TechSpot

Creating a Public and Private network

By Thor97
Nov 19, 2004
Topic Status:
Not open for further replies.
  1. In supporting a Community Assocation I have the need to create a public network and a private one that shares the same internet connection. The way this is shaping up is:

    Modom (dial up)
    D-Link Router (DI-704 w/ serial port)

    Public Network
    16 Port Hub

    Private Network
    LinkSys Router (BEFSR41)
    8 Port Switch (currently a hub)

    Some devices will need to connect to the routers and the hubs/switchs because of location. (no big deal, I ***-u-me)

    Currently I have the settings as:
    D-Link (Public)
    IP : 192.168.1.64
    Range : 65 to 127
    Default IP mask (Can't find one)

    LinkSys (Private)
    IP : 192.168.1.32
    Range : 33 to 47
    Default IP mask

    When connected to the Private network, a PC cannot ping the public ones or get the Internet (I need both). The public ones have Internet access, can ping the LinkSys but no PCs (As it should be).

    So what how should this work and what am I missing?
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    Welcome to TechSpot

    I think the following might be helpful:

    D-Link (Public) connect to your modem.
    Router-setup WAN:
    Protocol: Fixed IP
    IP-address, Subnetmask and default Gateway: as per ISP-information
    DNS-servers: as per ISP-information
    Enable NAT

    Router-setup LAN:
    IP-address: 192.168.1.64
    Subnetmask: 255.255.255.0
    DHCP-server: disable
    You selected Range : 65 to 127

    PC-Settings (Public)
    Internet Protocol (TCP/IP)
    Use the following fixed IP addresses: 192.168.1.65 (66, 67 etc. - 126)
    Subnetmask: 255.255.255.0
    Default Gateway: 192.168.1.64 (IP-address from your Router)
    Use DNS Server address: 192.168.1.64 (IP-address from your Router)
    Second DNS: leave blank or put in first DNS-server from WAN-part in Router

    Reserve the IP address: 192.168.1.127 for the Linksys (Private)
    which will plug into the D-Link
    ============================================================================

    LinkSys (Private) connect to the D-Link router.
    Router-setup WAN:
    Protocol: Fixed IP
    IP-address: 192.168.1.127
    Subnetmask: 255.255.255.0
    Default Gateway: 192.168.1.127
    DNS-servers: 192.168.1.127
    Enable NAT

    Router-setup LAN:
    IP-address: 192.168.1.127
    Subnetmask: 255.255.255.0
    DHCP-server: disable
    You selected Range : 33 to 47

    PC-Settings (Private)
    Internet Protocol (TCP/IP)
    Use the following fixed IP addresses: 192.168.1.33 (34, 35 etc. - 47)
    Subnetmask: 255.255.255.0
    Default Gateway: 192.168.1.127 (IP-address from your Router)
    Use DNS Server address: 192.168.1.127 (IP-address from your Router)
    Second DNS: leave blank

    ============================================================================

    Valid for both Routers:
    Some System-settings (depending on your router)
    Optional SNTP (time): e.g. 194.35.252.7 for UK/Ireland (GMT)
    uPnP: disable
    Dynamic routing: disable
    Remote config: disable
    Dynamic DNS: disable
    Firewall: Block hacker attack: enable
    Firewall: Block WAN request: enable
    VPN: disable all settings unless you need it

    PC-Settings (Public & Private)
    Make sure all PCs are in the same WORKGROUP.
    Enable File/Printer sharing if you wish (works only within local network)
    Check individual printer(s) that they are shared as well (in printer-settings)
    In the software firewall, enable/block the other PCs IP-address(es)

    I am not 100% sure, but this should work.
     
  3. Nodsu

    Nodsu TS Rookie Posts: 9,431

    The default gateway and DNS for Linksys has to be the D-Link otherwise no machine from the private network will be able to access the internet or resolve names.

    The traditional way to do this sort of networking would be with disabling NAT on the Linksys and having separate network addresses for "public" and "private" networks, but things should run like this also.
     
  4. Thor97

    Thor97 TS Rookie Topic Starter

    In the public area, I have very little control, and don't what to go into setting Ip address. The Private area whould be nice not to assgin IP but if that is what it takes so be it.

    Are you saying that no subnet mask is nedded? I'd ***-u-med that one was needed but have not tryed it (need it to work frist)

    Thanks for the quick reply guys
     
  5. Nodsu

    Nodsu TS Rookie Posts: 9,431

    Subnet masks are needed. They are an inherent part of IP and go together with every IP address.

    You don't really need static IPs for anything except the "local" interfaces of the routers. It would help if you could also assign the "wan" IP of the Linksys.
     
  6. Thor97

    Thor97 TS Rookie Topic Starter

    So what should the Subnet masks be for this setup? and where? I also wonder if the IP ranges should be flip? That was just how then ended up, but I need about 16 for the private area, and why not use 64 for he public area.
     
  7. Nodsu

    Nodsu TS Rookie Posts: 9,431

    Subnet mask for a 192.168.x.x network is pretty much always 255.255.255.0

    To keep your sanity, make the IP addresses in the "private" network to be in a different network than in the "public" one. If you have 192.168.1.x IPs in the public net then use 192.168.2.x addresses in the private one.

    If you are not sure about configuration then leave everything to "automatic" except:
    The "WAN" IP address of the Linksys.
    The "LAN" IP address of the Linksys. Also set the LAN addresses on the private side to be on a different network than on the public side(in DHCP settings).
    The gateway and DNS server for the Linksys have to be the D-Link.
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.