Configure RRAS with multiple public STATIC IP address

I have Server 2012 Standard edition.  I have two network cards installed.  I have configure my server to be my router aka NAT BOX using Server 2k12 RRAS. We recently added more servers to our internal network. We needed more
Public Static IP address. Currently we had one and then upgrade to 5 with Time Warner. I configure my WAN NIC card on the server with the new Static IP address from TIME WARNER. How do I add the remaining ones to RRAS. THen i can use services tab to add that
static IP address with this port to that internal ip address which happens to be another server.  Currently when I add to the address pool tab couple my PC or servers gets kicked off the internet especially when I add the service
port and the public ip address from the public ip address pool and the internal ip address and the internal port. Anyhow, what i am trying achieve here is NAT the remaining public IP Address to an internal ip
address. Only a certain ports such as SMTP Port, VPN port, pop3 port, HTTP port HTTPS ports.  Can someone help me configure this on RRAS on server 2012

how can i do port forwarding with the address pool of public static IP address. Currently my Server 2012 is my acting router. I have NIC cards on there. One of the NIC is connected to the Cable Modem and the other NIC card is connected to the
switch. How can I use port forwarding with the other remaining public IP address. The reason is I have two exchange server in my internal network. Both can't be using the same ports so I got more public IP addresses. I just want to configure my RRAS
port forward 80, 443, 25, 110, 143 to both exchange server who have an internal ip address. In order to achieve that I need to have two public IP address.
Tell me if there is a solution.

Similar Messages

FAQ or tutorial for configuring RV220W with multiple static external IP addresses?

I just acquired a used RV220W and would like to use it with my Comcast business internet service (13 external IP's).
My network currently consists of multiple linux machines. Each machine has an internal IP and an external IP. All firewalling is done on the machine itself (using iptables).
I would like to configure the RV220W to be a frontline firewall so the individual machines don't need to be firewalled. I would like each machine to maintain it's network configuration, so as to avoid major disruptions. IOW, I don't (currently) want to use one-to-one nat mapping.
I may consider moving to nat routing at some point in the future.
Does anyone know of a tutorial or FAQ that outlines the configuration steps to accomplish this?
Although I am an IT professional, I am not a networking guru.
Thanks!
david

Hello,
I'm sorry, I'm a little bit confuse about your current setup but I can definitely explain the capabilities on our Small Business Routers.
On the devices that support any type of connection to a modem providing multiple addresses the only way to use then is as follows:
1- The router should be configured with a Static IP address
2- That static IP needs to be part of the same subnet as the other IP addresses that you are planning to use on the inside of the network.
3- The subnet mask configured on the Static IP address should reflect the amount of addresses that you have avialble, For example, if you have 13 available IP addresses your subnet mask on the WAN connection should not be 255.255.255.252.
4- The only way to allow the other public IP addresses on the inside of the network is by configuring One to One NAT and assign them to private IP addresses on the LAN.
5- When you enable the One to One NAT rules on the router, you will be opening either all or just one port depending on the router, and then you will have to configure restrictions on the firewall to block or allow more ports.
Now, if you have a Router with a DMZ port like the RV320, then you can configure the public IP address on a Range on the DMZ port and use the actual public IP address on the NIC of the linux PC's.
I hope this helps

HT5590 Use caching server with multiple public Addresses?

According to the Apple documentation, to use the caching server, all clients need to share the same public address via nat. On my network with many macs, this would appear to make the caching service useless, as we have multiple public addresses to which our clients are nat'ed (a full class C, to be exact). Is there anyway around this restriction, or am I simply going to be unable to use what looks like it would be a highly usefull service?

