Subnet

[Ifontoc]

The Tech. school I'm working now has an Internet connection via satellite (VSAT) and is distributing the Internet signal to its neighboring building (this school is the only one which has the Internet access in our place - it's a remote place somewhere in the Philippines) and they are connected via the switch that the school have.
Our problem is that how could we manage to control the security feature such as drive, printer, and file sharing because we use the same Class C IP numbering (we're still small this time, so its Class C). I thought of using the Subnet tactic so as to separate the connection of the school from the other.

So for example in the Tech. school they use this IP numbers:
The server has the IP address of 192.168.0.1 and a SubNetmask of 255.255.255.0, and the workstations has an IP address of 192.168.0.2 - 192.168.0.15.

The other building has an IP address of let's say 192.168.10.16 and above with the same SubNetmask (255.255.255.0).

Could it be possible to change the SubNetmask on the other buildings and still their computers should connect to the school with the Internet access via the school switch?
Ex.
The other building can have an IP number of 192.168.0.1 and SubNetmask of 255.255.255.1 and the school will still be using the SubNetmask of 255.255.255.0.

They are using Windows98SE.

Thanks.

Sincerely Yours;
Ian Ace

[DVNT1]

Quote:

Originally posted by Ifontoc
...The other building can have an IP number of 192.168.0.1 and SubNetmask of 255.255.255.1 and the school will still be using the SubNetmask of 255.255.255.0...

The mask 255.255.255.1 will not work. Otherwise what you have stated should work as long as you have something to route the traffic


Maybe this link will help you a little... http://www.tcpipprimer.com/addressing.cfm

[krohnjw]

Well, you could do it, but a little differently than that. Basically Subnetting takes all of your available IP's and breaks them into smaller subnets. What you could do is just Using a hypothetical IP is set the Subnet equal to 255.255.255.192 for both networks. Then the IP addresses of the 193.221.6.0 network would go as follows....
193.221.6.65 Gateway of building one
193.221.6.66 - 193.221.6.126 Useable IP addresses for building one

193.221.6.129 Gateway of building two
193.221.6.130-193.221.6.190 Useable IP addresses for building two

That would put building one and buliding 2 on different networks. If you are actually being issued the 192.168.0.x IP's then you can just place the routers in building one with IP adresses from the range above for one, and routers for building 2 with IP addresses listed for building 2 above

Maybe I did some math wrong, but that looks about right as far as the numbers go I'm sure DVNT1 will correct me if I made a math or logic error here, it's been a while

Just read through that link I was unaware you could just chang ethe subnets for the Internal network to accomplish the task Thanks.

[PresterJohn]

>The server has the IP address of 192.168.0.1 and a SubNetmask of 255.255.255.0, and the workstations has an IP address of 192.168.0.2 - 192.168.0.15.

the correct subnet mask would be 255.255.255.224

>The other building has an IP address of let's say 192.168.10.16 and above with the same SubNetmask (255.255.255.0).

no change, subnet mask remains 255.255.255.0

note: if communication is needed between the subnets, the routing table needs to reflect this.

[DVNT1]

IMO you could make this simple by giving each building it's own subnet of 254 computers each.

Building 1: 192.168.1.0 mask 255.255.255.0
Building 2: 192.168.2.0 mask 255.255.255.0
Building 3: 192.168.3.0 mask 255.255.255.0
Building 4: 192.168.4.0 mask 255.255.255.0
Building 5: 192.168.5.0 mask 255.255.255.0
etc...

This way you easily know which building an IP address relates to.
Don't need to worry about difficult subnet masks. You still have 65,000+ IP addresses available this way.

If you have other contraints not already mentioned let us know and we could come up with more ideas.

[Ifontoc]

What if I were not to use a router, The school I'm working for now can't afford yet to buy routers (its just beginning for now). Could subnetting be still possible in my situation?
Can we still be able to supply Internet connection to the other buildings? What other configuration would I need to know in order for the other buildings to have the Internet connection?

I'm thinking of using Subnets because automatically some of the school files will be shared within the network.

*Is there a free software which could control the IP Numbers? I mean they could not be able to use other IP's only the IP's assigned to them.

Thanks.

Sincerely;
Ian Ace

[DVNT1]

You don't need an expensive router. Just take a computer and add several NICs. Make sure you pick an OS for it that can do IP Forwarding (aka routing). Examples: Linux, Novell, W2K Server

This would allow you to subnet and possibly supply Internet to all buildings. Subnetting, by itself will, not stop the computers from communicating with other subnets. This could be done with routing or firewalls.

A free software to control IP addresses: the closest thing I can think of is a DHCP server with manual entries. But that wouldn't stop a computer from using another valid IP address in that subnet AFAIK.

If you want to control Internet access too, then a Proxy server may be a good choice. It has better controls than most NAT based applications.

[newbie~wan]

Before we make any further recommendations, we need to understand what you want. Do you want to make it so that the computers from the other building CANT access your network shares? Supposing this is true, how many computers will be on your side of this network?

I'd see if IPCop or Smoothwall might do what you want, or even Freesco. All are Linux distros specifically designed for security. Freesco is a software router, IPCop and Smoothwall are firewall/routers. All three are free.

Check the FAQ's or ask questions on the mailing lists at the appropraite sites.

www.freesco.org
www.ipcop.org
www.smoothwall.org

Hope this helps

Cheers
Mick

[Ifontoc]

Our current situation now is:

On the Technical School which im in now they have 10 PC's, server included.
On Building A: they got 3 PC's sharing our Internet connection.
On Building B which is an office, they got 6 PC's. 2 for the Finance Dep't and 3 for the
Resource Dep't and one for the "All around use".
On Building C which is an office, they connected 4 PC's.

Each building is connected to us via the Switch's normal Port. They have their own Switch so
I configured their connected via their Uplinks. (Normal Port to Uplink).

Each building wishes to have a "Secluded" connection so as the School so I really want
to implement the Subnetting in here, But still the Internet Connection should still be
working.

Thanks....

Sincerely;
Ian Ace