use dynamic IP for home network and static for server from same router

net42

Honorable
Dec 11, 2013
3
0
10,510
G'day,

I am looking for a way to set up my server so that I can access it from anywhere with a static IP address that I already have, while still having my home network on the same connection.

My current goal is to have a network connection coming from the modem that is split into the static IP address that I pay for (and route that directly to my server) and a dynamic IP address that is used by my home network. Is this possible, or is there a better way of doing this?

I have an old router currently that does not seem to have the features I need to do any variations of this.

I have attempted using my server as my router to get around this issue (and assigning the server my static IP address) but this just caused other headaches.

Could I please get a few suggestions/methods/purcase ideas to get my server up and running correctly, and some best case scenario options (I'm trying to jam as much learning as I can in this home networking project).

Thanks!
 
Solution
On my current home network, it is:
ISP -> modem/router -> linux firewall -> switch -> devices.

The firewall is currently untangle, but I've also used ipCop in the past. Built in DMZ functionality. And just about any old PC will work.

I'm not using the DMZ function (no need), but it's pretty easy to set up.

USAFRet

Titan
Moderator
OK.
Couple of questions and definitions here.

"access it from anywhere with a static IP address" - From anywhere in the house, or anywhere on the planet?
"static IP addresss" - From the ISP or an internal static that you set up?
Is this a residential connection or other?

Static IP address from the ISP is what the public sees. Static IP that you set up internally is what the router sees.
 

Skippy27

Distinguished
Nov 23, 2009
366
0
18,860
The best thing and the only thing I would recommed to do is to get a VPN firewall and give that your public IP address behind your ISP provided modem/gateway. Then VPN into it and you can access anything on your network you choose to allow.

This will give you security that having your server exposed to the internet with a public IP will not.

Beyond that your server would need to be an actual server and host DHCP on it for the rest of your network. This would require 2 NIC's. One to connect to your ISP and have the assigned static public IP. The other to connect to your home network that will provide DHCP to your clients.

That is in essence setting up your server as a router/nat for your home network. I do not encourage this for obvious security reasons.
 

USAFRet

Titan
Moderator
And another option is a separate firewall box, Linux based. With enough NICs, this can provide a DMZ to put the server on and access from outside.
3 NICs - 1 to connect to the router, 1 to connect to the inside network, 1 to enable the DMZ and allow access.
The DMZ space is walled off from the internal network.

What do you want to do with this server?
 

net42

Honorable
Dec 11, 2013
3
0
10,510
wow, very very fast responses, thank you!

I have a static IP address from my ISP, (and a domain name)

The end goal with this is to use my server for several applications; Minecraft for family and friends, ventrilo (or teamspeak, mumble, etc.) for family and friends, and an email server for my business (actually something I need to set up ventrilo server ironically enough). I might need help later, but I just want my network set up correctly first (I took a break after banging my head against my issues).

I think I might set up one of my old computers as a firewall, I like that suggestion, but that's a fair bit of tinkering so that will take me a while to play with.

Ack, thinking of new ideas each time I look at this; ftp (or some other way of file storage/retrieval) and a small website (ok, that should do it for now...).
 

USAFRet

Titan
Moderator
On my current home network, it is:
ISP -> modem/router -> linux firewall -> switch -> devices.

The firewall is currently untangle, but I've also used ipCop in the past. Built in DMZ functionality. And just about any old PC will work.

I'm not using the DMZ function (no need), but it's pretty easy to set up.
 
Solution