BT Infinity Business 5 Static IP Addresses Hardware Suggesti

Hi,

We have a BT Infinity Business service with 5 static IP addresses. At the moment we have a firewall (watchguard xtm) connected directly to the BT supplied modem. The firewall has the 5 static IP addresses configured and everything is generally ok.

However we need a site-to-site vpn setup and for this to work, the firebox must have one of the static addresses configured on the external interface. The problem is that BT issues a dynamic peering address. From what I've read, this is a common setup and can usually be resolved by using a router/modem with NAT turned off and one of the public addresses used as a local address. The solution in the following post seems typical:

http://www.cliosport.net/forum/showthread.php?523028...

Solution as an image:

http://smg.beta.photobucket.com/user/gabi_cavaller/m...

I have two questions:

1, Can anyone suggest a device that will work with fibre - a simple ethernet modem?
2, This solution essentially 'wastes' one of our public addresses, is there a different solution that wouldn't?

Thanks,

Mark

I haven't followed your links, as this isn't really a strong subject for me, but are you aware the Huawei "modem" is a router in bridge mode and is easily unlocked, with some configuration options then available, or can then be used as a modem/router? I assume the ECI one can be used similarly, but the unlocking is not quite so straight-forward.

Might that help?

Hey,

That could be the way forward - yet another device in the chain doesn't seem like the correct approach.

I've managed to find an unlocked device, that way I don't risk damaging the current device...

Mark

Good luck. Let us know how things go .

BT's approach is a bit odd, using an unrelated IP address as the WAN address to route other stuff to a block of IPs. More typical to have a block of addresses one of which is the router's WAN port.

I couldn't see why the proposed approach would be different to using one of the static IPs on the firebox and routing to it via the firewall - I assume the firewall has the PPP donated WAN address.

There are routers with "multi-NAT" or similarly named features to do both NAT and fixed IPs at the same time, but if the watchguard can do the same......