Yes, the multiple internal/private subnets mapping to a single public IP is very common in the education/enterprise arena. It is the basic hub-spoke topology:
where all spokes connect to needed resources at the hub, and only the hub is connected to the Internet. In the case of K-12 education, we need to run a content filter (by Federal rules) on student Internet connectivity. The most efficient way to do that is to locate the filter (along with other servers and resources) at the hub and then route all Internet traffic through the hub. Each spoke (and the hub) is a different internal/private network subnet ... 10.65.x.x, 10.66.x.x, etc. In my case I have 3M from each spoke to the hub, and then 45M from the hub to the Internet.
In the "old" days ... pre 10.8 ... we had (and still have for some of our oler 10.4 computers) a software update server at each spoke, and computers at each spoke were configured (with the Apple software update script) to get their updates from the update server at their spoke ... iApps as well as OS apps. This worked perfectly!
Now that Apple, in their Orwellian attempt to monitor and control iApps, has introduced this "either-or" attitude about using a local update server OR caching server (but not giving you the option to get iApps from the local update server) they have really hurt schools like mine. Without being able to serve all updates locally on each spoke, updating becomes impossible when you are tryiing to udpate a lab full of computers, and the iApp alone is 1.2G for EACH computer ...and now it must come from the Internet since the caching server is 'broken.'
I currently have case open with Apple Enterprise Support, and will now also get my K-12 Apple Support Tech invloved. I will share this info with them. Perhaps there is some solution that I do not know about, or perhaps there will be a solution created by Apple for situations like mine. I can't see being the only one with this problem, I just think that I may be one of the first to notice it due to my limiited bandwith situation.
Thanks for your insight. Your original post got me thinking and enabled me to identify what *I* feel is the problem. I will keep this thread updated.
M:>

How can I use Apple Caching Service on a Network with Multiple Public IPs?

Hello!
I help manage a network of ~4000 clients for a small liberal arts college in Michigan. I'm looking into the possibility of implimenting Apple Caching Server for our network.
We have one 400mbit pipe out to the internet, and all of our clients are given public-facing IPs to the internet. A caching server would be great, especially on update days. All wireless clients are on the same subnet, which is where I'd like the server to be serving the cached copies.
I have installed Mavericks on a fresh machine, downloaded OS X Server 3.0.3, and attempted to start the caching service. This is what I get.
Unable to start service.
Caching cannot be run on a public network. Consult documentation.
How can I get this up and running?

The way the Caching server works is that the server will be accessing the Internet and when doing so traffic will be coming from it via a particular public IP address. Usually this will not be the address of the server itelf but your router as for most networks NAT is used. In this by far more common scenario the client Macs (and likely iOS devices) will be going through the same router and hence show up via the same public IP address.
If the client request is the same as the address registered via the Caching server then Apple redirect the request via the Caching server.
The setup would look something like this -
           Internet
                |
            Router (with NAT)
                |
(LAN)     +------Caching Server-----Client devices
With this setup because everything is using the same public IP address Apple can reasonably assume everything is on the same network and trigger a redirection to your Caching server.
If you try a setup like the following with the Caching server having its own public IP it will not work because the Caching server and client devices will have different public IP addresses
           Internet
               |
           Router (no NAT)-------------------+
               |                                      |
            Firewall (with NAT)       Caching Server
               |                                      |
               |                                      |
(LAN)     +-----Client devices-----------+-----------
Your configuration as described is more like the following
           Internet
               |
           Router (no NAT)
               |
(LAN)     +------Caching Server-----Client devices
With yours not having NAT each device has its own public IP address including the Caching server and Apple cannot redirect traffic as it thinks they are on different networks.

ICloud question with multiple ME e-mail addresses

Greetings,
We are a family of 4. My wife and I use our domain e-mail addresses tied to 1 Apple ID for Apps, mac Appstore, contacts etc. My kids use the same Apple ID but no contacts etc. We separate our contacts on our devices using Groups.
I'm wanting to start adding a few other Apple addresses under the Me.com domain to utilize some of the other services like notes, mail, etc. Today I setup a new Me e-mail and it just added it under our main Apple ID email address with no password. If I want to setup more, how does this all work under the Apple "Eco system"? Is it time to start migrating all this stuff apart or will it all "just work"? Will they all have the same password under iCloud?
//Cheers

You can't setup multiple @me.com addresses under a single iCloud acount / Apple ID.
For independently syncing Notes, Mail, Contacts etc. you need independent iCloud accounts.

