Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: gundar on February 08, 2010, 03:02:58 AM

Title: Secondary Private IP Address Requirement
Post by: gundar on February 08, 2010, 03:02:58 AM

Hi

Just off the top of your head, is it possible to add a secondary ip address to the private side of the SME Server, or, to put that another way, is there a way to have an SME server in Server-Only mode and have two IP addresses of different subnets?

Thoughts, comments (relative) and links?

Regars

Gund

Title: Re: Secondary Private IP Address Requirement
Post by: johnp on February 08, 2010, 05:08:01 AM

No, but you can add additional local networks with the appropriate gateway address

Title: Re: Secondary Private IP Address Requirement
Post by: CharlieBrady on February 08, 2010, 02:57:24 PM

What problem are you trying to solve? Why do you want a second IP address?

Title: Re: Secondary Private IP Address Requirement
Post by: gundar on February 08, 2010, 08:33:06 PM

Hi

Thanks for the tips.

John, does that gateway address bind to the SME Server?

Charlie, the customer has layer two switch infrastructure and wants network sgregation. Secondary IP addresses is one quick fix I know of around this. I am open to other ideas...

Thanks for your quick responses. I always tell potentials that this forum is very quick and accurate to resolve problems.

Cheers


Gund

Title: Re: Secondary Private IP Address Requirement
Post by: mmccarn on February 08, 2010, 11:43:21 PM

The layer 2 switch should be able to do all the fancy routing you need - as well as providing ACLs between "trusted" and "untrusted" networks.

Title: Re: Secondary Private IP Address Requirement
Post by: johnp on February 09, 2010, 12:55:24 AM

I think it would need to be a layer 3 switch for routing etal

Title: Re: Secondary Private IP Address Requirement
Post by: CharlieBrady on February 09, 2010, 03:05:54 AM

Quote from: mmccarn on February 08, 2010, 11:43:21 PM

The layer 2 switch should be able to do all the fancy routing you need - as well as providing ACLs between "trusted" and "untrusted" networks.

If it does IP routing it's not a layer 2 switch...

Title: Re: Secondary Private IP Address Requirement
Post by: CharlieBrady on February 09, 2010, 03:09:37 AM

Quote from: gundar on February 08, 2010, 08:33:06 PM

Charlie, the customer has layer two switch infrastructure and wants network sgregation. Secondary IP addresses is one quick fix I know of around this

That might be one way of pretending to have network segregation. An IP alias, with all devices on the same broadcast network fabric is not network segregation.

You'll have to work out exactly what they mean by "network segregation" and what their exact requirements are.

Title: Re: Secondary Private IP Address Requirement
Post by: johnp on February 09, 2010, 03:29:26 AM

Not to get to far off topic for this forum Since you are in server only mode, I assume that there is a gateway router to the internet. Depending on what model, you may be able to do some kind of router on a stick to route between network segments

Title: Re: Secondary Private IP Address Requirement
Post by: gundar on February 09, 2010, 04:06:15 AM

Thanks for the support and good ideas.

I'll see what's out there and try get more facts.

Cheers


Gund