Networking :: Second Separate Network Using Single ISP Provided Address D-Link DI-624
Nov 25, 2011
I have a standard home network consisting of internet access provided by my cable company which is then disseminated to a variety of wired and wireless devices via a router.
I would like to create a second wireless network that is separate from my current one. This new wireless network would have extra access controls including access restrictions to some web sites using both IP address restrictions and using the OpenDNS DNS servers.
The picture below illustrates the current configuration. The question is: how can I connect ROUTER B to the internet using my current equipment (without buying another IP address from the cable company)?
W
MODEM --> ROUTER A --> ANTENNA <------> COMP 3
1 2 3 4
| |
| |
COMP 1 <---' | W
| ?? <--> ROUTER B --> ANTENNA <---> COMP 4
COMP 2 <-----' 1 2 3 4
W = WAN port
So, in the above picture, COMP 4 is connected via wireless to this second network and cannot access anything on the first network and uses different different DNS servers.
In case it matters, ROUTER A is a Linksys WRT54GL while ROUTER B is a D-Link DI-624.
I have two servers running behind my D-Link DIR-655 NAT router. Obviously, I cannot allow outside access to both of them simultaneously without putting them on different external ports, which I don't want to do. (DNS can only redirect to the common external IP of my router, not the unique internal IPs of my servers.) The easiest solution I can think of to this is simply to put one of the servers completely outside of the router so that it grabs its own IP address from Comcast (and thus allows me to change my DNS records so that the destination IPs are different.) Is this possible, and if it is, how do I do it?
P.S. I've already tried putting one server into the DMZ (Demilitarized Zone) on my router to no avail.
im intending to setup a small office network through a sever at my work and would like to know if it is possible to have the network running with each pc having its own internet connection.in theory this should work by having the internet connected via usb which will leave my ethernet ports free for the network..i would just like to know if this route will work just like that or will i need to have a rethink.
The bootloader used by the device is U-Boot, which is also licensed under the terms of the GPL. Sadly these parts are missing from the source code package provided by D-Link. Therefore I am asking you to add the U-Boot sources to the provided archive or post them here in the forum.
I've got a business network that I'd like to separate two sets of computers all together (thinking through a firewall rule or other method). Here's a text example of what I want to achieve:
Group A: PC 1, PC 2, PC 3 (can see each other and share files within this group)
Group B: PC 4, PC 5, PC 6 (can see each other and share files within this group)
But Group A & B can not see each other and are blocked from accessing each other.Can this be done with the DIR 655 or do I need to upgrade? Also, these two groups will be sharing the same internet connection.
I have a RV042 using (for now), just the single WAN interface. I am trying to forward all packets to port 9000 from the WAN to a single IP address on the network. I've set up both forwarding rules under Setup -> Forwarding and under the Firewall -> Access Rules.I cannot connect to my device from the outside world, however. Is there something I'm missing?
Region : Australia Model : TD-W8950ND Hardware Version : V1 Firmware Version : 1.2.9 build 110212 Rel.22296n
I made some changes on my wireless modem router to stop dhcp and dns provided by my device. A server is now doing it, but at the same time I appear to have connection issues where I didn't before. In an attempt to resolve the issues I looked at the System Log and a number of things were coming up that concerned me. These are as follows:
-user: tr69c: Unable to retrieve attributes in scratch PAD
-user: Stored Parameter Attribute data is corrupt or missing
Additionally I'm getting a lot of kernel: Intrusion alerts which I can't determine how serious they are. Where to start tracking down these issues (if they even warrant investigation).
I have 2 internet services with separate ISPs. My local telephone exchange is somewhat dated so the maximum speed per ISP/connection is about 1 Gbps. I have streaming radio services, I do quite a bit of file downloading and there multiple devices currently trying to share a single connection. I haven't been able to utilise the second connection because my NAS and print serving is all configured on the first connection and therefore unavailable to users/services on the second connection.My goal is to utilise the available capacity of both connections but at the same time allowing all network resources (file and printer sharing, NAS drives, etc.) to be available jointly to all network clients.
My first router is a Netgear RangeMax ADSL modem/wireless router (DG834PN). This connects directly to one ISP and has the NAS and printers attached. The second router is a Netgear N600 wireless dual band router (WNDR3400) which attaches to a Linksys ADSL 2 Gateway with 4-port switch (AG241 v2) and then to the second ISP.As an aside, I also have a number of Devolo devices for utilising the electrical circuit for networking purposes. I have a dLAN 200 AVmini adapter connected to the RangeMax router with 2 further dLAN 200 AVmini adapters and a dLAN 200 AV wireless N adapter distributed through my house.
