Multiple fixed IP's with broadband

Hi all,

I have implemented networks with Bethere, BT, Eclipse Internet, COLT etc all with fixed IP ranges from 2 fixed public ip addresses to 8. All of them gave me the useable range one of which was assigned to the router which I set to routed mode, the rest of which I used on a firewall. (In fact with BETHERE used their transparent routing mode and passed all traffic through to the firewall)

Today I visited a new customer, went to replace their DG834G with a draytek Vigor 120 modem and a Netgear FVS336G firewall router. I had a list of the fixed IP addresses provided by the ISP (their name escapes me - something 4u) but the netgear was configured to pick up dynamic and was receiving an IP on a different subnet. I called the ISP to ask why when I tried to use the public range I could not. They stated I had to have a router pick up the initial public IP dynamically from the WAN, bind the first IP of the new fixed IP range to the LAN interface of the router and a second from the new Public IP range to the WAN interface of the firewall. Basically they have given the customer a secondary public IP range but they insist that this is how all ISP's do it... Well, I beg to differ but they don't. I mean, I have seen this config before but normally on higher end installations.

Anyone else come across this type of config on plain old DSL?

Suffice to say I can find no way of emulating this setup with the kit I had to play with so for now am stuck just as before unable to use the new public IP range.

Graham

Graham,

It should not cause major issues as it should work in the same way.

The WAN assigned when the router connections, would be passed to the FVS336G.

You then have a WAN and LAN sides of the FVS336G. So, simply assign one of the IPs from the routed block as the LAN address, with the correct subnet etc.

On each of the machines, either via DHCP or statically, set the gateway, as the IP assigned to the LAN interface on the FVS336G device.

ISPs can use this sort of setup to be able to fire several blocks to one customer easily, instead of just having a single block.

Let me know if I can help further at all

Matt

Hi Matt,

Thanks for the reply.

Well I am not using a separate router but have a modem (Draytek 120) which passes the Dynamic Public IP it picks up to the WAN interface of the Firewall. The firewall authenticates using its own PPPoE client. Now, I want to do two things...

1. I want to have the Multiple Fixed IP's on the WAN interface of the NetGear where I can use them from inbound port forwards and also for the SSL / IKE VPN functionality

2. The firewall will provide both NAT and firewall for the internal PC's on the LAN giving out 192.168.0.x range with its DHCP server.

What I believe you are suggesting is allowing the computers on the LAN to have public IP's.

Thanks

Graham

Hi,

It should pass the IP fine... so we can check that off.

1) Not sure. I've never used the Draytek 120. Taking 2) into consideration it might be possible to add all the additional IPs to the WAN interface, manually.

I've had a similar setup in the past, but with a Sonicwall TZ170.

Matt