Combining subnets

Good Morning.
I've got a question on how to combine subnets. I have 3 small closed networks, all utilzing a ip range of 192.168.1.xxx
These networks have no "outside" connectivity to the world and are located in 3 seperate physical locations.
To allow me to manage the applications and such that run on these networks, I am going to bring dedicated connections into a single location so that I can access these networks remotely.
Currently, I have a Point to point T1 connecting me to one network and I utilize Cisco 1841's on either end of that. However, I will pull fiber for connectivity to the other two nets. Both buildings are withing 500 feet of me.
What I want is to have all 3 networks have a Cicso router at the "network" end and a single router in my lan room that connects to all 3. Then, I want to be able to have one or more PC's to be able to connect to any of the 3 networks as needed.
Any thoughts as to the best method to implement this? I think the router side is pretty straight forward, but the PC connectivity is stumping me for the moment.
Thanks
Bob

Hi Bob,
Would it be fair to say that you have one 192.168.1.0/24 subnet and you need to divide it into three such that they all in the 192.168.1.0.24 range but connected via routers?
say :
subnet 1------ router-------subnet 2
subnet 3--------|
If my understanding is correct then you can use the following subnets :
Subnet 1 : 192.168.1.0/26 (192.168.1.0 255.255.255.192
Subnet 2 : 192.168.1.64/26 (192.168.1.64 255.255.255.192
Subnet 3 : 192.168.1.128/26 (192.168.1.128 255.255.255.192
HTH,
Please rate if it helps,
Regards,
Kamal

Similar Messages

Java doesn't bypass proxy for IPs using (IP-Subnet) combination ??

Dear All,
On Mac OS I am getting the below problem, I didn't tried it on Windows may be this problem may not occur there.
Problem:---
On Mac OS (Leopard).
When bypassing proxy IP in "Network Settings->Advanced...->Proxies->Bypass Hosts & Domains" field is given as IP-Subnet combination, e.g. 192.168.60/24, then in Java while trying to connect with HttpUrlConnection's connect() method, and then getting response code using HttpUrlConnection's getResponseCode() method it returns response code 407 i.e. Proxy is required. But safari works well for that,
This Java API works well when I directly give IP as 192.168.60.X it works (Java API) well.
I tried System.getProperties().setProperties("http.nonProxyHosts","192.168.60/24"), then also it doesn't works.
Please tell me any solution, suggestion or workaround or any document that tells it may not be done through Java API.

I think System.getProperties().setProperty("http.nonProxyHosts",any host name, IP with * or |) works well for Windows.
Now may be specifying the range of IPs using subnet on Mac OS (e.g.192.168.60/24) is different than on windows (e.g. 192.168.60/255.255.255.0) and therefore this fails on Mac OS. Although Java is given by Mac for its OS, but I think they didn't made any changes for this API.
Now the question is whether its a bug in Java Mac or there is some workaround present for that???
Do you have any idea that I am going right way or not??

Can 2 vlans have the same subnet?

I hope the combined genius of the fellow community can answer me this. I am new to Cisco, and I understand VLANs as a physical boundary separating broadcast domains.
I was wondering if it is possible to divide 1 subnet (192.168.1.0) into two separate VLANS? I have all layer 3 switches in my environment. Making matters worse, there would be no pattern for the IP address assignments into VLAN-A vs. VLAN-B..
If this is possible, can you please explain the mechanisms for a successful implementation.

It mostly depends if/how you want hosts on them to talk one another (or other networks).
If the answer is "not at all" then you can have as many VLANs as you like using the same subnet.
If the answer is "completely" then you have to either a. break your addressing (L3) down to have one set of hosts in subnet A (on vlan a) and the others in subnet b (on VLAN b). or b. have some fancy tricks in place with network address translation (NAT) in place.
I'll leave the latter solution off as beyond the scope of your question.
For the former, you would just change your subnet mask - for example, if the classful subnet is a "standard" /24 (255.255.255.0) then split it in two - /25 or 255.255.255.128. Assign hosts in one or the other.
You have to have some pattern - all networking is based on patterns in some way or another.