Fail to configure MPxIO with multiple SAN LUNs

Hi
Anyone with ideas on why Solaris 10u3 x86 MPxIO operates for single lun under default 'scsi_vhci' but not for multiple LUNs seen (ref below).
All feedback appreciated.
# cfgadm -al -o show_SCSI_LUN c2
Ap_Id Type Receptacle Occupant Condition
c2 fc-private connected configured unknown
c2::200100172a3100c2,0 disk connected configured unknown
c2::200100172a3100c2,1 disk connected configured unknown
c2::200100172a3100c2,2 disk connected configured unknown
c2::200100172a3100c2,3 disk connected configured unknown
c2::200100172a3100c2,4 disk connected configured unknown
c2::200100172a3100c2,5 disk connected configured unknown
c2::200100172a3100c2,6 disk connected configured unknown
c2::200100172a3100c2,7 disk connected configured unknown
# cfgadm -al -o show_SCSI_LUN c3
Ap_Id Type Receptacle Occupant Condition
c3 fc-private connected configured unknown
c3::200300172a3100c2,0 disk connected configured unknown
c3::200300172a3100c2,1 disk connected configured unknown
c3::200300172a3100c2,2 disk connected configured unknown
c3::200300172a3100c2,3 disk connected configured unknown
c3::200300172a3100c2,4 disk connected configured unknown
c3::200300172a3100c2,5 disk connected configured unknown
c3::200300172a3100c2,6 disk connected configured unknown
c3::200300172a3100c2,7 disk connected configured unknown
#

ssolbach wrote:
you need to initialize the repository.
And after that it should get mounted (not under OVS though... the path was something like /opt/ovs-repositories/mount/ID or something). Sorry can't check atm.It gets mounted in /var/ovs/mount/UUID

I have a HP OfficeJet Pro K550 with a default static IP address and I can't access it to change it.

Because this printer's default static IP is not in my subnet and my network does not have a DHCP server I am unable to access the settings I need to change the IP address to one I can use. I am using Windows 7 64-bit and am plugged into the printer via USB. I know if I had an IP address from my network I could type it into the address bar and open up far more settings but I am unsure how to do that since the default IP is not on my network.
This question was solved.
View Solution.

I assume you cannot log into the printer's subnet temporarily? Can you disconnect the printer from that subnet temporarily? Can you connect an Ethernet cable between the printer and your PC?
Say thanks by clicking "Kudos" "thumbs up" in the post that helped you.
I am employed by HP

How to Configure iCloud with multiple iCloud accounts and one apple id

I need some help from the icloud experts. I almost have my arms around this, but not completely.
What I want to end up with is the following:
One account that both my wife and I use for shared contacts, calendars, photostream and find my device.
Separate account for my email among several devices.
Separate account for my wife for her email among several devices.
Now what I curently have is an apple id (*.mac.com), which is the main account used for purchases, etc. It has my mail, backups, and 25GB of space as a result from MobileMe.
I created a separate icloud account for my wife, using her Apple ID, so that her mail stayed separate from mine. However, now we have separate photo streams, contacts, etc, which is getting confusing and cumbersome.
I would like to keep my apple id as the main account since it already has the 25GB of space. So tell me if the following make sense.
I setup the master account using my apple id (the one with 25GB of space) for both of us, and enable the contacts and calendar syncing for all of our devices.
I turn the mail and Safari bookmarks syncing on for my devices; but turn it off for my wife's devices.
Then I use my wife's account on her devices to sync her mail, bookmarks, etc.
Would this work or is there another combination to use? Ideally a family oriented apple id would be good for the master account, but it wouldn't have the 25GB of space unless I purchased it. I'm trying to get around that if possible. I have tried to find something like this on the discussion boards but haven't had luck yet.
Thanks in advance for any help.

Set up your mac.com account again on devices. Turn off Mail and other data syncing with this account on your wife's devices for data that you want to keep separate. Then set up a second ("secondary") iCloud account on your wife's devices to sync Mail.
If you already set up a separate iCloud account on your wife's devices, on her devices go to Settings>iCloud, tap Delete Account, then sign back in your your mac.com ID. Turn on the data you want to share with this account across all devices; don't turn Mail on. Then go to Settings>Mail,Contacts,Calendars>Add Account>iCloud and enter her separate iCloud credentials and turn Mail to On.
The only downside to this approach is that her email will be fetch, not push email. Push email is only supported in the main ("primary") account, not a secondary account.
The limitations to be aware of with secondary accounts are that only the primary account can be used for Photo Stream, Bookmarks, Documents, iCloud Backup and Find My Device. Also, push mail only works for the primary account; secondary account mail is fetch.

