Last week I did something I've never done before. I set-up an AT&T DSL line with 5 static IP addresses behind an enterprise firewall (Astaro). Setting-up multiple IP's behind a T1 is a walk in the park. Behind a DSL line, not so much; unless of course, you know what to do. Just know the average AT&T/Bell South tech will not be able to help you out very much as this just isn't something they encounter very often.
I wrongly assumed that once the Netopia modem/Router was put into bridged mode and the PPPoE info was put into Astaro firewall, the Astaro would be assigned the first of the Static IP Addresses with the appropriate subnet mask once. This is not what happens. If you do this, your firewall will be assigned a dynamic IP Address.
After many support calls, support tickets, escalations and all the rest, I learned that when you have multiple IP Addresses, you can't set your Netopia router in bridged mode. You use the Netopia in standard mode and then set it to pass the Static IP Addresses to the internal network. Bell South will ensure that your statics are routed to your Netopia, and once it is configured as below, the Netopia will send a broadcast request to the internal side of your network to determine if/where it should route those packets. So, you don't have to tell the Netopia where to route the packets, but you need to tell your firewall to receive them.
Ok, enough delay, here is the documentation I received from Bell South for the configuration (if you need the associated images just let me know).
Configure Static IP on Bell South Moden/Router
I am certain this applies when configuring multiple IP addresses at a single location. I do not think it applies when only one IP address is assigned.
- Surf into the Netopia 3347W/3347NWG interface using the 192.168.1.254 address in a web browser and login.
NOTE: Depending on the firmware currently installed on the Netopia router there may or may not be a login prompt.
- On the left hand side of the screen, click on the link that says Expert Mode.
- Then click on Yes to proceed.
- On this screen click on Configure from either link.
- From here select LAN.
- Type in first available IP address in your range as the LAN IP Address and type in the appropriate IP Netmask. For example - if your IP range is 65.15.150.220 to 65.15.150.227 then your LAN IP will be 65.15.150.221 and the Netmask will be 255.255.255.248.
- Click Submit.
- Click on DHCP Server.
- Type in the Starting IP Address and the Ending IP Address. For example, if the customer’s IP range is 65.15.150.220 to 65.15.150.227 then the Starting IP Address will be 65.15.150.222 and the Ending IP Address will be 65.15.150.226.
- Click Submit.
NOTE: If and only if the customer explicitly requests that the Netopia's DHCP server be disabled can the help desk do so. The customer should be made aware that doing so is a non-standard configuration for the Netopia, that support will be limited and that it may be necessary to temporailily re-enable DHCP in order to troubleshoot any problems with their DSL service. If the customer still wishes to have DHCP disabled document it in the call notes and proceed with the following steps:
JD Note: I reccomend doing this
- Choose Off from the Server Mode drop-down list.
- Click the Submit button.
- Click on WAN.
- Click on PPP over Ethernet vcc1.
- Uncheck the box next to Address Mapping (NAT).
- Click Submit.
- Click on Security.
- Click on Stateful Inspection.
- Click on Exposed Addresses.
- Click the Add button.
- Type in the first usable IP address and the last usable IP address of your IP range in the Start Address and End Address boxes. For example, if the customer’s IP range is 65.15.150.220 to 65.15.150.227 then the Start Address will be 65.15.150.221 and the End Address will be 65.15.150.226. Leave Protocol set to Any.
- Click Submit.
- Click on the yellow Alert Button.
- Click on Save and Restart.
- Verify that the Netopia reflects the changes by renewing the IP address. The gateway and IP address should reflect the static IP information entered into the Netopia. If the changes didn't take, the process needs to be repeated. A reboot may be needed to refresh the IP if the renew command continues to be unsuccessful.
- Verify that the exposed IP addresses are now reachable by performing a ping command on the exposed IP addresses.
NOTE: If the ping returns all packets then the IP addresses have been exposed successfully. If the ping returns Request timed out or Ping request could not find host, then the IP addresses are not exposed properly and the process for exposing IP addresses needs to be done again. If the customer's IP address is still unreachable after performing these steps then check for the following:
- Go back to step 19 and type the full static IP range assigned to the customer instead of the usable IP range.
- Verify customer's static IP addresses have been setup properly on Netopia.
- Verify customer is actually online.
- Check for firewall (software and hardware) and disable / unplug from the network.
- If possible isolate network down to just 1 computer and the Netopia to rule out 3rd Party CPE configuration conflicts (Routers, Switches, Hubs, Firewalls)
If unable to resolve the issue, escalate to Tier2 / Product Specialist.