WoL across subnets, how many helpers can you use?

Been going through the searches on this and I can't find an answer to my question. We are implementing Dell KACE and are deploying WoL campus wide. I'm following the referenced doc and in our test environment its working well.
http://www.cisco.com/en/US/customer/products/hw/switches/ps5023/products_configuration_example09186a008084b55c.shtml#diag
My question is this part --------v
I get the need for the bolded helper addresses on the server VLAN. However, I have nearly 150 target networks to deal with. We are on a Class A 10.x.x.x.x, Is there a better way to break this down or do I have to put a target entry for each subnet like the example. I don't want to combine networks because I don't want to broadcast that traffic over that many networks and hosts. Any ideas.
L3(config-if)#
interface vlan 3
ip address 172.16.3.1 255.255.255.0
ip helper-address 172.16.2.255
ip helper-address 172.16.4.255

I do not believe that there is a limit on how many helper addresses can be configured on a router. I am not sure if the same is true on a layer 3 switch (and I assume that what you are showing us is a layer 3 switch). You might just configure it will all the helper addresses and see if it works.
It might be possible to implement some hierarchal approach. If your 150 networks were in 10 regions each of which had 15 networks, then it might be possible to put 10 helper addresses on the router/layer 3 switch where the WOL server is located with each helper address going to a region. On the subnet at each region there could be another router/layer 3 switch with 15 helper addresses to send the broadcast out to the networks in that region.
HTH
Rick

"2 routers, one subnet" or "how do I access LAN of Router#1 from R#2"

Hi folks,
First post is a question but I hope I can contribute in the future.
I realize what i really want is a Wireless Access Point but I was in a rush and none are available locally. My need is to provide wireless internet on my upper floor where the DSL connected router in the basement will not reach. Wireless is disabled on DSL Router1 and not required there. I have currently succeeded in this by connecting a second router (WRT110) via ethernet on my top floor and configuring it to provide a seperate subnet. It aquires an address on it's WAN port from Router1 via DHCP and feeds wireless divices on the new subnet with DHCP provided addresses of it's own. NAT is enabled.
--Works fine for accessing Internet.
However,
I need to run a Squeezebox (ethernet or wireless) from Router2. It has to talk to it's server on Router1's subnet. It succesfully receives an address from R2 but will not conenct to the server on the other subnet.
Short question is Can I make this Work and How?
Random thoughts.
Ideally, I wanted to have the WRT110 "existing on" and "providing wireless access to" the same subnet as Router1. I was told it could be done and it makes some sense if I connect them via LAN ports on both and address accordingly, disable NAT, etc... but I can't quiet figure it out. Even when I tell the WRT110 that I want to assign it a static IP from the first subnet, it asks for both a WAN and LAN address. If somebody can describe and how to configure it to simply exist on subnet #1, it would be most ideal.
Otherwise if keeping two routed subnets
I see a route in my routing table for the two subnets to talk but is NAT still occuring on the packets travelling through the WRT110, even when just trying to access the other local subnet? If so, that boggles my mind on the routing statement requirements.
I tried enabling port forwarding (totally demiliterized it) for the server's IP on Router2 but I'm now thinking I should have done it on R1 as thats where the server exists, but would that only aply to traffic out R1's WAN port? Is this even required at all?
Tried to ponder combinations of NAT off & static or enhanced routing but haven't devised a combination that makes sense or works.
If I ping the server from a laptop running from the second subnet, I get destination host unreachable vs. a time out. So it knows it's out there (kinda sorta) but can't talk at IP level? This only tells me that 'maybe' it's possible if I get it the routing set right.
I won't write every combo I tried, hoping that by now you see what I am trying to accomplish and can tell me the best way to do it or that it's not worth the effort.
P.S.
Yes, I have considered a cheap switch just ahead of R2 so that I could keep the Squeezebox on the old subnet where it's happy and also feed the WRT110 to let it happily route mywireless internet traffic.
I also considered returning the WRT110 and ordering a Wireless Access Point via the Internet but I need to provide service for some guests by tomorrow night. Hope someone here can help.
Thanks in advance.

