Koozali.org: home of the SME Server

Secondary Private IP Address Requirement

Offline gundar

  • *
  • 25
  • +0/-0
Secondary Private IP Address Requirement
« on: February 08, 2010, 03:02:58 AM »
Hi

Just off the top of your head, is it possible to add a secondary ip address to the private side of the SME Server, or, to put that another way, is there a way to have an SME server in Server-Only mode and have two IP addresses of different subnets?

Thoughts, comments (relative) and links?

Regars

Gund

Offline johnp

  • *****
  • 312
  • +0/-0
Re: Secondary Private IP Address Requirement
« Reply #1 on: February 08, 2010, 05:08:01 AM »
No, but you can add additional local networks with the appropriate gateway address

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Secondary Private IP Address Requirement
« Reply #2 on: February 08, 2010, 02:57:24 PM »
What problem are you trying to solve? Why do you want a second IP address?

Offline gundar

  • *
  • 25
  • +0/-0
Re: Secondary Private IP Address Requirement
« Reply #3 on: February 08, 2010, 08:33:06 PM »
Hi

Thanks for the tips.

John, does that gateway address bind to the SME Server?

Charlie, the customer has layer two switch infrastructure and wants network sgregation. Secondary IP addresses is one quick fix I know of around this. I am open to other ideas...

Thanks for your quick responses. I always tell potentials that this forum is very quick and accurate to resolve problems.

Cheers


Gund

Offline mmccarn

  • *
  • 2,656
  • +10/-0
Re: Secondary Private IP Address Requirement
« Reply #4 on: February 08, 2010, 11:43:21 PM »
The layer 2 switch should be able to do all the fancy routing you need - as well as providing ACLs between "trusted" and "untrusted" networks.


Offline johnp

  • *****
  • 312
  • +0/-0
Re: Secondary Private IP Address Requirement
« Reply #5 on: February 09, 2010, 12:55:24 AM »
I think it would need to be a layer 3 switch for routing etal

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Secondary Private IP Address Requirement
« Reply #6 on: February 09, 2010, 03:05:54 AM »
The layer 2 switch should be able to do all the fancy routing you need - as well as providing ACLs between "trusted" and "untrusted" networks.

If it does IP routing it's not a layer 2 switch...

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Secondary Private IP Address Requirement
« Reply #7 on: February 09, 2010, 03:09:37 AM »
Charlie, the customer has layer two switch infrastructure and wants network sgregation. Secondary IP addresses is one quick fix I know of around this

That might be one way of pretending to have network segregation. An IP alias, with all devices on the same broadcast network fabric is not network segregation.

You'll have to work out exactly what they mean by "network segregation" and what their exact requirements are.

Offline johnp

  • *****
  • 312
  • +0/-0
Re: Secondary Private IP Address Requirement
« Reply #8 on: February 09, 2010, 03:29:26 AM »
Not to get to far off topic for this forum Since you are in server only mode, I assume that there is a gateway router to the internet. Depending on what model, you may be able to do some kind of router on a stick to route between network segments

Offline gundar

  • *
  • 25
  • +0/-0
Re: Secondary Private IP Address Requirement
« Reply #9 on: February 09, 2010, 04:06:15 AM »
Thanks for the support and good ideas.

I'll see what's out there and try get more facts.

Cheers


Gund