Configure WAP4410N with Multiple SSIDS

I need to configure a WAP4410N for use on a small, very simple business network. There should be a corporate WLAN and a guest WLAN. The corporate WLAN should allow anyone connectd to it to access resources on the domain.
In front of the WAP is a cable modem/router and a basic Level 2 (web managed) switch. What do i have to do to segregate the corporate and guest networks.
I thought I would add the corporate WLAN to VLAN1 (assuming the default VLAN in the switch is VLAN1). Then I figured I could create the guest WLAN and assign it to VLAN2 which which will be controlled entirely by the 4410N (DHCP, DNS, etc.) Does this sound like the right way of going about things?
If not, can you please point me in th right direction?
Thank you,

That's right.If you are going to create a guest wireless network, or any additional SSIDs for that matter, you'll also need to create an additional vlan for the guest network. I've pasted below the 4 steps from the WAP4410N manual, and then as a final step you'll also need to configure vlans on your switch so that traffic on the guest wlan will be allowed a path on your network.
STEP 1
Click Wireless > VLAN & QoS.
STEP 2
To configure VLAN settings:
NOTE You can enable this feature only if the hubs/switches on your network
support the VLAN standard.
a. To enable VLAN, click Enabled.
b. Provide the following information:
• Default VLAN ID—Enter the default VLAN ID.
• VLAN Tag—Select Tagged to determine the associated VLAN from the
VLAN tag. The default is Untagged.
• AP Management VLAN—Specify the VLAN ID used for management.
• VLAN Tag over WDS—Select Enabled or Disabled as required.
STEP 3
To configure the QoS settings, enter the following information:
• VLAN ID—Enter the ID to assign to the VLAN.
• Priority—Select a priority from the list.
• WMM—To enable WMM, check the corresponding check box.
Wi-Fi Multimedia is a QoS feature defined by WiFi Alliance before IEEE
802.11e was finalized. Now it is part of IEEE 802.11e. When it is enabled, it
provides four priority queues for different types of traffic. It automatically
maps the incoming packets to the appropriate queues based on QoS
settings (in IP or layer 2 header). WMM provides the capability to prioritize
traffic in your environment. The default is Enabled.
STEP 4
Click Save.
STEP 5
Configuration on a Switch running IOS
apply the following to the interface that the WAP4410N is connected to:
en
conf t
int
switchport mode trunk
switchport trunk encapsulation dot1q
switchport trunk native vlan 1
switchport trunk allowed vlan 1,
end
*you'll also need to configure any interfaces that packets from the guest wlan will traverse, if you intend to permit guest traffic over them.

Proper setup for a network with Public Static IPs and Private IPs

hello all-
i am trying to setup a network with public static IP addresses and local (internal) IP addresses with 192.168.xxx.xxx format. i will try to explain as best i can how i have it set up and what my issues are.
i have COX business services in my home and 8 static public IPs assigned to me. i have tried setting this up and everything internally (192.168.xxx.xxx) works fine and all the devices can get to the outside world fine but when i try to access ANY of the devices on the public IPs from outside the network i get absolutely nothing. the browser just times out and i cannot ping the devices even though COX can see and says the devices are bridging over. COX is unable to get a response when they ping the devices either.
one of the devices is a Synology NAS with one Ethernet port that is using a public IP and the other using a 192.168.xxx.xxx address. when the Ethernet port is setup using a static public IP COX can see it but they get no response from a ping and when they go to the address to get the login page the browser times out. when i reconfigure the port for DHCP it grabs a public DHCP address and when COX pings that they get a response AND they are able to type the DHCP adress in their browser and get to the login page no problem. when i switch back to the static IP they can see it but again are unable to get a response from a ping and are unable to go to the login page.
my setup is:
COX Modem (only has 1 Ethernet port) ====>> 8 port NETGEAR Gigabit switch (all devices with Public IPs are plugged into the NETGEAR switch)
NETGEAR switch ====>> WAN Port on Airport Extreme (latest version w/all software updates)
LAN Port Airport Extreme ====>> CISCO 2960 48 port Gigabit Switch (all internal devices are plugged into the CISCO switch)
like i said everything with the 192.168.xxx.xxx connects and i can connect to just fine but none of the devices with public static IPs can be pinged even though COX can see them bridging over. i have tried all new cables on the devices and that didn't work so it has to be something with my setup.
do i need to add another router to this configuration because i have extra airport extremes lying around i can use if someone could just tell me how the setup should be. i also have a few ports open on the CISCO switch; is there a way i can use it for the 4-5 devices that have public IPs? or will that cause a problem with all the other devices plugged into it with the 192.168.xxx.xxx IP addresses?
i'm not a networking guru (obviously) so if you are able to help me get this setup properly can you try not to use Doctoral Level syntax in your response? i would greatly appreciate it!
i appreciate any and all help... thx in advance!