Assuming your DSL is connected to Router #1(not linksys) and it's default IP Address is 192.168.1.1(subnet : 255.255.255.0)...Then you should change the default IP Address of Router #2(Linskys - WRT110) to 192.168.1.2(this address should be unique) and disable the DHCP Server on Router #2 and it's Internet Connection type should always be 'Automatic DHCP'...This configuration will work when both the router's are connected using their LAN Ports...Internet/WAN Port is not used when connecting both the routers to each other...
With the above mentioned configuration, computers connected to router #1 will communicate with computers connected to router #2...

Issue with HP 3600n, NetGear Wireless Router and SUBNETS!!

Hello All,
I want to say (admit) first off that I am a PC person. The school I work for has recently acquired some new iMacs and I have to say I am very impressed with the design, ease of use and reliability. I can't believe I am saying these things out loud! Here, however, is my dilemma and I am hoping a community with a little more experience than me can help out. I searched through these discussions already and found some useful info, but nothing to really nail it on the head. My situation may be unique, but I am not sure. Here goes:
The school building we occupy is very old. Each classroom has only ONE data drop in it. Each classroom has a few PCs and a few Macs (mostly the newer iMacs). In one classroom in particular, I am unable to print wireless-ly to a networked HP LaserJet 3600n I have setup elsewhere on the network. Here is the network breakdown:
Main network (FIOS modem to SonicPro 2040 Firewall)= 192.168.168.xx. The HP Printer has an IP address on this scope. The classrooms have a NetGear WGR16 setup to act as a switch and wireless access point. The WGR16 also distributes IPs on it's own subnet, 192.168.1.xx. The iMac connects wireless-ly to this NetGear and receives an IP of 192.168.1.xx.
The PCs in the classrooms connect directly to the NetGear Router via an Ethernet cable. The PCs can see the printer, the firewall and get out to the internet with no problems. They can print with no issues. The iMac, however, can get out to the internet but cannot see the HP printer on the other scope. I know how to add a printer in Windows directly via an IP address, but trying that with the Mac doesn't get me anywhere, probably because I am not doing something correctly. I can get the Mac to print to the HP printer's IP directly but it just sends garbled text to the printer and then shoots out 100 blank pages (lol).
The Mac, HOWEVER, can print with no problem wireless-ly to another networked printer I have elsewhere on another scope (it's a Lexmark C532n).
I am thinking the issue has more to do with the HP printer than anything else but my questions are:
1. What is the best way to have Macs recognize printers that are on different subnets if the built in features of Mac OSX aren't "seeing" the printer?
2. Are there any specific issues with the NetGear Router or HP Printer that I should know about and address to solve this issue?
3. We are a school on a limited budget so purchasing any additional hardware is not likely.
I appreciate anyone who has read this entire rambling discussion and certainly appreciate any help in moving things in the right direction. Please let me know if I need to clarify anything I have said here.
Thanks much!!

I just had the same problem with my MacBook Pro using 10.5.5 After trying a number of things, the following worked. (not sure what specifically ... just did this combination)
1. Had the Apple store Genius Bar folks install the latest HP drivers.
2. Restart computer
3. Restart the HP Color LaserJet 3600
4. Connected the HP printer and MacBook Pro directly into a switch, so the wireless was not an issue (both machines had IP addresses set and computer's was set to DHCP with manual IP).
5. Instead of using the System Preference printing and fax tool, I started Text Edit, typed something and said "print".
Print window came up and said "no printer selected"
6. I clicked on the drop down so it would look for printers.
7. It found the HP Color LaserJet 3600.
8. I clicked on the name of the printer and the computer went out and found the driver
9. I clicked on "Add" and it added the printer.
10. I tried a couple of test prints in different programs.
11. I disconnected the hard wired ethernet cables and set the computer to be on the wireless.
12. I printed a few more test prints in various programs.
I had previously tried selecting the printer and drivers through the System Preferences to no avail, but doing it this way worked.
Blessings

