Do i set the IP address on firewall same as my PC IP address?

Question

I have a netscreen 100 firewall, i can log on using hyper terminal and am ready to commence startup configurations. I have a static IP for my pc: 91.191.11.67 for example. This is the IP i will be using for my web server on the PC. When im setting up the netwcreen 100 firewall do i use the same IP adress or do i need another IP address, or can i use 192.168.0.1 for example? If i use 192.168.0.1 will me web server be accessible at: 91.191.11.67 ???? Thanks for your input much appreciated.

Answer 1

I'm assuming that your ISP assigned you a static IP of 91.191.11.67. You'll use that IP address (and it's subnet mask) on the external interface of the firewall. If your ISP did not give you the subnet mask, call and ask then what it is. It's possible that they are using a "sticky" DHCP address that will never change. If that's the case, just set up the external interface to get it's address via DHCP.



I'm not familiar with that firewall, but virtually all SOHO firewalls come out of the box configured for Network Address Translation or NAT as it's commonly known. You'll use a private IP address on the internal interface of the firewall. 192.168.0.1 with a subnet mask of 255.255.255.0 will work fine.



You'll then use an IP address in that same range for the server. Anything between 192.168.0.2 and 192.168.0.254 will work. The subnet mask will remain 255.255.255.0. The default gateway will be the internal IP address of the firewall. The DNS settings will be either what your ISP provided or the internal IP address of the firewall if it supports DNS caching (most do) or your choice of any 3rd party DNS such as OpenDNS (208.67.222.222 & 208.67.220.220) or GoogleDNS (8.8.8.8.8 & 8.8.4.4) as you wish. (If you statically configure your external address on the firewall, use the same public DNS on the external interface.)



Once that's set up, verify Internet connectivity from the server. Assuming that it's working, you will then need to forward port 80 on the firewall to the IP address of the server. If you will be hosting secure http, you'll also need to forward port 443.

Answer 2

Pining is mainly some way of computersnodes speaking with every different then to ping a pc is mainly simply to get a reaction! additionally Pinging is most of the time used diagnostically to make certain that a host computernode you're attempting to arrive is truthfully operatingactive. If, for instance, a person are not able to ping a number, then the person won't be able to make use of the File Transfer Protocol (FTP) to ship records to that host. Ping can be used with a number that's working to look how lengthy it takes to get a reaction again! a ramdon request from an unsoliciated node from a hacker with out a few firewall safety would go away you pc susceptible, considering then they would use different ways to assault vulnerabillites making use of trojans and so forth. Pinging is a protocol used earlier than different protocols like FTP are not able to truthfully be activated with out the ping reaction earlier than every other protocol request from a FTP for instance this could be denied considering it hasnt spoke back within the first position! Most firewalls laptop's are a little bit extra savvy, considering it is whats within the packet of infomation, frames and the whole thing else considering that is the groundwork of each and every protocol makes use of, packets, frames and the whole thing else! every comprises revelant data approximately your pc if it used to be unsolicated it could without problems now not be recgonised and your pc could relay the infomation again in a blunders. desire this is helping,

Answer 3

The 91.191.x.y address is the public IP address, and you have to forward any requests coming into that IP to your internal LAN, where your server should be located. Your router would port forward port 80 to the server LAN IP (usually 192.168.z.x).

So, first set up your server at a static LAN IP address (determined by your router's LAN IP address), test it can get to the internet ok, then log into the router and port forward your ports to the server.