We have an ASA 5510 and we also have two separate address pools which have been provided by our ISP. The addresses are not contiguous. Is there a way to configure an interface on the ASA to handle both sets of public address pools? If the outside interface is set up on eth0/0 would I create two subinterfaces (eth0/0.1, eth0/0.2) and assign each subinterface an address pool? Then just NAT/PAT to my heart's content? At that point I would want both to route to our inside network. So it's basically two inbound sets of IP addresses comming into one interface and then comming into the network... Right now the outside interface is configured with our first set of IP addresses. We wanted additional addresses and when we called our ISP they told us we already had them - just a different pool. Hence the question. I'm guessing that I wouldn't put anything specific on the outside interface and I would put the specifics on the subinterfaces?
I need to put a few cameras, without a server, on a static WAN ip address. Do I just assign them a static LAN ip address(for example 192.168.1.200), make sure the port they use is open, then type the WAN static ip address then colon and the last address? Like this.....I'm making up the WAN address....45.34.55.334:200
I'm running into a strange problem and cant seem to figure it out. I have an asa running 8.2(1). I have an ipsec vpn setup and working great. I can ping hosts on the inside of the network and everything seems to be fine. However there is one single ip address that i know for a fact is live, but i cannot ping through the vpn. If i ping the address from the asa i get a reply, if i ping the address from inside the network i get a reply, but if i ping when connected through the vpn no reply.
I have a i-ball 150M wireless-N ADSL2+ Router device in that , in the NAT tab, i have activated DMZ at my static ip with a private address 192.168.1.224 , so that that ip enabled device can be access to anywhere in public network.I want that using this single static ip , How to configure two private address devices in DMZ, so that both of ip enabled devices can be access in public network.
We have an ASA5510 running version 8.25. This is in our central office in London. The London network has an ip address range of 10.110.128.0/22. Connected to this via a site-to-site VPN we have a satellite office that has an IP address range of 172.16.148.0/22.
We have now connected to our parent company via another site-to-site VPN connected to the same ASA5510. Their network has an internal range of 10.110.18.0/24. It was our parent company that issued us with our range of addresses a long while ago so that it all fits in with the rest of the company.
We have resources (web servers) on their network that we use which work just as it all should. We now want to allow our satellite office to view those same web servers. The problem is that only 10.110 addresses can flow to our parent company.
I have configured the firewall at our central office and our satellite office to route across to our parent company via our network network and the packets are flowing just fine except that obviously once they reach our firewall they cannot go to our parent company because the 172.16.148 range cannot be routed there.
My idea is to NAT traffic from our satellite office to one of our local addresses before it goes over to our parent company network.
For example: If someone in our satellite office with an IP address of 172.16.150.5 attempts to request a resource from 10.110.18.12 then the request would go via the VPN to our firewall and then get NATed to 10.110.131.200 before being passed on to our parent company network.
My question is what would the NAT configuration be to achieve this. I just cannot work out what type of NAT I would need or how to construct the command. It's probably PAT as it will be multiple addresses to a single address. Essentialy, all traffic from 172.16.148.0/22 destined for 10.110.18.0/24 should get NATed at our firewall to 10.110.131.200 before being passed on.
Just to add, we already have this working from our Cisco 3000 Concentrator which is now going to be phased out hence trying to get this to work on our ASA. The satellite office has now been moved to the ASA and as of today our parent company has been moved to the ASA.
I have a Netgear media player that I need to keep separate from my LAN. I have a switch that's connected to WAN and from the switch to dir-655 and the Netgem box. So I have two IP:s and the Netgems traffic is not going through the router at all.Now I'm short of LAN ports and I bought an eight port switch. However I only have room for keeping two devices at the space they are at. So I need to get rid of the old switch and somehow manage the network(s) with dir-655 and the new switch.The way I see it, I should connect WAN to dir-655 and from there to the switch and connect the Netgem box to router. But how can I configure dir-655 so that the Netgem is not on LAN with other devices?