Using both Dynamic and Static NAT with two Different Internet facing Subnets

We have two Class C Public Address subnets. We started with Subnet (A) and have many of our Internet accessible devices on it. It is running on a Cisco PIX 515R. We bought a new ASA 5510 8.3(2) and started Migrating the Users and new servers to it so I started with our second Class C Subnet (B). Later on down the road I found out that if the Firewalls Default Gateway is is set to a (B) Interface subnet, then the servers that are statically mapped to a (A) Address will have a (B) address when they communicate out to the internet. So they are receiving packets on their (A) Address, though replying to them with a (B) address.
It was mentioned that I should be able to combine static and dynamic NAT mapping to allow devices behind the firewall to have a fixed external Address when communicating outbound as well as inbound.
So For instance I want the Following: when the Internal Replies I want the reply to come from the mapped IP, not a IP from the Dynamic Pool.
Public IP: 192.168.1.100/24
Internal IP: 10.0.0.100/16
Public IP: 192.168.5.101/24
Internal IP: 10.0.0.101/16
interface Ethernet0/0
description 192.168.1.0/24 Network Outside IP
nameif outside-1
security-level 0
ip address 192.168.1.1 255.255.255.0
interface Ethernet0/1
description 192.168.5.0/24 Network Outside IP
nameif outside-5
security-level 0
ip address 192.168.5.1 255.255.255.0
interface Ethernet0/2
description inside 10.0.0.0/16
nameif inside
security-level 100
ip address 10.0.0.1 255.255.0.0
object network serverA_o
host 192.168.1.100
object network serverA_i
host 10.0.0.100
object network serverB_o
host 192.168.5.101
object network serverB_i
host 10.0.0.101
object network 192-168-1-NAT-POOL
range 192.168.1.50 192.168.1.239
nat (inside,outside-1) source static serverA_i serverA_o
nat (inside,outside-5) source static serverB_i serverB_o
nat (inside,outside-1) source dynamic any 192-168-1-NAT-POOL interface
object network serverA_i
nat (inside,outside-1) static serverA_o
object network serverB_i
nat (inside,outside-5) static serverB_o
route outside-1 0.0.0.0 0.0.0.0 192.168.1.1 1
route outside-5 0.0.0.0 0.0.0.0 192.168.5.1 2
When I set this up my serverB shows a Public IP of something in the 192-168-1-NAT-POOL Not 192.168.5.101
Any Suggestions?
Thanks!

Not sure why I have Multiple Entries. )-: I did think it was Odd. I think it might be because I looking at examples of the new and old styles of NAT.
We have a Single ISP, though have 2 separate non-Contiguous Class C Addresses from them. We host some Servers on one subnet and some on the other.
I'm looking for a way to use both Subnets on the same ASA.
The Connection to the net looks like this:
Internet -> Edge Router Layer3 VLAN Switch
GE0/1.2 - 192.168.1.1 VLAN Tagged --> GE0 - VLAN Tagged
GE0/1.2 - 192.168.5.1 VLAN Tagged -^
Layer3 VLAN Switch Firewall
GE1 192.168.1.0/24 Untagged -> ASA Outside-1
GE2 192.168.5.0/24 Untagged -> ASA Outside-5
Firewall
ASA inside 10.0.0.0/16 -> Switch -> 10.0.0.100
Hope that helps clarify.
I could try to post some sanitized Configs of my PIX and ASA if needed. But the end result I'm trying to do is have the ASA do NAT for multiple Public Subnets.

