Koozali.org: home of the SME Server

SME 5.6 with both Internal and public IP Range ?

TMMXONE

SME 5.6 with both Internal and public IP Range ?
« on: May 12, 2003, 09:16:59 PM »
hello all
i just installed the SME 5.6 . All are ok . But i want to do the following task.

there is my sme lan:

internet <=> Cisco router <=> SME 5.6 server <=> Hub 100Mbits.

the pcs are connected to the hub.

i have with my cisco router a range of public internet IP.

instead of using internal IP (192.168.X.X) i want to make SME 5.6 serving my range OF public IP.
And if possible Both range : 192.168.156.1 and my public Range IP .

Anyway to do that ? Thanks a lot.

Sorry for my poor english.

boris

Re: SME 5.6 with both Internal and public IP Range ?
« Reply #1 on: May 13, 2003, 06:38:33 AM »
I hope you know why you want public addresses on your local lan. It is much safer to use one of them as public interface for your SME and hide rest of the workstation on the LAN on the private IPs behind SME firewall. This would be a clasic case of using SME in the server-gateway mode and taking advantage of its firewalling capabilities. Rest of unused public addresses you can use later for DMZ or public servers if you ever need them.

But anyway here is how to do it if you still want to:

Assign private range to internal Routers interface (lets say ethernet 0 will have IP 192.168.0.1) and to External SME interface (eth1=192.168.0.2).
Internal (LAN) SME interface will have one of the public IPs (ETH0=206.44.33.1 or whatever your public address is).
On the Cisco router you need to set static route to you public network via external IP address of your SME server. Something like:
ip route 206.44.33.0 netmask 255.255.255.224 gateway 192.168.0.2 etc.
substitute the IP address and mask with your apropriate values.
On the SME server set default gateway to internal router's interface (192.168.0.1 in the example)
This should do it.

TMMXONE

Re: SME 5.6 with both Internal and public IP Range ?
« Reply #2 on: May 13, 2003, 03:52:02 PM »
thanks for your answer.