SH for Business Users modem only mode
 

Is it possible for the SH for a business customer to be in modem only mode.

If not, then is it possible to have 2 subnets.

one on SH and another on a Cisco E4200 running Tomato

so a quick diagram would be


VM -------- SH ----- E4200 (cable from SH to WAN port on E4200)

Re: SH for Business Users modem only mode
 

Modem mode on business isn't available. It might be "coming soon" (in joke which means tomorrow or 5 years time).

Many of us simply connect our business SH to a router and then let the router do all the work. SO for example I've turned off the SH's firewall and wireless, since my Draytek router is doing all the networking stuff. The router is connected via it's WAN port to a LAN port on the SH and simply sees the SH as it's internet connection.

I see no reason why you cannot have an arrangement of:

VM
v
SH > DMZ zone to Cisco WAN port > LAN Network 1
v
LAN Network 2

Re: SH for Business Users modem only mode
 

my idea exactly. do I set the IP as dynamic or static when connecting to the WAN port . do I need to set the IP in a DMZ on the SH - as in theory as its a different subnet would be classed as a DMZ

Re: SH for Business Users modem only mode
 

Doesn't it have an L2TP tunneled mode for static IPs which is basically modem mode anyway?

Re: SH for Business Users modem only mode
 

It does have an L2TP tunnel if static IP addresses are on the account yes.

It is almost modem mode in that the SH does not perform NAT etc but options like Firewall etc are still there.

Has anyone with a business account started to see new Firmware rolled out yet? I'd be interested to know what version you have.

Also are there any SH2's being used for business services ?

Re: SH for Business Users modem only mode
 

an update implemented this set up. turned off all non necessary features on SH plugged LAN cable from SH to WAN port on Cisco E3200 (running Shibby Tomato firmware) also got another 6 x Cisco E3200 configured as WiFi access points with VLANS with bandwidth restriction and everything works very well. Just waiting on the SH to have option for modem mode only .. but for now am happy with the result.

Re: SH for Business Users modem only mode
 

There's a thread running in the VM forum asking if a firewall could be placed behind the business SH to deal with different static IP addresses given that there is no modem mode.

Anyone the wiser about how to go about this bearing in mind what Qasi said and ccarmock confirmed?

Re: SH for Business Users modem only mode
 

Yes I have this setup right now - behind the Business superhub is a Cisco 892W router.

I have 4 of the static IP addresses bound to the interface that faces the Superhub - a primary and 3 secondaries - that allows me to map them to the internal device I need.

Re: SH for Business Users modem only mode
 

Thanks. I've recommended that the enquirer comes here from the VM forum.

Cheers

Re: SH for Business Users modem only mode
 

Thanks Seph for pointing me in this direction.

I ccarmock, I believe my setup is different to yours but maybe you could help me.

So we have the Superhub v1 which from my understanding has the buisiness firmware on which differs from that of the Superhub issued to home accounts, for the most part I need to be able to change the Superhub in to model mode which is not included in this firmware.

So I have the Superhub and connected to that I have a physical firewall (Cisco ASA) on one ethernet connection and the ASA has been set one of our Public IP's.

So internet works fine like this as the Superhub knows what to do with the traffic as all the traffic is natted from the ASA public address.

The problem comes as we need to use several (about 6 I think) public IP's and all of this traffic needs to be sent to that one ASA interface, so the Superhub can only handle (from what I can figure at least although I may be wrong) using one IP for that one interface.

So all other traffic essentially gets dropped at the Superhub as it does not know how to route the traffic from the other IP's.

Thanks either way :)

Re: SH for Business Users modem only mode
 

I think your scenario is similar - except you are using a Cisco ASA and I am using a Cisco router

In essence what you need to do is have the device sitting behind the Business superhub appear as multiple IP addresses to the Superhub.

I do this with secondary addresses on the Cisco router interface that connects tot he Superhub.

Can you have multiple IP addresses on a single interface on the ASA? If not this is your problem. Could you try the config with a Cisco router instead?

Re: SH for Business Users modem only mode
 

Now that Nathan has fully described his requirement (it was a bit difficult in the other place), I recommend him to go and look at the Cisco specs for the ASA 55xx models.

There is a mode called "Multiple Context" that handles what Nathan wants to do and it all depends which ASA firewall he has as to whether or not this mode is supported.

Re: SH for Business Users modem only mode
 

Thanks for the reply, unfortunately only the one IP can be assigned to the ASA interface as this is supposed to be the point that the traffic exits the local environment.

Don't have a cisco router due to the Firewall config this router not really work.

But at least the Superhub is seeing that there are multiple IP's coming from the one interface. I assume your Superhub is not set to "modem" mode?

Regards

Nathan

---------- Post added at 01:46 ---------- Previous post was at 01:40 ----------

Seph,

It's a 5505 but I am unsure if this is something that will work, I just have the one internal subnet that is part of the same Windows domain but I will give it a proper read through when I get a chance tomorrow.

Thanks

Re: SH for Business Users modem only mode
 

I've had a look at the Cisco site and maybe this will be definitive.

https://supportforums.cisco.com/thread/2086259

Re: SH for Business Users modem only mode
 

Nathan - yes correct I am using the business Superhub, which does not have modem mode in the current firmware. (That is due in the next release by the way)

This was my suspicion that the ASA will not allow multiple addresses on a single interface. To at least verify your setup - do you have a spare interface on the ASA that you could bind another public IP address to and run another cable to the Superhub?

Or will the ASA insist that all interfaces are on different subnets?

The Superhub is quite happy to see multiple public routable IPs appear on a single interface yes.

---------- Post added at 01:52 ---------- Previous post was at 01:51 ----------

Yup that looks promising Seph. That's the scenario here

Re: SH for Business Users modem only mode
 

What exactly are you actually wanting to do with the additional IPs?

Re: SH for Business Users modem only mode
 

I'm glad Qasi has joined this part of the conversation. He was the other guru I alluded to on the VM forum.

Re: SH for Business Users modem only mode
 

Thanks Seph

So one IP is for exchange (OWA), one is for citrix (XenApp) and there are a few others that are setup along with a couple more that will be used for testing in the future.


I am now wondering if I need to put in place some sort of reverse NAT (perhaps wrong terminology) public address to a private address. Does that sound possible?

Thanks again.

Re: SH for Business Users modem only mode
 

I was more wondering how you planned to use those IPs on a network level.

Do you want those computers to "bypass" the NAT and have publicly accessible addresses dedicated to them?

Or do you just want to provide access to a Citrix and OWA server? If the latter, "reverse NAT" or PAT would do just fine - though your additional IPs would go to waste.

---------- Post added at 17:56 ---------- Previous post was at 17:56 ----------

Given my frequently expressed hatred of all things Cisco I'm surprised you thought I could be of any help here :p:

Re: SH for Business Users modem only mode
 

If you are not using one of the public IP addresses directly on the server then yes you will need to run NAT or PAT on the ASA that sits behind the Superhub.


My setup is just that too - private address space internally with the public IP addresses all sitting on the WAN interface of the router connected to the Superhub and then the router is configured to NAT those to the internal addresses.

It works well.