Is it possible in IOS to have two static routes for the same subnet, one a higher priority and "failover" between the 2?

Hi All
Is it possible in IOS to have for a particular subnet:
a) Two static routes?
b) Make one static route a higher priority than the other?
c) If one static router "goes down", failover to the lower priority static route?
We have a l2tp/vpdn connection to a supplier which can be accessed via two vlans/routes. I would like to make one route the preferred one but the "route" to failover if the preferred route goes down.
Again, many thanks in advance for all responses!
Thanks
John

Hi John,
Hope the below explaination will help you...
R1(config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2
R1(config)# ip route 0.0.0.0 0.0.0.0 3.3.3.3 10
If you notice the Administrative Distance for the secondary route pointing to ISP2 is increased to 10 so that it becomes the backup link.
The above configuration with just two floating static routes partially accomplishes our requirement as it will work only in the scenario where the routers interfaces connected to the WAN link are in up/down or down/down status. But in a lot of situations we see that even though the links remain up but we are not able to reach the gateway, this usually happens when the issue is at the ISP side.
In such scenarios, IP SLAs becomes an engineer's best friend. With around six additional IOS commands we can have a more reliable automatic failover environment.
Using IP SLA the Cisco IOS gets the ability to use Internet Control Message Protocol (ICMP) pings to identify when a WAN link goes down at the remote end and hence allows the initiation of a backup connection from an alternative port. The Reliable Static Routing Backup using Object Tracking feature can ensure reliable backup in the case of several catastrophic events, such as Internet circuit failure or peer device failure.
IP SLA is configured to ping a target, such as a publicly routable IP address or a target inside the corporate network or your next-hop IP on the ISP's router. The pings are routed from the primary interface only. Following a sample configuration of IP SLA to generate icmp ping targeted at the ISP1s next-hop IP.
R1(config)# ip sla 1
R1(config)# icmp-echo 2.2.2.2 source-interface FastEthernet0/0
R1(config)# timeout 1000
R1(config)# threshold 2
R1(config)# frequency 3
R1(config)# ip sla schedule 1 life forever start-time now
The above configuration defines and starts an IP SLA probe.
The ICMP Echo probe sends an ICMP Echo packet to next-hop IP 2.2.2.2 every 3 seconds, as defined by the “frequency” parameter.
Timeout sets the amount of time (in milliseconds) for which the Cisco IOS IP SLAs operation waits for a response from its request packet.
Threshold sets the rising threshold that generates a reaction event and stores history information for the Cisco IOS IP SLAs operation.
After defining the IP SLA operation our next step is to define an object that tracks the SLA probe. This can be accomplished by using the IOS Track Object as shown below:
R1(config)# track 1 ip sla 1 reachability
The above command will track the state of the IP SLA operation. If there are no ping responses from the next-hop IP the track will go down and it will come up when the ip sla operation starts receiving ping response.
To verify the track status use the use the “show track” command as shown below:
R1# show track
Track 1
IP SLA 1 reachability
Reachability is Down
1 change, last change 00:03:19
Latest operation return code: Unknown
The above output shows that the track status is down. Every IP SLAs operation maintains an operation return-code value. This return code is interpreted by the tracking process. The return code may return OK, OverThreshold, and several other return codes.
Different operations may have different return-code values, so only values common to all operation types are used. The below table shows the track states as per the IP SLA return code.
Tracking
Return Code
Track State
Reachability
OK or over threshold
(all other return codes)
Up
Down
The Last step in the IP SLA Reliable Static Route configuration is to add the “track” statement to the default routes pointing to the ISP routers as shown below:
R1(config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2 track 1
R1(config)# ip route 0.0.0.0 0.0.0.0 3.3.3.3 10
The track number keyword and argument combination specifies that the static route will be installed only if the state of the configured track object is up. Hence if the track status is down the secondary route will be used to forward all the traffic.
Please rate the helpfull posts.
Regards,
Naidu.

