Convert from ICS to RRAS
Julian Voelcker
able to allow users on the net to connect to a machine on my network.
I have a small network consisting of..
1 Win2K AS server
1 WinXP 'gateway' with a satellite link and using ICS for sharing the
internet across the network
2 WinXP workstations
1 Mac
They are currently all connected together via a single 8 port hub.
I now want to be able to allow people from the net to access a website
on my server machine.
I used to have RRAS and the satellite connection on the server, but had
problems with the Satellite software crashing on the server, which is
why I moved to a dedicated machine.
One thought is to plug the 'gateway' machine into the server and then
configure RRAS to point to it - whilst this will direct the traffic to
the machine with the satellite connection, I'm not sure whether it will
go all the way.
Do you have any recommendations?
Cheers,
Julian Voelcker
Herb Martin
> able to allow users on the net to connect to a machine on my network.
This can actually be done with ICS (to a limited extend)
but you will be generally happier with NAT in RRAS in
most cases.
> I have a small network consisting of..
> 1 Win2K AS server
> 1 WinXP 'gateway' with a satellite link and using ICS for sharing the
> internet across the network
> 2 WinXP workstations
> 1 Mac
>
> They are currently all connected together via a single 8 port hub.
>
> I now want to be able to allow people from the net to access a website
> on my server machine.
>
> I used to have RRAS and the satellite connection on the server, but had
> problems with the Satellite software crashing on the server, which is
> why I moved to a dedicated machine.
What do you mean in this context by "satellite" -- at first
I thought you just meant "an extra NIC" but what SOFTWARE
is CRASHING specifically and how?
> One thought is to plug the 'gateway' machine into the server and then
> configure RRAS to point to it - whilst this will direct the traffic to
> the machine with the satellite connection, I'm not sure whether it will
> go all the way.
Probably not.
Ideally you would have an ENTIRE server, Win2000, for the
gateway/NAT/RRAS, and maintain the existing server (somewhat
more) secure behind it with the clients machines on your
internal network.
Setting up RRAS/NAT in place of ICS is actually pretty easy.
RRAS, IP, NAT, configure External and Internal interfaces
(easy), add Address assignment (like DHCP) if you need it,
add port or address mapping there if you need that.
--
Herb Martin
He...@LearnQuick.Com
"Julian Voelcker" <a...@nospam.tvw.net> wrote in message
news:VA.0000002...@nospam.tvw.net...
Bobc
@nospam.tvw.net:
Get rid of ICS, install a router in its place. Port forward port 80 in
the router to your web server computer.
Julian Voelcker
In article <eGFohvtH...@TK2MSFTNGP10.phx.gbl>, Herb Martin wrote:
> What do you mean in this context by "satellite" -- at first
> I thought you just meant "an extra NIC" but what SOFTWARE
> is CRASHING specifically and how?
The Satellite link uses software accelerators and for some reason it
kept on going on and off line. I tried a number of things to try to
resolve it but it was just too flakey.
> Ideally you would have an ENTIRE server, Win2000, for the
> gateway/NAT/RRAS, and maintain the existing server (somewhat
> more) secure behind it with the clients machines on your
> internal network.
OK, so I should have used Win2K server on the 'gateway' machine instead
of WinXP - fair enough, I'll need to find some time to re-install it.
> Setting up RRAS/NAT in place of ICS is actually pretty easy.
> RRAS, IP, NAT, configure External and Internal interfaces
> (easy), add Address assignment (like DHCP) if you need it,
> add port or address mapping there if you need that.
I've had RRAS working fine for an ISDN connection so it shouldn't be
that difficult.
Thanks for the directions.
Cheers,
Julian Voelcker
Herb Martin
> of WinXP - fair enough, I'll need to find some time to re-install it.
--
Herb Martin
He...@LearnQuick.Com
"Julian Voelcker" <a...@nospam.tvw.net> wrote in message
news:VA.0000002...@nospam.tvw.net...
Herb Martin
> of WinXP - fair enough, I'll need to find some time to re-install it.
Nothing wrong with what you did; the Pro (workstation) products
only support ICS, not full RRAS with NAT.
NAT and ICS are essentially the same software but ICS
has almost no configurability, NAT has plenty. (NAT can
use multiple NICs and multiple IPs per NIC but most other
things can be done with ICS.)
Both NAT and ICS share the "Internet connection" and do
"address translation"; both can port map external requests
to internal services/servers. (NAT can do the latter in more
ways.)
ICS is theoretically easier to setup (if it works for you) and
cheaper (if you don't own a server for this purpose.)
NAT is a little harder to setup INITIALLY but in the long run
easier since you can do more and better (configuration) with it.
Herb Martin
He...@LearnQuick.Com
Herb Martin
> the router to your web server computer.
Might end up being good advice, BUT ICS can do that
forwarding too.
--
Herb Martin
He...@LearnQuick.Com
Julian Voelcker
> NAT is a little harder to setup INITIALLY but in the long run
> easier since you can do more and better (configuration) with it.
OK, I have taken the plunge and now have my 'gateway' machine
configured and running fine and so far it is all working fine.
Fortunately I had done it before so it wasn't too difficult.
Now the only issue I have is to do with the software used by the
Satellite link.
Basically it uses an acceleration system that works on port 9877 - the
idea is that on a standalone arrangement you set your browser up to
point http requests to port 9877.
Am I right in thinking that on the 'gateway' machine I can configure
the RRAS/NATs so that http request from the network are redirected to
port 9877?
If so, where do I start?
Cheers,
Julian Voelcker
Herb Martin
> idea is that on a standalone arrangement you set your browser up to
> point http requests to port 9877.
>
> Am I right in thinking that on the 'gateway' machine I can configure
> the RRAS/NATs so that http request from the network are redirected to
> port 9877?
Perhaps. There is a NAT facility for mapping
address/port connections to the NAT to other
IP address/ports in your network.
I have no idea how the "Satellite" plays here;
I only understand your description of it in a
general way.
--
Herb Martin
He...@LearnQuick.Com