I am having an issue with the user VPNs. For users connected via the AnyConnect VPN client, all of their Internet traffic goes out their local Internet connection, since I am using split tunneling. However, I need a specific public IP address to go through the VPN tunnel and out the DIA at the main office, rather than the user's local internet connection. I managed to have this IP address go through the tunnel to the ASA at the main office, but it appears that it gets blocked somewhere there, or maybe the return traffic gets blocked. I am using an ASA 5520 at the main office, with software version 8.3.
I need the following ports forwarded for a single ip address Port 88 (UDP)Port 3074 (UDP and TCP)Port 53 (UDP and TCP)Port 80 (TCP) .Is there an easy way to to it with service objects/groups?
I have 4 computers (3 laptops, 1 desktop) in a shared office. We get internet access using their wireless network. All works fine. However, I need to share a printer amongst all of the computers. The printer is LAN enabled and I would normally just put all the PCs on a hub, together with the printer and share it that way. BUT my question is can we access the internet using the wireless network and the printer using a separate wired network at the same time?
I have a Thompson ST546 Router and I want to give it a public ip address and give two servers behind it public ip addresses as well.Now I am having great trouble getting this set in the web interface.
My router IP address is 91.85.232.65 with .66 and .67 will be the two servers. What is the subnet for these ips? Is it 255.255.255.248?
I have assigned my server the public address but if I try to ping it I am getting no response as if the ip is only a local address. My server is windows server 2008, is there a setting to turn ping on/off that I might have missed? I know the server is pingable internally.
Just to make it clear my ISP has assigned me IPs x.65 to x.70 for my use
I have a situation where a user needs more than one office extend AP in his home. My office extend controller is a 5508 running 7.0.220.0. Are there any issues NATing multiple OE APs to a single address? My initial lab results indicate that each of the AP's associate with the controller and establish a DTLS tunnel. I see the SSIDs get pushed to the AP and then it seems to restart the process never being fully operational. Is there a workaround that will allow me to run mutliple OE APs?
We have a Cisco 2911 router in our company. I didn't set it up myself nor I was involved. I only started working here recently, bit over 3 months ago. I have been given ongoing task which other IT Technicians been struggling for almost a year with a idea that maybe because I'm fresh person in the company I will find a original idea why could this thing not work.
Our router have a problem with blocking a single IP address, but not completely It's hard to explain but I will try my best. Company is hosting their website externally and accessing the host and FTP on the host on daily bases. It is important for the website to work on the internal network in company. It does work sometimes, but from time-to-time the website showing time-out error 118 on any point before Cisco router using both http and https, have tried putting just the IP address( doesn't matter is it on the general network or last ISA server on DMZ ). I am able to connect to the website using any of proxy gates but not directly to the website. I have also tested the connection past the router and I was able to connect to the website without any problems. I am also able to ping the host's address from the router and internal network.
I have eliminated the possibility of not correctly setup proxy or firewall on the network as problem also occur on the DMZ. I have also checked access-lists on the router and firewall rules for Any possibilities and I can't really see a way why would the router do this.
I have 2 servers, one active, the other standby, both will be using the same IP. If the active fails then a re-patch for the standby to make this the active. I understand that i will need to clear the arp & maybe mac address table on the 6500 for the new active server to work, as the failed server will have its mac address on the 6500,.
is there a way around this so i dont have to clear the arp cache & clear the mac table? [code]
I am looking for some information concerning network adapters. Many server vendors (HP, Dell, IBM and so on) use multiport single network adapter (one card,several ports -let's assume 4 ports). What resources are shared in multiport solution? For example:
- does multiport nic has significant limitations? For example, it's cpu cannot handle full 4-port load? - interrupt sharing? - buffer size?
We have a single 4500 connecting to two non-cisco devices. We need to enable port channelling or link aggregation between these two.The links are carrying mulitple vlans , hence are trunked and the ip address on either side is used for routing.
From each of the two non-cisco device, i am taking 2 ports each to connect to the 4500.On each non-cisco device side, two ports will bundle together as one aggregated interface (ae1) and the other will be called ae2.
my query is how do i do the configuration for etherchannel on the cisco 4500 side , as it will need two different Po's( port channels).I need a single ip address on both sides of port channel to be present for routing.
I installed the 2.06NA on my DIR-655 router and now I'm having problems adding mac addresses to the network filter. The message is "Invalid MAC address". Of course, it doesn't tell me which entry is invalid and I have a number of them. After further checking.. I noticed that one of the MAC addresses is indeed invalid and when I remove it I still get the error message?