Combining networks wireless and ethernet

I have three machines, a g4 iMac and a macbook connected via Airport and a Ubuntu linux box sharing the g4's internet connection via an ethernet cable connection. All works well, all three can see the internet fine. However, I can't see the Ubuntu box from the macbook and vice versa the macbook from the Ubuntu box. How can I combine the two networks into one?
Nick Walton ([email protected])

Nick Walton wrote:
I have three machines, a g4 iMac and a macbook connected via Airport and a Ubuntu linux box sharing the g4's internet connection via an ethernet cable connection. All works well, all three can see the internet fine. However, I can't see the Ubuntu box from the macbook and vice versa the macbook from the Ubuntu box. How can I combine the two networks into one?
(It's not a good idea to put your email address in a public forum - if you wish someone can ask to have it removed)
When you say two networks what to you mean. To they have separate routers? In order to share computers on a LAN they must all be served from the same DHCP server, usually a router. They must also all be in the same subnet or it gets tricky. That is, if your router serves up addresses such as 192.168.1.100, and up then all is well. If one of the addresses is 192.168.2.xxx then all is not so well.
You need to check the IP addresses assigned to each box and be sure that they are in the same subnet. The only way around this is to assign static IP addresses to them, still keeping to the DHCP assigning convention.
I am suspicious of the G4 inernet sharing mechanism. I don't know what kind of address it provides, but it's easy to check. Just see what the linux box IP is.
Message was edited by: Theodore

Cross Subnet Netboot Issues

Hello,
I've been working to set up a netboot and Open Directory server in school district. We have the network segmented into VLANs by campus with different subnets for each. The changes have been made to the router to allow bootp/bsdp (IPHelper address set and relay agent on) to communicate across subnets, but I am still unable to netboot/netinstall across subnets.
Watching the logs on the server when I attempt to, it seems to be communicating partially as seen here:
Jul 19 12:48:37 axposeidon bootpd[1822]: BSDP DISCOVER [en1] 1,0:16:cb:8e:50:a6 NetBoot035 arch=i386 sysid=MacBookPro1,1
Jul 19 12:48:37 axposeidon bootpd[1822]: BSDP OFFER sent [1,0:16:cb:8e:50:a6] pktsize 369
Jul 19 12:48:37 axposeidon bootpd[1822]: BSDP DISCOVER [en1] 1,0:16:cb:8e:50:a6 NetBoot035 arch=i386 sysid=MacBookPro1,1
Jul 19 12:48:37 axposeidon bootpd[1822]: BSDP OFFER sent [1,0:16:cb:8e:50:a6] pktsize 369
Unfortunately it fails to actually boot the machine. Im not positive what's going on but it seems like its sending a response back to the netbooting machine but the machine is not getting it and its resending?
The OS X Server is an Intel Xserve running 10.4.10 (though we've been experiencing this issue since as far back as I've been trying with 10.4.8), the image was created in 10.4.8, and works on the local subnet (including multicast ASR). The booting machine is, as noted above, a Macbook Pro.
As a side note, when booted into the OS, the machines can see the server in the Startup Disk preference pane.
Any suggestions or ideas? Let me know if there's more information I can give that will help.

In our district there are multiple public and private subnets. The public and private combination I have the server on currently just happen to be on this physical network, so they are sharing the same router.
I think Im getting a little lost on what you're asking so I'll explain our network structure a little further. The district runs a VLANed network with a different public and private subnet for each campus (the private subnets function mostly as IP address overflow when the public subnet IP limit is exceeded). The network is predominantly PC based and implements active directory servers. The Xserve simply operates as a standalone server currently just handling some web serving tasks and a netboot server.
The issue, regardless of the public and private subnet interfaces on the server, is that I am unable to get anything to boot from another subnet than the one the xserve is running on. If I run it on the public interface, local machines boot perfectly, but I a log like the one above if I try and boot from another campus (ie another VLAN or subnet). To test it locally I've been running it on the private subnet interface (on the same physical network segment) to boot machines on the local public subnet (which fails with the above log).
According to Apple and other sources, all that should need to be configured is our CISCO routers need to be set to pass BOOTP information across VLANs/Subnets, which we have configured (using the IP helper-address and DHCP relay agent), but as stated, the connection is still not succeeding.
I'm checking with our network engineer on a few specifics on how the routers are configured to make sure they are set properly for the forwarding, but he's not available at the moment.
I applogize if this doesnt address the information you're needing, but please let me know if it does not, and I will try my best to get you the needed information.

