidden configuration screens that you would need to access to make the changes.
So #2 is your better option of the two above.

What your trying to accomplish from what you have depicted so far, requires the following equipment.

1. ADSL+ Router with daul or multi hardware interfaces.
2. two independent switches or a single vlan switch.

Otherwise you will have to make some changes in your network setup.

hth
Happy New Year....:P

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #25 on: December 31, 2008, 02:27:58 AM »
RKB

Stupid me, I somehow missed your reply#18 post.
I'm sorry.

Did I get your layout wrong in the previous post?

I think I might have confused things a bit.

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #26 on: December 31, 2008, 10:17:04 PM »
RKB,

Let us know if you get this working or if you still need input.


Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #27 on: January 02, 2009, 12:18:50 PM »
Thanks,
I am waiting on my ISP to confirm the IP and other addresses I have been given are correct.

Will be back here with results as soon as they come to hand.
Cheers

Ron

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #28 on: January 02, 2009, 03:22:43 PM »
RKB,

Quote
If your server can complete the internet connection test on the setup screens, this is working OK and you can eliminate this as your problem.

You do not need to verify the ISP info if the above statement is true.

Run the following from the command prompt on one of your workstations (assuming you are using windows workstations):
Code: [Select]
ipconfig /all
and verify that the Gateway address on the workstation is the LAN IP address you assigned to (eth1) on the server.

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #29 on: January 02, 2009, 04:15:21 PM »
RKB

From the #18 post
Quote
SME in Server / Gateway Mode:
Internet >>>   DG834 >>> SME (eth0) | SME (eth1) >>> Cisco Switch and LAN Clients

SME in Server / Gateway Mode:
Internet >>>   DG834 >>> SME (eth1) | SME (eth0) >>> Cisco Switch and LAN Clients

That just a typo or....

Might you have them swapped.
                                                                       

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #30 on: January 02, 2009, 08:48:23 PM »
Good Morning,
It's a typo,
I have eth0 going to the Modem and Eth1 going to the network switch
Cheers

Ron

Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #31 on: January 03, 2009, 06:40:17 AM »
Good Morning,
It's a typo,
I have eth0 going to the Modem and Eth1 going to the network switch

Should be eth1 going to the Modem and eth0 going to the network switch

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #32 on: January 06, 2009, 12:08:35 PM »
Hi,
Well I rarely do this, I have given up trying to install SME in Server/Gateway mode.

I ditched the Cisco Switch and the NetGear DG834 Modem Router, replaced them with a Belkin modem and a Belkin Switch.

I could get the the Network leg of the Server \ Gateway working fine.
I could get the External Leg to connect to the Internet, but I am incapable of getting the Network to connect to the Internet through the server.

I am using SME in server only mode and I hope that this will not compromise this great product.

I would like to thank all of those that posted info in an effort to help me.

Cheers

Ron
« Last Edit: January 06, 2009, 10:02:57 PM by RKB »
Cheers

Ron

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #33 on: January 06, 2009, 03:05:47 PM »
Be sure that you do not forward all ports to the server from the router in this setup. You should forward only the ports that you need.

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: New Server being setup
« Reply #34 on: January 06, 2009, 03:34:40 PM »
The most secure setup possible is to have the server in server/gateway mode on an entirely separate segment of your network (not physically connected) with a connection made to the LAN side of the server only when administration tasks are performed. This is true of any server or workstation that is directly accessable from the Internet (not just SME).


That being said, you need to assess your own risks on your network and balance risk/ease of use. As per SMOLT here: http://smolt.contribs.org/stats.html more then 1/2 of all SMEs are deployed in server only mode. (This may just mean that more then 1/2 of the SME admins don't fully understand the risks but I do not personally know of anybody that has had their network compromised because of this configuration.)

Good luck and welcome to the community
« Last Edit: January 06, 2009, 03:43:53 PM by mercyh »

Offline Agent86

  • *****
  • 592
  • +0/-0
    • http://www.iclbiz.com
Re: New Server being setup
« Reply #35 on: January 07, 2009, 05:34:07 AM »
Hi,
Well I rarely do this, I have given up trying to install SME in Server/Gateway mode.

I ditched the Cisco Switch and the NetGear DG834 Modem Router, replaced them with a Belkin modem and a Belkin Switch.

I could get the the Network leg of the Server \ Gateway working fine.
I could get the External Leg to connect to the Internet, but I am incapable of getting the Network to connect to the Internet through the server.

I am using SME in server only mode and I hope that this will not compromise this great product.

I would like to thank all of those that posted info in an effort to help me.

Cheers

Ron

Assuming you have the DHCP setting enabled on your SME Gateway/Server and no internet access to local network.
Turn off the DHCP services on the router if it is turned on and see if you can access the internet.
Considering that your setting a static IP on your external SME ethernet connections then I believe the DHCP of the router should be turned off in order that the router will not try to provide an IP to the external connection of the SME ethernet port.
The static IP and Gateway IP settings of the external SME ethernet should match the static IP and Gateway IP provided by your ISP and this will be 2 separate addresses.

I hope this helps.

Offline RKB

  • *
  • 15
  • +0/-0
    • The Patch Shop
Re: New Server being setup
« Reply #36 on: January 07, 2009, 11:44:00 AM »
Assuming you have the DHCP setting enabled on your SME Gateway/Server and no internet access to local network.
Turn off the DHCP services on the router if it is turned on and see if you can access the internet.
Considering that your setting a static IP on your external SME ethernet connections then I believe the DHCP of the router should be turned off in order that the router will not try to provide an IP to the external connection of the SME ethernet port.
The static IP and Gateway IP settings of the external SME ethernet should match the static IP and Gateway IP provided by your ISP and this will be 2 separate addresses.