I had no problem running both 2.4 and 5.0 Bandwidth. With WiFi password and without. It does it's job. The 2.4Ghz Range Plus works. I have set up the router on the 2nd floor at the highest it can go. And everyone get's full bars all over the house. I even get 4-5 bars outside in my car on my phone.
The only issue I have with this thing is a damn new netbook I got for Christmas with a Mac Address starting with 0C-EE-E6-XX-XX-XX. The Router finds the Mac Address invalid. In which I can come to understand cause seeing a Mac Address starting like that is completely new to me. Every Mac Address I have, started with 00 except the netbook. So now, I spent days trying to find firmware updates, patches, anything! I even attempted to spoof the Mac Address on the netbook but Microsoft has a bug on Windows 7. (I have the Starter Edition that came with the netbook)
Windows 7 Mac Spoofing works with WIRED Connection. But it does not work with WIRELESS Connection. I used 3rd Party Tools: SMAC and etc... I attempted Registry Edits, I changed even the value key to the "Orginal Mac Address" and it just wont change [New Strings/Network Address Edits included]. I have been banging my head about this for a week now. The Internets has many answers but they did not work. So Spoofing the Mac Address is out of the question. Until Microsoft fixes this bug.
Anyway: Did D-Link release any sort of beta update/driver/firmware or anything to resolve this at all? Is there a modded firmware to force the Router to take this stupid paradox of a Mac Address?
Currently: I have the Router's WiFi Password-ed with Default Factory Settings {Hardware Version: B1 Firmware Version: 2.02NA}.
I have had a great experience with my old DIR-655 (rev A) router. However, I would like to upgrade to a newer and better D-link router for my home that contains many well-connected children. Which routers are like my DIR-655, and have better overall performance than the DIR-655 without necessarily using the benefit of the 5 GHz second band. What better performing routers can record more than 24 MAC addresses in the Network Filtering area? I understand many people don't agree with MAC address filtering, but I like it to keep my kids from giving out my network password to all the neighbor kids and their friends too. So, MAC address filtering works for me. Or, should I just get an updated version of the DIR-655?
My router is showing two separate SSIDs, dlink and dlink 2 it only recently started doing this and around the same time my router has been constantly rebooting when there's little or heavy internet traffic.I have a DIR 655 Hardware Version: A4.Firmware: 1.21 NA
I refuse to go to any version above 1.21 as 1.21 is the most stable firmware for the 655, I have tried all other with terrible outcomes and wireless performance.I've looked around and most people think it's a joke or something, always saying it's probably a neighbors wireless, but that's impossible since I'm on an acreage and my neighbors are too far away for us to be receiving their wireless signals, and if I change the password and encryption type (WPA/WEP/WPA2) I have to change the security settings on both dlink and dlink 2.
Also I have the normal 192.168.0.1 gateway to access the router under the "LAN" section under Status on the router, but under WAN I have a completely different gateway that just recently showed up. I have no idea where this came from or what happened.
I recently moved into a new apartment complex where Internet is included with the rent, meaning that I do not have a personal Internet connection. Instead, the apartment company has a general connection along with a router on each floor of the complex. They then wire out from that connection to an ethernet port in each apartment. Because of that, calling the Internet company doesn't work because they can only tell me that the router on my floor is getting an Internet connection (and unfortunately my apartment is too far away from that router to have signal strength to use it for wireless). Most tenants plug their personal routers into the ethernet ports and use them for wireless connection within their apartments.
When I try to plug my router in, I cannot connect. I get an error message saying that there is no Internet connection. When I plug my Mac directly into the ethernet port, I still get no Internet connection. I've even tried plugging my netbook (PC) in, and get nothing. I have tried network diagnostics, I have used multiple ethernet cables, nothing. The previous tenant apparently plugged her router into the same ethernet jack I am using and had no problems. She has been gone for a few months, and now I cannot connect.
My customer wants each ACE4710 (of a highly available cluster) to have its own, dedicated port for management purposes.
According to documentation, IP addressing can be applied to VLAN interfaces, so in order to satisfy the requirement, I should make one port belong to an "access VLAN X", and then apply IP addressing to the corresponding "interface VLAN X". This should satisfy my customer´s requirement in an indirect way.
But... ¿ Can´t I just configure IP address on one of the 4 ethernet ports in order to save the work of building the aforementioned VLAN? I am asking this since I do not have access to a real box in order to verify.
