Setting up Eircom Business Broadband

Stky10

I'm trying to setup a business broadband system for the first
time using eircom and I've got some technical questions.

We've got a PIX firewall connected to a switch on its inside
interface, and a router connected to its outside interface.
There is a dmz interface as well, but we'll get that working
later.

So Eircom originally just gave us a single static ip address,
and we've now requested a range of IP addresses. I'm
presuming we'll need one for the outside facing interface
of the router, another for the inside interface of the router
and the outside interface of the firewall, and another for
the PAT address so that employees can use the web.??
So to have these in three different networks (router outside,
router inside and firewall outside, PAT), how big a range will
we need, and wont we need Eircom to set up a route to
our firewall through the router outside facing interface.

Also, they've given us a Netopia modem box. I presume
it takes care of the PPPoE encapsulation and CHAP
authentication. When I connected a PC to this box
it gave it a 192.168.1.x IP address, so I'm presuming
that I dont use the netopia modem with the router,
but that I make the outside interface of the router
deal with PPPoE and CHAP.

Is there any guide anywhere to setting this all up
that anyone knows about???

Infini

Stky10 wrote:

When I connected a PC to this box
it gave it a 192.168.1.x IP address, so I'm presuming
that I dont use the netopia modem with the router,
but that I make the outside interface of the router
deal with PPPoE and CHAP.

You should note that 192.168.1.x is typically the address for the modem itself but the last number being the one for the computer itself. To get your real IP address for the router you'll probably have to look up a webpage on google that allows to see what your external IP is.

Stky10

Oh I realise that, and that 192.168.y.x is a non public
address. The real IP is the single one they gave us
originally. We're using that so that we have some sort
of web connection while they set up the rest for us.

I've told them that we're using a router and firewall
combination so I hope they give us enough ip addresses
and in the correct form so that we can have everyone
up and active. I'm not holding my breath though. The
trouble we had to get the DSL link up and active was
something else, and now the hassle we've had trying
to get IP addresses. Does the technical support team
in Eircom work weekends??

quazzy

----I've told them that we're using a router and firewall
combination so I hope they give us enough ip addresses
and in the correct form so that we can have everyone
up and active. I'm not holding my breath though. The
trouble we had to get the DSL link up and active was
something else, and now the hassle we've had trying
to get IP addresses. Does the technical support team
in Eircom work weekends??

---

For Most SM Business I would say that 4 or 8 IPs is plenty
1 for Firewall
1 for Router
1 for Mail Server
1 for Web Server
---
Extra IP could be used for FTP,etc..


And yes Eircom tech support work 7 days 8 am to 10 pm including Bank Holidays.

Frank Grimes

Stky10 wrote:

So to have these in three different networks (router outside,
router inside and firewall outside, PAT), how big a range will
we need, and wont we need Eircom to set up a route to
our firewall through the router outside facing interface.

You'll only need a range of 4 (2 usable, one for the router and one for the firewall) if you're going to be running NAT on the firewall.
The router's WAN interface will pick up the 1st IP when you login. You should assign that IP to the LAN interface of the router too. Give the 2nd IP to the outside interface of the PIX and then give the inside interface a private address.
And no, Eircom won't need to set up any routes to your firewall.

ando

Frank Grimes wrote:

The router's WAN interface will pick up the 1st IP when you login. You should assign that IP to the LAN interface of the router too. Give the 2nd IP to the outside interface of the PIX and then give the inside interface a private address.

hmm, I would of taught you would have 3 internet IP's. You would get 1 Ip from eircom when you log in (WAN of router). You would assign the 2nd IP to the LAN of the router, and finally the 3rd IP to the WAN of the Firewall. I never tried assigning the same IP to a routers WAN and LAN simultaneously

BTW Stky10, you could just use the 1 Eircom IP if you wanted, just put the WAN of the firewall and LAN of firewall on same subnet, the firewall to use DG as LAN IP of router. But if you wanted to have Vpn working then ignore this last paragraph!

Stky10

Ok, I've been abroad for a while dealing with other issues, so
I'm only getting back to this now...

The problem is that the router we have has no WAN cards,
but has instead two LAN interfaces. So, I'm presuming that
I cant get a LAN interface to do the CHAP authentication,
PPPoE encapsulation, use VPI, VCI etc.

Therefore I'm thinking that I'll have to connect one of the
LAN interfaces to the Netopia box. Wont it get a 192.168.x.y
address from the Netopia box then, or do I just set this interface
ip to the first or second IP address of the range, and let the Netopia
box figure things out??.

Or I could get a WAN card and then get rid of the Netopia
modem....anybody have any idea for how much that would cost
for a Cisco 2611??