Creating a Public and Private network

Status
Not open for further replies.

Thor97

TS Rookie
In supporting a Community Assocation I have the need to create a public network and a private one that shares the same internet connection. The way this is shaping up is:

Modom (dial up)
D-Link Router (DI-704 w/ serial port)

Public Network
16 Port Hub

Private Network
LinkSys Router (BEFSR41)
8 Port Switch (currently a hub)

Some devices will need to connect to the routers and the hubs/switchs because of location. (no big deal, I ***-u-me)

Currently I have the settings as:
D-Link (Public)
IP : 192.168.1.64
Range : 65 to 127
Default IP mask (Can't find one)

LinkSys (Private)
IP : 192.168.1.32
Range : 33 to 47
Default IP mask

When connected to the Private network, a PC cannot ping the public ones or get the Internet (I need both). The public ones have Internet access, can ping the LinkSys but no PCs (As it should be).

So what how should this work and what am I missing?
 
Welcome to TechSpot

I think the following might be helpful:

D-Link (Public) connect to your modem.
Router-setup WAN:
Protocol: Fixed IP
IP-address, Subnetmask and default Gateway: as per ISP-information
DNS-servers: as per ISP-information
Enable NAT

Router-setup LAN:
IP-address: 192.168.1.64
Subnetmask: 255.255.255.0
DHCP-server: disable
You selected Range : 65 to 127

PC-Settings (Public)
Internet Protocol (TCP/IP)
Use the following fixed IP addresses: 192.168.1.65 (66, 67 etc. - 126)
Subnetmask: 255.255.255.0
Default Gateway: 192.168.1.64 (IP-address from your Router)
Use DNS Server address: 192.168.1.64 (IP-address from your Router)
Second DNS: leave blank or put in first DNS-server from WAN-part in Router

Reserve the IP address: 192.168.1.127 for the Linksys (Private)
which will plug into the D-Link
============================================================================

LinkSys (Private) connect to the D-Link router.
Router-setup WAN:
Protocol: Fixed IP
IP-address: 192.168.1.127
Subnetmask: 255.255.255.0
Default Gateway: 192.168.1.127
DNS-servers: 192.168.1.127
Enable NAT

Router-setup LAN:
IP-address: 192.168.1.127
Subnetmask: 255.255.255.0
DHCP-server: disable
You selected Range : 33 to 47

PC-Settings (Private)
Internet Protocol (TCP/IP)
Use the following fixed IP addresses: 192.168.1.33 (34, 35 etc. - 47)
Subnetmask: 255.255.255.0
Default Gateway: 192.168.1.127 (IP-address from your Router)
Use DNS Server address: 192.168.1.127 (IP-address from your Router)
Second DNS: leave blank

============================================================================

Valid for both Routers:
Some System-settings (depending on your router)
Optional SNTP (time): e.g. 194.35.252.7 for UK/Ireland (GMT)
uPnP: disable
Dynamic routing: disable
Remote config: disable
Dynamic DNS: disable
Firewall: Block hacker attack: enable
Firewall: Block WAN request: enable
VPN: disable all settings unless you need it

PC-Settings (Public & Private)
Make sure all PCs are in the same WORKGROUP.
Enable File/Printer sharing if you wish (works only within local network)
Check individual printer(s) that they are shared as well (in printer-settings)
In the software firewall, enable/block the other PCs IP-address(es)

I am not 100% sure, but this should work.
 

Nodsu

TS Rookie
The default gateway and DNS for Linksys has to be the D-Link otherwise no machine from the private network will be able to access the internet or resolve names.

The traditional way to do this sort of networking would be with disabling NAT on the Linksys and having separate network addresses for "public" and "private" networks, but things should run like this also.
 

Thor97

TS Rookie
In the public area, I have very little control, and don't what to go into setting Ip address. The Private area whould be nice not to assgin IP but if that is what it takes so be it.

Are you saying that no subnet mask is nedded? I'd ***-u-med that one was needed but have not tryed it (need it to work frist)

Thanks for the quick reply guys
 

Nodsu

TS Rookie
Subnet masks are needed. They are an inherent part of IP and go together with every IP address.

You don't really need static IPs for anything except the "local" interfaces of the routers. It would help if you could also assign the "wan" IP of the Linksys.
 

Thor97

TS Rookie
So what should the Subnet masks be for this setup? and where? I also wonder if the IP ranges should be flip? That was just how then ended up, but I need about 16 for the private area, and why not use 64 for he public area.
 

Nodsu

TS Rookie
Subnet mask for a 192.168.x.x network is pretty much always 255.255.255.0

To keep your sanity, make the IP addresses in the "private" network to be in a different network than in the "public" one. If you have 192.168.1.x IPs in the public net then use 192.168.2.x addresses in the private one.

If you are not sure about configuration then leave everything to "automatic" except:
The "WAN" IP address of the Linksys.
The "LAN" IP address of the Linksys. Also set the LAN addresses on the private side to be on a different network than on the public side(in DHCP settings).
The gateway and DNS server for the Linksys have to be the D-Link.
 
Status
Not open for further replies.