Fixed ip from isp with windows server as dhcp

[emboha]

I need some help

 

1) new internet connection is active and router is installed and configured with a tiny scope of 8 fixed ip adresses, 1 being the router itself. For example

84.197.19.169 for the router

84.197.19.170-177 free to use

With a 255.255.255.248 subnet

 

2) no access to the router at all (telenet router with remote config by the isp itself)

 

3)i have 1 windows server 2012 machine which i want to use as dhcp and dns server.

 

4)i have 1 dlink manageable core switch which sits between router and server.

 

5) question: What fixed ip should i give the switch? What fixed ip should i give the server? And if i give the server one of the fixed ip-adresses from isp it will be outside the subnet from its own dhcp scope it is providing to the internal network (for example 192.168.1.0-254) thus be unreachable for all the clients?

[FN-GM]

You need to get a firewall and install that. You then can use NAT and use any private address range internally. If you have a small network this will do it, but you haven't indicated the size so it would be a guess. - http://www.ebay.co.uk/itm/Cisco-ASA-5505-Firewall-Security-Plus-License-ASA5505-SEC-BUN-K9-RAM-1GB-/321479336743?hash=item4ad9a96327:g:rYEAAOxylpNTRd0r

If you don't have the budget you could use PFsense or something similar.

 

You could probably get your ISP to setup NAT on the router but it will not be secure at all and I would not recommend that.

 

If that is your subnet mask you will get these IP addresses, not upto 177 as this will be in another range.

84.197.19.168 - Network Address - Cannot Use

84.197.19.169 - Router IP

84.197.19.170 - Free

84.197.19.171 - Free

84.197.19.172 - Free

84.197.19.173 - Free

84.197.19.174 - Free

84.197.19.175 - Broadcast Address - Cannot Use

Edited December 8, 2015 by FN-GM

[glen_j]

those IP addresses are public ones and as FN-GM said the IP addresses you listed were a little off, you can assign any IP address in the 10.x.x.x 172.16.x.x or 192.x.x.x rang for your internal network including switches.

[FN-GM]

you can assign any IP address in the 10.x.x.x 172.16.x.x or 192.x.x.x rang for your internal network including switches.

 

He can't at the moment as he doesn't have the equipment to do so.

[emboha]

So connecting the server directly to the router and assigning 84.197.19.170 to 1 NIC adapter and assigning 192.168.1.1 to another nic in the same server and setting up a dhcp scope from 192.168.1.10-254 wouldn't do the trick?

Is a firewall always needed in my case?

 

[FN-GM]

That will not work no. Plus you are exposing your server directly to the internet. That is very dangerous. You need to have a firewall.

 

I would recommend a qualified network engineer come in and set this up for you.

[emboha]

thought so. I contacted my hardware retailer for some advice. Waiting for them to call me back. thx