Wingate & 2 ip class

[trace]

HI ! I have one wingate server 6.22 on winxp profesional with 2 network cars one is connected with the modem and one for local network (sry for the bad english :p ) I have from my ISP an public ip class with 8 ips ! the question is in my 40 pc network can i set the public ips to 3 pc on the network and the rest of the pc to use local ips ?

[jamesc]

1. Can you add routes to your hardware router?
2. Do the Public IP LAN Clients need to be able to communicate with the Private IP LAN Clients?
3. Do you have a third network card you can use?
4. What license type do you have - or envisage using - or do you know:
http://www.wingate.com/wingate-licensing.php
*I want to know if you will have the "ARP Responder" Feature.
5. Would this be a description of your current network?

Internet
|
|
<Public IP>
Hardware Router
<Private IP>
|
|
<Private IP> <INTERNAL in WinGate>
WinGate
<Private IP> <INTERNAL in WinGate>
|
|
<Private IP>
LAN Client

[jamesc]

*The allocation you have been given would be convenient too.

[trace]

1. i don`t have an hardware rooter i only have an modem cable connected with the pc server where is wingate install

2.yes

3.i don`t have 3 networkcards only 2 but if i must have 3 i buy another one

4.license with all options arp option to

5.Internet
|
|
<Public IP>
Modem cable
PC
<Private IP>
|
|
<Private IP> <INTERNAL in WinGate>
WinGate
<Private IP> <INTERNAL in WinGate>
|
|
<Private IP>
LAN Client


so like i say i wanna know if is posible in my local network to set public ip to 2 , 3 clients and the rest of the clients to use private ips !
the public allocation is xx.xxx.xxx.xx/29

[jamesc]

1. i don`t have an hardware rooter i only have an modem cable connected with the pc server where is wingate install
2.yes
4.license with all options arp option to

--> Acknowledged.

3.i don`t have 3 networkcards only 2 but if i must have 3 i buy another one

--> You will want three for the purpose of security


Instructions:

1. Install the third network card to the WinGate Server.

2. Choose which four Public IP Addresses you will use.
e.g. 210.1.1.1 - 210.1.1.4

3. Assign 210.1.1.1 to this third network card.

4. Set the card as DMZ in WinGate
GateKeeper --> View menu --> Networks --> Network Connections --> <Your DMZ network card>

5. Set the ARP Responder on your network card pointing towards the internet.
210.1.1.2 / 255.255.255.255
210.1.1.3 / 255.255.255.255
210.1.1.4 / 255.255.255.255

6. On your three public IP LAN Clients should be setup as:
IP / Subnet / DG / DNS / 210.1.1.x / 255.255.255.248 / 210.1.1.1 / 210.1.1.1


*I will probably finish this off for you tomorrow. I just want to double check something with a colleague tomorrow - any my apologies for the delay; I had some unexpected time off this week.

[trace]

Instructions:

1. Install the third network card to the WinGate Server.

2. Choose which four Public IP Addresses you will use.
e.g. 210.1.1.1 - 210.1.1.4

3. Assign 210.1.1.1 to this third network card.

4. Set the card as DMZ in WinGate
GateKeeper --> View menu --> Networks --> Network Connections --> <Your DMZ network card>

5. Set the ARP Responder on your network card pointing towards the internet.
210.1.1.2 / 255.255.255.255
210.1.1.3 / 255.255.255.255
210.1.1.4 / 255.255.255.255

6. On your three public IP LAN Clients should be setup as:
IP / Subnet / DG / DNS / 210.1.1.x / 255.255.255.248 / 210.1.1.1 / 210.1.1.1


*I will probably finish this off for you tomorrow. I just want to double check something with a colleague tomorrow - any my apologies for the delay; I had some unexpected time off this week.

a.first network card : ip 8x.1x7.4.1xx subnet 255.255.255.0
b.second network card : ip 192.168.1.1 subnet 255.255.255.0
c.third network card with my external ipclass 8x.1x8.1xx.64/29
networkcard ip : 8x.1x8.1xx.64
subnet : 255.255.255.0 i try 255.255.255.248 but i cant set this mask
DG : 8x.1x8.1xx.65 / i even try to let blank but no change


1. done

2. done

3.done but i don`t know what mask and what gatway to set i try like i say in "c."

4.done

5.on the third networkcard i set arp :
8x.1x8.1xx.65/255.255.255.255
8x.1x8.1xx.66/255.255.255.255
8x.1x8.1xx.67/255.255.255.255

6.LAN Client test setup as:
IP / Subnet / DG / DNS / 8x.1x8.1xx.68(i try with all the class "8x.1x8.1xx.64 - 8x.1x8.1xx.72")
/ 255.255.255.248(try with "255.255.255.0" to)
/ 8x.1x8.1xx.64
/ 8x.1x8.1xx.64

pls tell me where i do wrong :)

[jamesc]

Sorry about this mess - I thought you had a private ip address on the External of WinGate - now I see there is a public ip address - I hope this one is right.

So when I reviewed this again with my colleagues, your network needs to be setup as follows below.


Internet
|
|
8x.1x7.4.1xx
<Public IP> EXTERNAL
WinGate Server ---------------------------------<Private IP> INTERNAL
<Public IP> DMZ
8x.1x8.1xx.64 / 255.255.255.248
|
|
|
|
8x.1x8.1xx.65 / 255.255.255.248 / DG 8x.1x8.1xx.64 / DNS 8x.1x8.1xx.64
DMZ Client 1


So once that is routing to the DMZ ok, you now need to open the ports in WinGate for the communication that is needed between your DMZ and LAN. So for example to have a DMZ machine be able to remote desktop to a LAN Client you would open TCP Port 3389 in .

[trace]

Internet
|
|
8x.1x7.4.1xx
<Public IP> EXTERNAL
WinGate Server ---------------------------------<Private IP> INTERNAL
<Public IP> DMZ
8x.1x8.1xx.64 / 255.255.255.248
|
|
|
|
8x.1x8.1xx.65 / 255.255.255.248 / DG 8x.1x8.1xx.64 / DNS 8x.1x8.1xx.64
DMZ Client 1

i can`t set on my third network card (<Public IP> DMZ
8x.1x8.1xx.64 / 255.255.255.248 ) the mask 255.255.255.248 i got this mesege : The combination of IP address and subnet mask is invalid .

[jamesc]

can`t set on my third network card (<Public IP> DMZ
8x.1x8.1xx.64 / 255.255.255.248 ) the mask 255.255.255.248 i got this mesege : The combination of IP address and subnet mask is invalid.

try .65[/quote]

[trace]

Internet
|
|
8x.1x7.4.1xx
<Public IP> EXTERNAL
WinGate Server ---------------------------------<Private IP> INTERNAL
<Public IP> DMZ
8x.1x8.1xx.65 / 255.255.255.248
|
|
|
|
8x.1x8.1xx.66 (i try `67,`68,`64) / 255.255.255.248 / DG 8x.1x8.1xx.65(i try `64) / DNS 8x.1x8.1xx.65 (i try `64)
DMZ Client 1

now i set the third network card with `65 like u say and it`s ok but the internet on the dmz client dosen`t work ! one more question ARP Responder i must set it to on or of ? and if i must set it to on i must enter the ip`s like u show me in the earlier post ? i try to set off the arp and on but no change !

Regards !

[jamesc]

I am afraid that there is nothing more I can do to help you. And the ARP resonder was based off that network diagram that did not reflect your network so you do not need to use it. If you need more assistance with this then I would suggest creating a new forum post and I will leave it for someone else.