Duplicate posts.
Go HERE.

Port Forwarding and Static IP addresses

Netcomm NB1300 router and Airport Express.
I want to use and old G3 mac running 10.3.9 as a server for HTTP and FTP. The Mac is currently connected via Airport but I can connect it via Ethernet if necessary.
I understand that I will have to activate Port Forwarding on my Router with Ports 21 and 80 to allow external Internet access to the G3. I will also have to configure DHCP Manually for a Static IP address and probably link up with a Free DNS service to maintain reliable access to the G3.
I have other computers on the network, two Macs (Ethernet / 10.3.9 & Airport 10.4.11) and two PC's (one with Vista, one with XP / both on Airport). Only one of the extra Macs is connected via ethernet, the rest are connected via Airport.
Will I have to assign Static IP addresses to all the computers or just the one I want to use as a server?
And also, can anyone tell me about Port Forwarding via Port 22 to give more security from external observation/attacks? I know nothing about this security measure.
Thanks in advance.
Christo.

Hi--
Christo wrote:
I am now assuming I will be able to access the 'server' from an external location. Very optimistic! But I can't test that for a couple of days.
Ah, but you've given up too soon! You can access your web server from outside your network real easy: you just need to find an external client you can point back to your site. I like to use the W4C validator to do that. It has the happy side effect of also telling you if your web page markup is valid. So you'd point your browser to the validator page:
http://validator.w3.org/
I like to choose "More Options" and tell it to show the page source. That way I can also verify that it's seeing the page I want it to see.
If I disconnect the iBook from Ethernet, can it still be accessible from an external location if it is connected to the Router via Airport, or do I have do so something like Port Forwarding with my Airport Express as well? Note the iBook can still connect to the Internet via Airport.
It would depend on how your Airport is set up. I think there are a couple of ways to set them up. One is to make the Airport a DHCP server, which would make the wireless network essentially a separate network. In that case, you'd have to forward throught the Airport, too.
My wireless network, though, is set up to bridge, so it's all one network. In that case, all I'd have to do to forward wirelessly to a client would be to set up the forward on the main router.
Being that persons other than myself will be accessing the iBook via FTP, do I give them the user account password of the Mac, or can I set a password in the Router or something else?
Also, when accessing the iBook on my local network using Cyberduck, I can see the entire directory of the iBook's user account. Is there a way to limit access to just one folder, such as the Public folder, or a self-designated folder?
Unfortunately, I don't know anything about setting up FTP. I would suggest that you look into maybe making an account on the iBook specifically for the FTP user and only give out that username and password. You might want to poke around in the Networking and the Web and Unix discussions in the Mac OS X Technologies area. I've seen a number of posts there about setting up FTP, and you might be able to find your answers there.
charlie

How do you configure router to use a static ip

I use dynamic broadband internet service, www.dybb.com and I was wondering if there was a way to configure my routers IP address because they gave me a static one and It can't connect to it so could you let me know how to change my routers IP address to match mine?

