Multiple public Static IP addresses

[ms526]

Originally posted by: networkman

Originally posted by: kevnich2

Originally posted by: tfinch2

Originally posted by: ms526
Are you guys dense or something? If I want multiple IP addresses, then I'll have multiple addresses and will not be told by a bunch of AOL user retards that I don't need it. I'm aware that I don't get extra speed you fool, I've already mentioned it's because I need to give a unique external address to each host. Is that a problem for you?

Somebody please ban this clown.

Right now I'm willing to second that vote.

Third vote right here.

So this is a forum where if you ask for help, you get banned? Great stuff.

 

[n0cmonkey]

Originally posted by: ms526
So this is a forum where if you ask for help, you get banned? Great stuff.

No, it's a site where people ask for help then insult the people trying to help.

 

[ms526]

Originally posted by: n0cmonkey

Originally posted by: ms526
So this is a forum where if you ask for help, you get banned? Great stuff.

No, it's a site where people ask for help then insult the people trying to help.

I've apologised for that, but it is irritating when you ask for help on how to do something, and then people have the cheek to tell you that you shouldn't be doing it!

 

[networkman]

Considering that the folks that had the "cheek" to tell you you shouldn't be doing it that way ALSO happen to be some of the sharpest network folks in the entire Anandtech forums, that should give you pause to consider their input. Of course you'd have known that had you been browsing the forums for a while before taking the opportunity to post and subsequently insult the lot of them.

The fact that some are still willing to help you at all is a testament to their character.

 

[nweaver]

it's not like anyone here is an IT pro, who gets paid (lots of money) to do this stuff every day...

oh wait, yes they are....

 

[n0cmonkey]

What isn't working?
How are you testing it?
Anything in the logs on the router?

 

[ms526]

Originally posted by: n0cmonkey
What isn't working?
How are you testing it?
Anything in the logs on the router?

1. I am trying to confgiure one-to-one NAT on my Zyxel Prestige 660H router. I would like to map each external public IP to particular internal IP addresses. My IP Information sent to me by my ISP is:

Router IP address: 87.127.54.*
No NAT IP range: 87.127.54.* to 87.127.54.*
Netmask: 255.255.255.248

A screenshot of my router NAT config:

http://img507.imageshack.us/img507/1820/router0mv.png

2. To test it, I am forwarding a particular external IP to my internal desktop IP and opening my browser and going to whatismyip.com to see if it's using it properly.

When I do this, it either won't load any pages or will just use the router IP.

3. There's nothing in the logs to speak of.

 

[n0cmonkey]

Originally posted by: ms526
2. To test it, I am forwarding a particular external IP to my internal desktop IP and opening my browser and going to whatismyip.com to see if it's using it properly.

When I do this, it either won't load any pages or will just use the router IP.

I think this is an improper testing method. What you need is a host external to your network. That host should try to connect to a service on your internal desktop (http, smtp, etc.), but through the assigned external IP address.

 

[tfinch2]

Originally posted by: ms526

Originally posted by: n0cmonkey
2. To test it, I am forwarding a particular external IP to my internal desktop IP and opening my browser and going to whatismyip.com to see if it's using it properly.

You're kidding right?

Test it off your network.

 

[ms526]

I've tried that too, doesn't work. When I set it up to use one-to-one NAT none of my machines can access the internet in any way. I know that the addresses exist and are working because when I disabled NAT entirely on the router and gave my machines NIC cards the external addresses it worked, but it wasn't secure so I want to use one-to-one NAT.

It may be that my router is a plastic piece of crap. I only bought it new back in April and chose it because it claimed to be able to handle multiple addresses, which it seems to fail miserably at. Looks like I may replace it with a Cisco 837 or something.

 

[spidey07]

that looks to be a pretty full featured router and I'm sure it can do nat properly.

The fact that you can put the external IPs and it works makes me thing something is seriously misconfigured. Like IP routing is not enabled.

 

[ms526]

I've checked in the WAN settings and it says IP routing is enabled. Thanks anyway though.

