Re: Wireless Access Point and proxy server setup problem

["Tom Jedrzejewicz" <tomjedrz@xxxxxxxxxxxxxx>]

What you are trying to do is setup several "virtual" LANs (aka VLANs)
over the same physical LAN.  I doubt that the Netgear "router" can
route between different ports on it's LAN switch.  I suspect that it
expects all of the devices plugged into the LAN switch to be on the
same subnet.  Lots of switches support VLANs, including perhaps the
one you have, but it needs to be configured.  Check out the manual for
the switch.

#1 -- You may be over complicating this.  What if you put all the
devices on the same subnet, and tell the Netgear router to only allow
outbound internet traffic from the proxy server? The proxy server only
needs 1 NIC and IP address, and everything is clean.
---> This is how I have our several hundred node network setup,
although we have a good firewall rather than a Netgear DSL router.

#2 -- An alternative .. don't connect anything but the proxy server to
the internet. I am kind of wondering why you didn't do this to begin
with.
DSL -> NetGear (10.1.1.1) -> (10.1.1.2) proxy server (10.0.0.1) ->
switch -> internal network

Finally ..
<SOAPBOX>
Suck it up .. if the company is big enough to have a "campus", it
should be big enough to have a good, solid firewall rather than a home
DSL router protecting it's network. SonicWall makes great products
that aren't that expensive.
</SOAPBOX>

Good luck!

On Jan 18, 2008 2:43 PM, Peter Dow (ML) <maillist@xxxxxxxxxxxxxxx> wrote:
> Hi Everyone,
>
> I'm not a network expert, and I have the following setup:
>
> DSL modem connects to Netgear router which has a static IP address of
> 10.1.1.1.  Three of the NG router's 4 LAN ports are connected to a 1GB
> switch,  a Netgear wireless access point (static IP address of 10.0.0.5)
> , and a fiber optic transceiver that connects to another campus.  The
> proxy server PC has two network interface cards (NICs), both connected
> to the 1GB switch.  The proxy server NICs have static IP addresses of
> 10.1.1.2 and 10.0.0.1.  PCs on the LAN specify the proxy server
> (10.0.0.1) as their gateway, DNS server and proxy server.