I hope this helps.

Thanks for the reply,
I have had the DHCP shut down, but problem lies here;
The static IP that my ISP has given me is 60.240.199.106 / 255.0.0.0
The ISP Gateway IP 202.7.162.157

The external leg of the SME Ethernet will not take these numbers it changes the Gateway IP to 60.240.199.1, therefore I can not match up the details as you suggest. I have tried a number of options that I can not get to work. I know it's not the program as many have gone before and made it work. It's me or my hardware.

« Last Edit: January 07, 2009, 11:49:18 AM by RKB »
Cheers

Ron

Offline Agent86

  • *****
  • 592
  • +0/-0
    • http://www.iclbiz.com
Re: New Server being setup
« Reply #37 on: January 07, 2009, 03:25:14 PM »
It's likely a setting in the setup, I recall this subject when installing SME server on a new server recently.Some setting turned on, or off, I'll install SME on a desktop to see if I can duplicate this again to find out what setting you can change. So that the Gateway does not adjust itself. I can't remember what caused this on one of software installs,but I do remember I changed a setting and it stopped doing that.
I'll post back later today sometime. While I diagnosing a problem with my restore job.



Offline electroman00

  • *****
  • 491
  • +0/-0
Re: New Server being setup
« Reply #38 on: January 07, 2009, 06:32:13 PM »
Quote
The static IP that my ISP has given me is 60.240.199.106 / 255.0.0.0
The ISP Gateway IP 202.7.162.157

That information from your ISP does not get entered into SME.
SME will need a STATIC IP ASSIGNMENT

Can you provide us wit this information....

ifconfig

Offline Agent86

  • *****
  • 592
  • +0/-0
    • http://www.iclbiz.com
Re: New Server being setup
« Reply #39 on: January 17, 2009, 03:33:50 PM »
Good Morning,

Thanks for your questions,

Here's the picture,
When in Server only mode;
Router
to
Cisco Switch and it has the Computers on the network and the SME (external) Ethernet Cable plugged in.

When in Server Gateway mode
Router
to
SME Server (External) ethernet card
from
SME Server (Network) ethernet card to Cisco Switch
The rest of the network in also into the Cisco Switch.

For some reason when I use the SpeedStream Router the Router can not be seen on the Network, but the NetGear router can be seen, I do not believe this is a SME issue just something in the hardware.

When in the Server / Gateway mode I think the settings in the router 'fight' the settings in the SME Server /Gateway.

Are you saying to me 'forget' using SME in Server / Gateway mode, just use it in Server Mode

I believe your problem is that you have your router going to the external SME ethernet port. And if you turn off the router DHCP and do not assign a static IP to the router to get out to the modem/internet.
You need to test your configuration setup.
I'm assuming you can turn on DHCP in the router and plug a computer into the router and connect to the internet ?

And if you turn off DHCP to the router, then you have to assign a Static IP and Gateway for that router which is connecting to the modem.

Try pluging the external SME ethernet diirectly to the internet/modem, and the internal SME to the switch just to test your Static IP configuration.
If you cannot get to the internet with that configuration, then likely your static IP setting for your internet connection are not configured properly.

And in addition as the other poster mentioned the Gateway (202.7.162.162) is suspect.
Typically the Gateway should be something similar to the IP perhaps something like 60.240.199.1 or perhaps 60.240.199.107 or something.

I would start with the simplest configuration of external SME to modem, And internal SME to switch (standard port not link) And get things working from there.

If you cannot get access to the internet from there I would call your ISP and confirm your Static ISP configuration.
Also is your modem a standard modem with no other ports or is this modem also a router ?

Here is a sort of sample similar to the other poster:
Usable IPs:              89.124.86.66 to 89.124.86.78
Subnet Mask for all IPs: 255.255.255.240
Gateway for all IPs:     89.124.86.65
Primary DNS:             62.231.32.10
Secondary DNS:           62.231.32.11

I used Subnet Mask of 255.255.255.252 for external submask

And DNS I leave blank, cause I allow the DNS to be resolved locally etc.


Anyhow I hope this helps.


« Last Edit: January 17, 2009, 03:37:03 PM by Agent86 »

Offline Agent86

  • *****
  • 592
  • +0/-0
    • http://www.iclbiz.com
Re: New Server being setup
« Reply #40 on: January 17, 2009, 03:44:18 PM »
One last note you may check as well.

Your Setup for the beginning of the DHCP range of your internal network also should have a IP address for the SME server outside that range for example:

Beginning of DHCP address range   10.1.10.65
End of DHCP address range   10.1.10.250

Then under Server Names in your SME config should be the location and domain of your SME server such as:

DNS server   10.1.10.15
www.myserver.com

Note the address should be outside the DHCP range as shown above.

You probably already knew this, but it's worth mentioning, along with your other hardware config, and checking your ISP static assignment from your ISP.

But in anycase I would keep the hardware configuration simple just to test the connection, and access to the internet, then you can add routers etc. in order to diagnose things a little easier.


Anyhow hope this helps.
« Last Edit: January 17, 2009, 03:49:26 PM by Agent86 »