 

[RebateMonger]

Originally posted by: DaiShan
I may be wrong here, but when using Apache's virtualhost directive is used to host multiple sites, you run into a problem when you attempt to host multiple secure sites over port 443 that only one site can be configured to use that port...

Yeah, SSL throws a wrench into hosting multiple secure public WEB sites with only one IP address. You can create wildcard SSL certificates if all of the web sites have the same root domain names, but if you host completely different domains, it's a problem.

You are right. There ARE circumstances where multiple IPs at a site are necessary or desirable.

I'm moving my company's SBS 2003 Server to my home, where I already have my own SBS 2003 Server. Since my home SBS Server acts as a test bed, I'll want it directly hooked to the Internet with its own IP, just like my main business Server. But I COULD have used a single IP for all this, using ISA 2004's server publishing capabilities. And I certainly WOULD have used a single IP if the second server was a simple Web, FTP, or Terminal Server.

The initial replies to the OP were based upon a his/her requirements that included no mention of SSL sites, only basic web hosting and remote access functions. Those are easily handled with a single IP address, with less cost and complication than with multiple IP addresses.

 

[kevnich2]

Originally posted by: RebateMonger

Originally posted by: DaiShan
I may be wrong here, but when using Apache's virtualhost directive is used to host multiple sites, you run into a problem when you attempt to host multiple secure sites over port 443 that only one site can be configured to use that port...

Yeah, SSL throws a wrench into hosting multiple secure public WEB sites with only one IP address. You can create wildcard SSL certificates if all of the web sites have the same root domain names, but if you host completely different domains, it's a problem.

You are right. There ARE circumstances where multiple IPs at a site are necessary or desirable.

I'm moving my company's SBS 2003 Server to my home, where I already have my own SBS 2003 Server. Since my home SBS Server acts as a test bed, I'll want it directly hooked to the Internet with its own IP, just like my main business Server. But I COULD have used a single IP for all this, using ISA 2004's server publishing capabilities. And I certainly WOULD have used a single IP if the second server was a simple Web, FTP, or Terminal Server.

The initial replies to the OP were based upon a his/her requirements that included no mention of SSL sites, only basic web hosting and remote access functions. Those are easily handled with a single IP address, with less cost and complication than with multiple IP addresses.

I'm just thinking of the initial security issues. I can't count the number of times a person has asked me how to put 2 or 3 computers on an internal network with public IP's only to have them come back a week or two later saying, um yeah, my computer now has all these viruses on it or that it was compromised due to having a public IP going directly to the computer. It's just a bad idea IMO. If you do actually have one of the few legitimate reasons for having this type of setup, you would also have the knowledge of how to implement it with your router and how to put the proper safeguards to protect from malicious activity, which the OP obviously doesn't.

 

[spidey07]

Originally posted by: kevnich2
If you do actually have one of the few legitimate reasons for having this type of setup, you would also have the knowledge of how to implement it with your router and how to put the proper safeguards to protect from malicious activity, which the OP obviously doesn't.

Quoted for absolute truth.

 

[JackMDS]

There are legimate Pro. Situation that multi public IP is needed.

However the general public usually needs them for,

Manipu;ation of IPs when one is banned of a server.

Game servers schemes.

Bidding on sites that do not allow large quantity of purchasing by one bidder.

And few more activities like the above that do not deserve help to begin with.

:sun:

 

[RebateMonger]

Originally posted by: kevnich2
I can't count the number of times a person has asked me how to put 2 or 3 computers on an internal network with public IP's only to have them come back a week or two later saying, um yeah, my computer now has all these viruses on it or that it was compromised due to having a public IP going directly to the computer.

Yup. I've seen that EXACT thing happen. It was a worm that placed itself in all the shared folders of an XP computer, which then replicated itself to other shared folders on other PCs. This was before the XP SP2 firewall was out.

 

[ms526]

Originally posted by: JackMDS
There are legimate Pro. Situation that multi public IP is needed.

However the general public usually needs them for,

Manipu;ation of IPs when one is banned of a server.

