Network Question...

Quote:

---

Most networks that enable all the computers on it to access the intenet will go through a router/modem they wont connect directly to the internet as this would mean they would all need accounts with the ISP that is being used

---

Yeah, and I knew that, but I've been hung in this thinking nonetheless that each computer should have an IP associated with it...So that makes sense, I follow ya.

Quote:

---

You seem to think that pinging something will get you the ip of it, youyneed the ip in the first place to ping something, otherwise how would you address your ping?

---

Right, I actually do know that, I was just thinking backwards this morning. :D Sorry 'bout that, that's why I made the stupid.exe comment on my part last post.

Quote:

---

Ok, so for example, the business network here is 20+ computers behind one router. So, all I'm going to get for any of those boxes from the outside world is the router IP address, which is one address for the router and all 20+ comptuers connecting behind it rather than 20+ WAN IPs, right?

---

Kinda right, you would get the ip for the router or the box that has a direct internet connection and that is all, forget about all the other boxs behind it for now, the ip you get is just for whatever own it, nothing else.

its possible can get the internal ips from/through the router with a SNMP walk type technique or with a bit of further scanning ;-) but i would try to get to grips with the ip addressing system first!

Gotcha, I think you have me all cleared up!

Yes, I am very familiar with the internal IP concept. I just wasnt sure if It "really" made me more secure or not...
I guess i wasnt sure what other implication being a private network would have.

See, and look at what all you started with that innocent little question! ;)

isn't it always the simple questions that get the most responses ;)

O yeah, back to the origional question!!

Quote:

---

Originally posted here by Jason1977
on my network we use all 172 (private) addresses. We have no webserver or public IPs whatsoever behind the firewall...
What does this mean for securing this network? isnt all the work then done on the firewall? is that the most important? i guess i am not sure of the implicatuions with this type of network?

---

Does this network have internet access? if so, what way have you configured it to get access?

Yes we do have internet access.
we have a T1 with a Cisco 2600 i think...and NAT is running.

Hmm, i've finished all four cisco courses and i did fairly well, but never had to troubleshoot anything yet, as im still a student.

Anyways lemme know if im on the right track, if u have 172 private addresses, and one WAN address assigned by the ISP, You would obviously need a router or switch that all addresses connect too, going into the router from the LAN u would also need a LAN address and on the other side(internet) u'd have the WAN address that is assigned by the ISP. so from the net u'd be able to ping the router, and since the LAN address is prb something like 192. . . u wouldnt be able to actually ping those from the outside.

Thats just my opinion i could be wrong of course, and if i am could someone lemme know