Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Scenario: A database server running SQL Server 2005 Express and SQL Server Management Studio 2005 Express Edition, and a web server running IIS 5.0 using Windows XP Professional. There are also two other computers with Windows XP and Windows 98

I have a Linksys router which I use as an access point for wireless (laptop). There are 5 ports behind it: four for clients and one for Internet.

I would like to setup a LAN -- something like a private hosting area with two clients.

What should i do? Where to connect what and what would the changes in settings be?

Right now it uses DHCP or something to assign IPs.

Where will the web server be attached, to the Internet port?

Where will the database server be attached?

Any guide, links, help.

share|improve this question

migrated from stackoverflow.com Jun 13 '10 at 20:36

This question came from our site for professional and enthusiast programmers.

1 Answer 1

up vote 0 down vote accepted

You should probably invest in a second router and create a DMZ. This way, you can setup some firewall rules and protect yourself a bit from the public Internet. It's more complicated, but you can better protect your private network this way.

Basically, you will put your server(s) between the routers. The server(s) will need to have 2 network cards, one connected to each router. Each router should be on a separate logical subnet and you will need to setup routing rules between them. The public router will be connected to the Internet through the router's WAN port. The private router will have the client's connected and will not have anything in its WAN port. Unsolicited traffic from the public Internet should not be routed to the private network.

You can continue using DHCP on the private router to serve IP addresses to the clients, but you will want to assign static addresses to the server(s). You can also setup the private router's firewall to send traffic from the clients and the Internet using stateful packet inspection.

It sounds complicated and it is. If you want to do it "right" and be safe, this is a good approach. There's a reason that companies pay network administrators a lot of money to do this kind of stuff every day.

share|improve this answer
    
It is marginal for Server Fault which is for IT pros (i.e. questions about situation that arise when you're getting paid to manage computers), but is on topic for Super User. –  dmckee Jun 13 '10 at 20:36
    
sir "stephen jennings" thanks for answer and also thanks for redirecting my question to the right site. –  user39966 Jun 14 '10 at 12:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.