Topic: E-smith on the same lan as SCO v5.5

[rasjos]

Hi,

I currently have a small network set-up (6 PC's) using SCO openserver v5.5

I want to use e-smith on the LAN to act as a firewall and gateway i.e. in "private server and gateway mode" to an ISDN modem connection.

Before i start messing with settings i want to make sure that my thinking is right.

The SCO server uses DHCP, that means e-smith cannot use DHCP.
Therefore, e-smith must use fixed IP.
Also, the fixed IP addresses assigned by e-smith must be within the range of the DHCP of the SCO server i think???? Can a workstation have more than one IP address??

My questions are:

Does the IP address of the e-smith server have to be within the range of the SCO DHCP or is it better for it not to be in this range?

I want to make the e-smith server as secure as possible and act as a good firewall, is there anything else i can do other than use the "private mode" and use private IP addresses to increase the LAN security.  Would narrowing the range of DHCP on the SCO server have any effect?

TIA

Jason

[Cyrus Bharda]

Rasjos,

All fixed IP computers should have thier numbers outside the DHCP range or the DHCP server will try to assing them to other computers and you will get conficts.

For example, I have a Windows 2000 Server doing DHCP, the range is from 192.168.0.1 to 192.168.0.100.  Now my SME box has an IP 192.168.0.123 and all of my HP LaserJets (with jetdirect cards) have IP's between 192.168.0.100 to 192.168.0.20.

Any other computer that I assing a static IP to gets one that A) is not in the DHCP range and B) Not been already assigned.

Enjoy!

Cyrus Bharda

[rasjos]

Thanks for your reply.

So to setup a workstation running windows 98, i go into the properties of network neighbourhood and set a fixed IP address (under the TCP/IP ethernet adapter) that is outside the range of the DHCP of the SCO server.  Will this not effect how the machine looks at the SCO server as it now has an IP address outside of the SCO DHCP range?  Should i add another TCP/IP adapter and set it to obtain IP address automatically?

Thanks

Jason

[Pete Edwards]

rasjos wrote:
> So to setup a workstation running windows 98, i go into the
> properties of network neighbourhood and set a fixed IP
> address (under the TCP/IP ethernet adapter) that is outside
> the range of the DHCP of the SCO server.  Will this not
> effect how the machine looks at the SCO server as it now has
> an IP address outside of the SCO DHCP range?  Should i add
> another TCP/IP adapter and set it to obtain IP address
> automatically?

As far as I can remember you can reserve IPADDR's in a DHCP range. The SCO server (should have) a fixed IPADDR so any box will be able to see it on that connection. You can bind additional IPADDR's to the ethernet adapter but I'm not sure how windoze98 would react to this... I certainly wouldn't be comforable doing this.

I would keep the gateway fixed and not assigning via DHCP, keeping your SCO box as the domain controller. Get your domain controller to tell your DHCP clients the address of the gateway and their DNS servers... I presume that was what the flap was about??

[Cyrus Bharda]

rasjos wrote:
>
> Thanks for your reply.
>
> So to setup a workstation running windows 98, i go into the
> properties of network neighbourhood and set a fixed IP
> address (under the TCP/IP ethernet adapter) that is outside
> the range of the DHCP of the SCO server.  

Yes, IF you want the 98 machine to have a static ip.

> Will this not
> effect how the machine looks at the SCO server as it now has
> an IP address outside of the SCO DHCP range?

No as long as it is in the same ip range eg 10.0.0.1 and 10.0.0.100 not 192.168.0.1 and 10.0.0.1. If yuo want the SCO box to be the gateway then specifiy that in the settings too

>  Should i add
> another TCP/IP adapter and set it to obtain IP address
> automatically?
>

What for? If you have already specified a static ip then why do you want to have it try to get another one?
 
> Thanks
>
> Jason

NP,

Cyrus Bharda