Configuring the router for a Static IP address is pretty straight forward.
1. First you have to login to the router, by browsing to 192.168.1.1 using Internet explorer
2. When prompted to login, leave the Username field blank and type "admin" as the password
3. On the Setup>Basic Setup page, click on the drop down menu next to Internet Setup and select Static IP
4. Enter all the information your ISP provided you in the appropriate fields, then click Save Settings to apply these changes.
If you are having trouble accessing the 192.168.1.1 interface, it may be because your PC is currently configured with the IP address your ISP assigned you. To change this:
1. Go to the Start menu, click on Control Panel, then double-click on Network Connections
2. Right-click on the connection named Local Area Connection and select properties
3. Highlight Internet Protocol (TCP/IP) from the list in the middle of the Properties window and click then click the button labeled Properties
4. Change both of the options on the General tab "Obtain xxx Automatically" and then click OK
5. Click OK once again on the Properties window and then try and access 192.168.1.1 once the status of the Local Area Connection has changed from "Acquiring network address" to "Connected".

Service Procurement with Multiple Service Line items

Dear Experts,
We have the following Business Scenario. Request your inputs in addressing this issue.
Business scenario : Most of the Procurement for our client is of services. So, we need to configure services with multiple service line items. This Shopping cart to create PR in ECC. PR to PO conversion to take place in ECC. Now onwards client needs Supplier integration for confirmation of services and sending invoices by Vendor.
Guidance required in the following
1 In Shop functionality if we select services, PR is being created in ECC with only one Service Line item. Whereas if we go for Request functionality, then always it is routing to Bidding process (which is not required for client). Can we create SC with multiple service line items with out request functionality?? Or Can we root the Request functionality with out Bidding process??
2 If we convert the PR to PO in ECC (Classic Scenario), can we go for SUS integration. In such case which is the best way of supplier integration. Can you please guide us on basic steps on installation (can we go for different client in the same server) and configuration.
Request your inputs in this regard
Thank you,
Ravi

Hello,
We suffered the same problem in our company. We have found a way to work with the SRM shopping cart multiple line rollup to ECC single line purchase order.
If the multiple shopping cart line items contain the same location code and cost assignment they will rollup into one ECC purchase order. The system seems to 'think' it is helping you by consolidating your information.
In the Basic Data section of the shopping cart there is a Service line item field. If you enter something in each in that field for each line it will keep it's own line in ECC.
Your implementation may differ slightly from ours but I recommend playing with the location code, cost assignment and Basic Data service line fields until you can see a pattern. Basically you need to find a method to make each line a separate entity so they don't rollup.
Good luck,
Corinne

Encrypt/Decrypt data, multiple public keys using Bouncy castle api?

Hi all.
I need to implement encrypt/decrypt functionality of some data with many public keys using bouncy castle api and EnvelopedData class in java 1.4 SE.
Could someone give me examples how to do it. I searched whole the internet and i could not find simple example.

Hi thanks very much.
I had a quick look at the examples. I will see if they could help me.
Here is more specific what i want:
Encrypt data with multiple public keys that are kept in .pkcs12 file.
And decrypt the data using coresponding private key after that.
I must use bouncy castle api for java 1.4 se.
Best regards
Edited by: menchev on Nov 13, 2008 8:26 AM

Integrating BIP with multiple LDAP servers

Hi,
my question is very simple. In Admin->Security Configuration->Security Model section i've setted Security model combobox with LDAP value. Then i've filled all LDAP information field (for example:URL). All works. But in my rpd i 've multiple LDAP servers (multiple URL) and in the form i can insert information about only one LDAP server.
Is it possible configure BIP with multiple LDAP servers?
Thanks
Giancarlo
P.S. I'm using OBIEE 10g

Hi,
my question is very simple. In Admin->Security Configuration->Security Model section i've setted Security model combobox with LDAP value. Then i've filled all LDAP information field (for example:URL). All works. But in my rpd i 've multiple LDAP servers (multiple URL) and in the form i can insert information about only one LDAP server.
Is it possible configure BIP with multiple LDAP servers?
Thanks
Giancarlo
P.S. I'm using OBIEE 10g

Configure RRAS with multiple public STATIC IP address

Similar Messages

Maybe you are looking for