SMC 8014 - 5 Statics but only 4 ports ??

[imported_ForrestGump]

SMC 8014 - 5 Statics but only 4 ports ??

Help please I do not understand how to use my Comcast Business Gateway SMC 8014 that only has 4 ports. I have 5 statics and want to use them all for 5 servers but how can I use all 5 statics if the gateway has only 4 ports? Is there someway to connect a switch so i can use the expand the connection on the gateway to access the 5th static?

SMC 8014 physical connections
Port 1 - Domain Server
Port 2 - Web Server
Port 3 - FTP Server
Port 4 - File Server
?????? - Email server - what do I need to add more physical connections?

What do I need to make this work?

 

[RebateMonger]

Those four ports on the back of the SMC are just switch ports. Connect a separate switch to one of those and that'll give you at least four additional ports.

Plug a cable into the router, plug the other end into the switch, use any of the other switch ports for your server(s).

Edit: I'm not clear whether you have actually set up your SMB 8014 modem/router to deliver multiple public IP addresses to your servers. You'll need to run the SMC in "Bridge" mode, avoiding the use of its built-in router. Using the built-in router will limit you to a single public IP address.

Many small businesses actually use only a single IP address, even for multiple servers. Inbound requests for the various servers are usually identifiable by the TCP Ports they using. SMTP uses TCP Port 25, HTTP uses Port 80, etc., so a NAT router (like provided in the SMC) can send the incoming requests to the appropriate server using Port Forwarding.

Also, don't forget the using the SMC 8014 in bridge mode will disable the NAT and the built-in firewall, so you'll need to provide some sort of separate firewall protection for each of your five servers.

 

[JackMDS]

Welcome to AnandTech forums.

Under normal situation you do not need 5 computers and 5 static IPs to provide these services, one or two computers behind NAT can take care of these servers.

And if you do have a situation that need such complex arrangement you better off getting a consultant tha tis specializing in such setting.

 

[imported_ForrestGump]

I am wanting to gain physical access to all 5 ip addresses so I can use them any way I may need as I do with at&t dsl gateway with 5 statics at another location. I want to learn how to do this and not hire anyone to get it done.

 

[kevnich2]

Originally posted by: ForrestGump
I am wanting to gain physical access to all 5 ip addresses so I can use them any way I may need as I do with at&t dsl gateway with 5 statics at another location. I want to learn how to do this and not hire anyone to get it done.

There is really no reason to have all your servers having a static IP address unless you know what your doing. In your case, if this is for business I would highly recommend hiring a small business consultant to get this all configured for you. Stuff like this is best left to professionals that know what they're doing rather than trying to do it yourself and making a bunch of security problems.

 

[imported_ForrestGump]

But I am trying to learn how to do this myself. I know there are other ways to make a multi server setup work.

I am only asking if someone knows how to access all 5 statics from a SMC 8014.

 

[n0cmonkey]

Originally posted by: ForrestGump
But I am trying to learn how to do this myself. I know there are other ways to make a multi server setup work.

I am only asking if someone knows how to access all 5 statics from a SMC 8014.

You got the probable answer in the first post. Did hooking a switch up to the device not work?

 

[JackMDS]

As far as I know some of the SMC Routers have the capacity to put more than one computer on the DMZ if you have a separate External Static IP for each one.

How many can be put on the DMZ is defined in the Device's manual, and there is No way around it.

http://www.smc.com/index.cfm?e...&knowsPartNumber=false

P.S. If this a Schooll related question it might be of the ""Tricky"" type.

 

[imagoon]

Comcast SMC 8014: Call support have the enable / load the proper static config to the router.
The Modem will consume 1 of the static addresses (you technically get 6 but the modem needs one so you have 5 free.) From there you connect any device you want on the static IPs on the internet with: 1 of the static IPs. Gateway: (being the modem's static IP) Subnet (what ever comcast gave you) typically something like 255.255.255.248.

This modem will continue to hand out DHCP address and allow you use NAT but will route any thing that is in the proper range. Example, when I had it I had a PIX attached with a static IP and configured as mentioned above. However if I connected my laptop to it directly it would get a DHCP address in the 192.168.1.x range.

Again you will get:
"network IP"
"Modem Static"
"open for use IP"
"open for use IP"
"open for use IP"
"open for use IP"
"open for use IP"
"Broadcast IP"

Note also that unit provides 0 firewall abilities while using static IP's. You will be hanging the servers / what ever directly on the internet. To properly use these IPs you need a firewall that can do either MultiNAT or can do IP mapping

Edit: Miscounted something.

 

[JackMDS]

Originally posted by: imagoon

Note also that unit provides 0 firewall abilities while using static IP's.

To be clear, the SMC 8014 is a Router that provides one regular NAT like any other Cable/DSL Router.

However it might have an arrangement to put additional Extenal IPs on the DMZ (aka multiple DMZ Router).

Being on the DMZ, all the ports of every DMZed computer are opened and thus there is No NAT/Firewall capacity, basically the computer sits directly on the Internet.

It is a similar situation like putting on the Modem a switch and connecting computers with external IP directly out while plugging to one switch port the WAN Port of a Router to create a private LAN behind the Router for other computers.

Using the SMC provides better management of the whole system rather than using dumb switch in front of a regular Router.

 

[imagoon]

Originally posted by: JackMDS

Originally posted by: imagoon

Note also that unit provides 0 firewall abilities while using static IP's.

To be clear, the SMC 8014 is a Router that provides one regular NAT like any other Cable/DSL Router.

However it might have an arrangement to put additional Extenal IPs on the DMZ (aka multiple DMZ Router).

Being on the DMZ, all the ports of every DMZed computer are opened and thus there is No NAT/Firewall capacity, basically the computer sits directly on the Internet.

It is a similar situation like putting on the Modem a switch and connecting computers with external IP directly out while plugging to one switch port the WAN Port of a Router to create a private LAN behind the Router for other computers.

Using the SMC provides better management of the whole system rather than using dumb switch in front of a regular Router.

The issue tends to be that ComCast castrates the router to practically nothing. In the 8014 manual you see like 15-17 menu items on the left, when Comcast was done with it you get 5. You can call them and have them change the "advanced" options for you but this can be hit or miss depending on the tech.

I never got "DMZ" to actually work with the thing to be honest. I think they had to many options blocked. I found it easier to just have the PIX do Multi-nat / Mapped IP.