I need help setting up a Static IP network - Business internet

smarterdanu

Reputable
Sep 7, 2014
8
0
4,510
I am new to static ip networks or business networks. The internet company has not been able to help answer my questions about if I will need to purchase any special equipment in order to use the 5 or 13 static IP addresses I will be purchasing. Let me explain what I need to do.

I need to setup a network with (lets say) 5 static ip addresses. I have 25 computers and I need to connect 5 computers to each IP. The cable modem box only has 4 ports so I will have to install some type of switch I'm guessing. I also need to install 3 wifi AP's/routers that run on 3 different ip addresses.

What I have purchased-
I bought a ubiquiti because I heard good things about them but I've never used it. It appears that I have to install software on a computer in order to use it. I don't fully understand this device. I thought that it would work like a router. I need to be able to connect many devices wirelessly so that is why I chose it hoping that I would be able to connect at least 7 tablets that stream high quality video at the same time.

Asus N66U router

If anyone could help me understand how this works I would be very happy. I was thinking that I needed to purchase some type of special switch that I could assign specific IP's to different ethernet ports and then put a switch after that so I have 5+ ethernet ports per IP address.
I'm not even sure if this switch with assignable ip addresses even exists. I'm just guessing this might be how it's done.
The less I spend the better, but if there is a way to make things simple and easy I'll do it.

Any help is appreciated, this has been a nightmare so far and the business internet rep I have been dealing with for a week has been no help. He's ready to sell me service he doesn't even understand lol.

UPDATE: These computers only need to connect to the internet. There is no need to have the computers communicating with each other. Groups of computers only need to be connected to the internet on separate ip addresses.
 
Solution
not quite sure how their modem/router i configured when the install it.

make sure the tech understands what you are trying to do.

there is three ways their modem/router could be configured:
1) it hosts all public IP and will assign internal IPs via DHCP like a router.
2) it works like a modem but will have DHCP enabled and will assign public IPs to your routers,
3) their modem/router is configured as a modem only (bridge mode) and you need to assign IPs to the routers.

1) This will create a double NAT which can create problems.
2) This will assign public IPs to your routers automatically and you don't need to configure anything.
3) This one you will need to manually assign public IPs to the routers.

Option 2 and 3 would work for...

mrmez

Splendid
This could be a tough one. Not sure I can help, but might be able to answer/ask a few questions.

Do all the computers need to transfer significant data to each other?
If so this will complicate things.

If not, the simplest way would be to setup each block of 5 computers as a separate network.
Having 5 PC's with a 4 port modem is an annoyance. Each modem will need a cheap basic hub. Nothing managed or special.
If data needs to be sent from a PC on IP 1, to a PC on IP 2, it will go through the internet of course. Not a problem for small files, but large data regularly will be slow.
All modems might be able to feed into a single managed switch, it will take some configuration (and confirmation), but Im sure It could be done?

Backups are another issue.
Getting all 5 blocks on the same LAN simplifies things for large volume backups.
You'll probably want an online backup solution too. Again, depending on data size.
 
You have to configure two things. First, you need to setup port forwarding for the IP Address to be sent to an IP address on your network. Example - the static IP is 209.68.191.108 and you want this to go to 10.0.0.140. You need to identify the port for the traffic (example - port 80 is normal internet traffic) and then set this up. It would also be suggested to make these forwarded ports go to PC's/Devices that have a static IP on your network (i.e. it doesn't change).

Second, you need to configure the firewall to allow the IP addresses for the ports necessary.

So - in order:
1) Set a static IP for the internal device
2) Setup port forwarding from the external static IP to the internet static IP using the port(s) that need to communicate
3) Setup firewall rules to allow the traffic.
4) Ensure the computer's firewall allows the traffic also.
 
I don't understand why you need 5 public IP, one for every five computers?

The Asus N66U router will only support one public IP.


I am not quite sure what you are trying to accomplish with this setup. If you connect five computers to one public IP, they will not be able to seen the other 20 computers.

Usually public IP are needed if you have servers that need to be accessible from the internet.
 

smarterdanu

Reputable
Sep 7, 2014
8
0
4,510


I have updated the question. I'm sorry I left out some things I needed to explain. I am only connecting PC's. No servers (right now). I have 25 computers. I need each set of 5 computers to be on it's own IP. There is no need to network these computers for them to communicate with each other. They only need to have internet access. The important thing here is that my computers are divided up among the ip addresses.
 