Game servers schemes.

Bidding on sites that do not allow large quantity of purchasing by one bidder.

And few more activities like the above that do not deserve help to begin with.

:sun:

Why do you people always have to assume the worst?

I don't have multiple IPs for any of those reasons you mentioned. If I wanted to go on a site I was banned off I would just use an open proxy. Simple as.

I have multiple IP addresses because I host multiple sites on multiple servers. None of them use SSL at this moment in time but I need to use multiple servers for load balancing, i.e. one server for scripts (Coldfusion & ASP etc.) and one for static content such as images. Also, I'm a Windows guy so I use Server 2003 & IIS/6.0 not Apache.

Also, there may be a time when I want to run a Gameserver or whatever , so the flexibility of not being forced to use NAT is good for me.

Perhaps your objections to me having multiple IPs run deeper than simple advice. Maybe it's a kind of IP communism where you think that because IPs are running out they should be rationed or something.

Anyhow, I know what needs to be done and how to do it, but like I said it doesn't work probably because my router is either broken or just crap.

 

[spidey07]

Well you could always call zyxel. Normally network companies offer pretty good support.

 

[ms526]

Originally posted by: spidey07
Well you could always call zyxel. Normally network companies offer pretty good support.

Funny you should say that, I was just thinking the same thing myself. I'll send them an e-mail now and see what they say.

 

[tfinch2]

Originally posted by: ms526

Originally posted by: JackMDS
There are legimate Pro. Situation that multi public IP is needed.

However the general public usually needs them for,

Manipu;ation of IPs when one is banned of a server.

Game servers schemes.

Bidding on sites that do not allow large quantity of purchasing by one bidder.

And few more activities like the above that do not deserve help to begin with.

:sun:

Why do you people always have to assume the worst?

I don't have multiple IPs for any of those reasons you mentioned. If I wanted to go on a site I was banned off I would just use an open proxy. Simple as.

I have multiple IP addresses because I host multiple sites on multiple servers. None of them use SSL at this moment in time but I need to use multiple servers for load balancing, i.e. one server for scripts (Coldfusion & ASP etc.) and one for static content such as images. Also, I'm a Windows guy so I use Server 2003 & IIS/6.0 not Apache.

Also, there may be a time when I want to run a Gameserver or whatever , so the flexibility of not being forced to use NAT is good for me.

Perhaps your objections to me having multiple IPs run deeper than simple advice. Maybe it's a kind of IP communism where you think that because IPs are running out they should be rationed or something.

Anyhow, I know what needs to be done and how to do it, but like I said it doesn't work probably because my router is either broken or just crap.

Yep let's blame it on the router.

 

[JackMDS]

Originally posted by: ms526

Why do you people always have to assume the worst?

I guess that 8 years of experience in tying to provide voluntary help on public BBS' results with some sense of profiling that is derived from the communication style of the Help Seeker.

Of course there are times that mistakes are made, but in general it holds.:light:

:sun:

 

[ms526]

Yep let's blame it on the router.

Well what else do you suggest is wrong? I've checked the settings over and over, both in the router and on my network and my systems and it still won't work. It just can't be anything else than faulty hardware.

 

[spidey07]

Originally posted by: ms526

Yep let's blame it on the router.

Well what else do you suggest is wrong? I've checked the settings over and over, both in the router and on my network and my systems and it still won't work. It just can't be anything else than faulty hardware.

It's a configuration problem.

One of the first signs of a network noobie is when they blame it on the hardware.

 

[RebateMonger]

Original request:

Originally posted by: ms526
I would like to give a public IP to my webserver and my desktop which both have private IPs of 192.168.1.4 and 192.168.1.5 respectively.

New request:

I have multiple IP addresses because I host multiple sites on multiple servers. None of them use SSL at this moment in time but I need to use multiple servers for load balancing, i.e. one server for scripts (Coldfusion & ASP etc.) and one for static content such as images.

These are two ENTIRELY different situations. Which one do you want the answer to?