Subnets on an airport extreme

Hi,
I am trying to setup a mac mini using ethernet to a different subnet to the rest of the wireless network connected machines in the house. Can someone please explain how to configure the Airport Extreme to do this ?
A

If you have a dual band AirPort Extreme with Guest Network capabilty, the only way that you will be able to do what you want is have all of the wireless devices connect to the Guest Network and then connect the Mac Mini using Ethernet to the AirPort Extreme.
The Mini will be on a different subnet than the Guest Network. Devices on the Guest Network will not be able to "see" the devices on the other network and vice-versa.
Here, I am assuming that the dual band AirPort Extreme is connecting to a simple modem....not a modem/router combination furnished by most service providers, which most users call a modem. It is more than that.
To see if you might be able to setup devices on a Guest Network with your AirPort Extreme......
Open Macintosh HD > Applications > Utlities > AirPort Utility
Click Manual Setup
Look for a Guest Network tab under the row of icons, next to the Wireless tab. If you do not see a Guest Network tab, your Airport Exteme is connected to a modem/router, and you will not be able to use the Guest Network function.

Combination bridged mode routed mode CSM

We run an active/standby pair of
CSM with SSL WS-X6066-SLB-S-K9
currently we have our real servers in 2 vlans: 116 and 117. our VIPS are mostly in the client vlan 119. load balancing works fine.
We now want to load balance between real servers in the 116 vlan. So far we have been unsuccessfull to get it owrking. I suspect because we essentially require a configuration that combines routed with bridged mode.
has any one been able to configure such a setup? Is it possible at all?

This type of topology is not 'bridged mode'.
When you has source and destination of load-balancing process in the same subnet (in your topology vlan116) you need use source NAT (client nat in CSM terminology).
Let me explain it:
1. client (srcIP-vlan116) sedn request to VIP (VIP-vlan116).
2. CSM process (modified) request and send it to dstIP-vlan116 (src IP is srcIP-vlan116) (*)
3. server receive request. It will resopnse to srcIP-vlan116 and response is not delivered through CSM, but direct. TCP communication is not possible, because client's request is modified on the CSM.
* when CSM modify source IP for example to one of IP addresses of CSM, response from server is send always to CSM and not direct.
Martin

Query to find Office 2013 Installed for a group of machines on different Subnets

I need a query that will show all machines that have Office 2013 installed and are on certain subnets. These are the two queries I currently have, but I need to combine them.
Machines with Office 2013 Installed:
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS
on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "Microsoft Office Professional Plus 2013"
and SMS_G_System_ADD_REMOVE_PROGRAMS.Version = "15.0.4569.1506" order by SMS_R_System.Name, SMS_R_System.ClientVersion
Machines on certain subnets:
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.IPSubnets = "127.0.0.0" or SMS_R_System.IPSubnets
= "172.0.0.1"
Any help would be appreciated.
Thanks!

give this a try.
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "Microsoft Office Professional Plus 2013" and SMS_G_System_ADD_REMOVE_PROGRAMS.Version = "15.0.4569.1506" and SMS_R_System.IPSubnets = "127.0.0.0" or SMS_R_System.IPSubnets = "172.0.0.1" order by SMS_R_System.Name, SMS_R_System.ClientVersion
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

AD bind accross subnets(vpn)?

