Need a router that will translate 5 external IP's to 5 internal servers on a Comcast Business line

[chemwiz]

We have a SMC8014 router from Comcast and 5 static IP's, but it won't let me assign an external IP while leaving the computer on our internal network. We have an Exchange server, FTP server, and VPN server that all need a different IP, and our old provider (it was a T1 line) had a router that did all that. Is there anything I can use behind the SMC to do this (preferably something cheaper than Cisco)?

 

[RebateMonger]

You can also do this with a single public IP address. All the services you mentioned use different TCP ports, so you can simply accept all requests on a single IP address and use virtually any router to port forward the various requests to the appropriate server's IP address. Why pay for 5 static IP addresses when you don't need them?

Microsoft's ISA Server is also good at doing this. You can route incoming traffic to various servers on your internal network, depending upon the Port or the Host Headers (if a Web request). ISA, for instance, can send a web request for http://www.mydomain.com to one internal server, but send a web request for http://remote.mydomain.com to a different internal server, all using a single external IP address.

 

[cleverhandle]

OpenBSD's PF can do this using binat. I would think DD-WRT would be able to also, but I didn't see it after quickly scanning their site. But maybe I just don't know what terminology they're using.

But really, it's business. You can't afford something like a Cisco 837 for a few hundred dollars?

 

[chemwiz]

I hadn't thought about that, but it might be an easier solution. Gotta check it out with the boss, though, this is an existing network that's changing locations and service providers. Thanks for the input, RebateMonger

 

[chemwiz]

I'm just the hired help, cleverhandle, and was told Cisco was "too expensive a solution" for what he wants. Also, I don't know IOS, so there'd be some additional expense getting it set up

 

[JackMDS]

I think that SMC has a Router that let you put up to 10 computers on the DMZ. I do not remember model number.

 

[chemwiz]

I'll check it out, thanks JackMDS. But I think we're going to try the port forwarding to individual servers, see how that works out.

 

[kevnich2]

Look into a Sonicwall TZ170. They do very nice one-to-one NAT (external IP mapped to internal LAN IP)

 

[hiromizu]

That's called One to One NAT.
Sonicwall does this very well for the price but if you have an Exchange Server, VPN etc., I'd look into their Pro series. We use the Pro 3060s and they've been solid although we're moving to PIX 515E soon.