Generally you only need multiple public ip when you have a server. Maybe you have a different reason but in general you can easily have 100s of machine sharing a single ip.

You need a special router that supports multiple NAT groups. Which you pick will determine how you accomplish this since there really is no standard.

The simplest way is to just do something like ip 192.168.1.10-192.168.1.19 -->>>public ip 1. 192.168.1.20-192.168.1.20---> public ip 2. etc.

This method can be done on most commercial routers and if you use dd-wrt third party firmware on a consumer router you can do it this way.

Other routers will have their own way to do this, some require you to use vlans.

Your other issue will be how you manage to get 5 ip addresses. Something like a cable modem is pretty simple you could in worst case plug 5 routers into the modem and then plug the machines into each of the 5 router. Things like att-uverse are a huge pain since you must use their router and it is very limit in its ability. You would have to get very creative to make it work using the att router and a different router behind it.

Now if you are going to get a more commercial account 5 addresses will be a strange number. Normally what they do is give you 1 ip for your router and then route you a block of addresses...normally like x.x.x.40-x.x.x.47. This called a /29 block which has 8 addresses. The way they get the number 5 out of this is. The top and bottom address are used for system purposes on ethernet so you are down to 6. If you assign one to the LAN ip of the router you are now down to 5. BUT if you run this is a nat configuration you can actually use all 8. and technically you have another ip that they gave you for the router itself on the wan connection.

Still this is a very complex setup no matter which you choose. I would think very carefully about your need for multiple real ip addresses. It almost always is used when need people to access your equipment from the internet and need some way they can find you.
 
Servers are the most common use for a public IP to be given to a computer - however, the public IP is often assigned to the individual computers when you are using programs like remote desktop to access them.

My suggestion would be to invest in a VPN firewall appliance to handle the port forwarding and/or setup VPN access for remote desktop (in the case of VPN, you won't need to assign public IP addresses to each individual PC - the VPN handles it).
 
Since the does not have to be any communication between any of the computers, it seems straight forward.

sound like you could use an 8-port switch to connect the modem and five of the Asus routers to which you assign each one of the public IPs.

then connect another 8-port switch to each of the routers to which you connect the computers.

As for the Ubiquiti which model is it? From what I remember they don't have firewall capability which means you will need another IP and ASUS router to connect it to.
 

smarterdanu

Reputable
Sep 7, 2014
8
0
4,510


It seems like you understand the situation best, or I understand this answer best. I came up with some similar thoughts last night.
I will be using comcast business internet. They offer 1,5,13 Static Ip addresses. I plan on buying the package with 5 Addresses to start. I have to use their special business modem for the service.
If I connect a 16 port ethernet switch to it I will have 16 connections from the cable modem in case I need to use all 13 IP addresses in the future.
Now that I have enough ethernet ports available, I then need to be able split up the ip addresses to my groups of computers. If I can connect a router at this point and assign it the static ip address to use and add a switch after that I think it will work.

So to sum this up - (comcast cable modem) to (unmanaged ethernet switch) to (5 routers) to (5 unmanaged switches) to (Groups of computers)
If this is correct, would I be able to use a router such as my asus n66u in this connection or a regular consumer grade router?
Ubiquiti is UAP model. I think you're right, it's just an access point that needs a router. I will not need this.


Another way to look at what I'm trying to do is make 5 simple internet connections like what I use at my home. This is not a complex setup where I need to network all computers together. They only communicate with the internet. Comcast only allows one residential service per address with a dynamic ip address. They are forcing me to use business internet in order to get multiple lines with different ip addresses. This is just what my business requires. Thanks again to everyone for your comments and help. Looking forward to getting this figured out.
 
not quite sure how their modem/router i configured when the install it.

make sure the tech understands what you are trying to do.

there is three ways their modem/router could be configured:
1) it hosts all public IP and will assign internal IPs via DHCP like a router.
2) it works like a modem but will have DHCP enabled and will assign public IPs to your routers,
3) their modem/router is configured as a modem only (bridge mode) and you need to assign IPs to the routers.

1) This will create a double NAT which can create problems.
2) This will assign public IPs to your routers automatically and you don't need to configure anything.
3) This one you will need to manually assign public IPs to the routers.

Option 2 and 3 would work for the way you want to set up your network best.
 
Solution