I have a Windows 2003 server at 192.168.100.5 at our main location. I have a new Mac OS X 10.4.7 server at 192.168.1.242 at a remote location. They are connected via VPN (ipsec between routers). The VPN is working marvelously and I have no problem getting between networks with IP traffic. DNS is configured on both servers. They are also set up as secondaries of each other. The addresses properly resolve (fqdn).
I cannot for the life of me get the OS X server to bind to the AD on the other subnet using Directory Access. The forest says automatic (I can't change that - I would like to know why) and I put in the fqdn for the AD server for the domain. I provide my proper credentials and I get the following:
An invalid Domain and Forest combination was specified. You should enter a fully qualified DNS name for the domain and forest (e.g., ads.company.com).
I have verified that both servers resolve. What is up with this? Macs on the local subnet have no problems binding to the AD. Please help if you can. I stuck my neck out a bit recommending a Mac server and I really don't want to disappoint everyone.

"They are also set up as secondaries of each other".
So you have different domainnames at the locations?
No. Just using the .local domain at both locations. For instance; server1.local is 192.168.100.5 and server2.local is 192.168.1.242. From a machine on either network, using either DNS it resolves both forward and reverse.
Or is the OS X server location is a subdomain to the
Windows one?
I want the OS X server to be a member of the same Windows domain as the main AD server.
I don't know how you go about connecting different
"forests"/domains in AD or if that's happeing when
you try with your setup. I think they usually use the
same forest/domainame for smaller networks setting up
AD's. Also the netbios name (what you see in
Directory Access and used by Samba) for the same
forest/AD doesn't "spill over" automatically across
subnets.
I thought that was what the WINS server was for. WINS service is what I have replicated on both sides of the vpn. I have both WINS and DNS set up so that all machines are visible on both sides.
Reverse lookup works for both network (also secondary
for each other)?
The OS X server is standalone (no OD) ?
No.. I have it set up as an OD master. I have been trying to follow Bombich's instruction manual.

Subnetting ip range question

Hi,
I'm from belgium, starting to get my way around Cisco and IT networking.
For the moment i'm at chapter 6 discussing subnets.
You got the network part of the bits and the host part.
If you want to create 4 subnets you take the fist 2 bits of the host part.
Than you have 62 addresses free for hosts and 4 subnets.
My question is here: what if for example, your HQ has 80 hosts that need an address.
You have the 62 addresses for one sunet, do you need to use the 2 subnets or can you combine one subnet?

Tom
I am glad that my answer was helpful. Subnetting is a topic with lots of aspects and can be confusing, especially in the beginning. As you get more experience and a better understanding it does get easier.
Your understanding is correct in terms of traditional subnetting. As subnetting was developed one of the principles was that within a particular network all subnets would be the same size, and as you state the size is driven by the requirements of the largest subnet. This did lead to some inefficiencies, as you note.
To address these inefficiencies a new approach to subnetting was developed. This is frequently referred to as VLSM, which is Variable Length Subnet Masking. Traditional subnetting with all subnets the same size was simple but not so efficient. VLSM changed the basic principle that all subnets need to be the same size and gave us flexibility and increased efficiency in subnetting by allowing subnets within a network to be different sizes. So in your case we can say that one site with 80 requires a /25 subnet (255.255.255.128) but the site which requires only 15 could then have a subnet of /27 (255.255.255.224) and that the remaining address space could then be used somewhere else.
You still can not say the subnet is from 1 to 100 and reserve 101 through 127. If the mask is /25 then all 127 addresses are in the same subnet. But now you can say that the smaller site can use a mask that more closely reflects its needs. Earlier routing protocols enforced the requirements of Fixed Length Subnet Masking while more recent routing protocols like OSPF and EIGRP support VLSM.
Good luck in learning more about subnetting.
HTH
Rick

Combining subnets

Similar Messages

Maybe you are looking for