Superhub SH for Business Users modem only mode

jfish · 24-01-2014, 12:13

Is it possible for the SH for a business customer to be in modem only mode.

If not, then is it possible to have 2 subnets.

one on SH and another on a Cisco E4200 running Tomato

so a quick diagram would be

VM -------- SH ----- E4200 (cable from SH to WAN port on E4200)

MovedGoalPosts · 24-01-2014, 13:26

Modem mode on business isn't available. It might be "coming soon" (in joke which means tomorrow or 5 years time).

Many of us simply connect our business SH to a router and then let the router do all the work. SO for example I've turned off the SH's firewall and wireless, since my Draytek router is doing all the networking stuff. The router is connected via it's WAN port to a LAN port on the SH and simply sees the SH as it's internet connection.

I see no reason why you cannot have an arrangement of:

VM
v
SH > DMZ zone to Cisco WAN port > LAN Network 1
v
LAN Network 2

jfish · 24-01-2014, 14:05

Quote:

Originally Posted by Rob

Modem mode on business isn't available. It might be "coming soon" (in joke which means tomorrow or 5 years time).

Many of us simply connect our business SH to a router and then let the router do all the work. SO for example I've turned off the SH's firewall and wireless, since my Draytek router is doing all the networking stuff. The router is connected via it's WAN port to a LAN port on the SH and simply sees the SH as it's internet connection.

I see no reason why you cannot have an arrangement of:

VM
v
SH > DMZ zone to Cisco WAN port > LAN Network 1
v
LAN Network 2

my idea exactly. do I set the IP as dynamic or static when connecting to the WAN port . do I need to set the IP in a DMZ on the SH - as in theory as its a different subnet would be classed as a DMZ

qasdfdsaq · 24-01-2014, 15:06

Doesn't it have an L2TP tunneled mode for static IPs which is basically modem mode anyway?

ccarmock · 26-01-2014, 14:04

It does have an L2TP tunnel if static IP addresses are on the account yes.

It is almost modem mode in that the SH does not perform NAT etc but options like Firewall etc are still there.

Has anyone with a business account started to see new Firmware rolled out yet? I'd be interested to know what version you have.

Also are there any SH2's being used for business services ?

jfish · 28-01-2014, 17:32

an update implemented this set up. turned off all non necessary features on SH plugged LAN cable from SH to WAN port on Cisco E3200 (running Shibby Tomato firmware) also got another 6 x Cisco E3200 configured as WiFi access points with VLANS with bandwidth restriction and everything works very well. Just waiting on the SH to have option for modem mode only .. but for now am happy with the result.

Sephiroth · 28-01-2014, 22:06

There's a thread running in the VM forum asking if a firewall could be placed behind the business SH to deal with different static IP addresses given that there is no modem mode.

Anyone the wiser about how to go about this bearing in mind what Qasi said and ccarmock confirmed?

ccarmock · 28-01-2014, 23:48

Yes I have this setup right now - behind the Business superhub is a Cisco 892W router.

I have 4 of the static IP addresses bound to the interface that faces the Superhub - a primary and 3 secondaries - that allows me to map them to the internal device I need.

Sephiroth · 29-01-2014, 00:01

Thanks. I've recommended that the enquirer comes here from the VM forum.

Cheers

Nathan666 · 29-01-2014, 02:16

Thanks Seph for pointing me in this direction.

I ccarmock, I believe my setup is different to yours but maybe you could help me.

So we have the Superhub v1 which from my understanding has the buisiness firmware on which differs from that of the Superhub issued to home accounts, for the most part I need to be able to change the Superhub in to model mode which is not included in this firmware.

So I have the Superhub and connected to that I have a physical firewall (Cisco ASA) on one ethernet connection and the ASA has been set one of our Public IP's.

So internet works fine like this as the Superhub knows what to do with the traffic as all the traffic is natted from the ASA public address.

The problem comes as we need to use several (about 6 I think) public IP's and all of this traffic needs to be sent to that one ASA interface, so the Superhub can only handle (from what I can figure at least although I may be wrong) using one IP for that one interface.

So all other traffic essentially gets dropped at the Superhub as it does not know how to route the traffic from the other IP's.

Thanks either way

ccarmock · 29-01-2014, 02:23

I think your scenario is similar - except you are using a Cisco ASA and I am using a Cisco router

In essence what you need to do is have the device sitting behind the Business superhub appear as multiple IP addresses to the Superhub.

I do this with secondary addresses on the Cisco router interface that connects tot he Superhub.

Can you have multiple IP addresses on a single interface on the ASA? If not this is your problem. Could you try the config with a Cisco router instead?

Sephiroth · 29-01-2014, 02:37

Now that Nathan has fully described his requirement (it was a bit difficult in the other place), I recommend him to go and look at the Cisco specs for the ASA 55xx models.

There is a mode called "Multiple Context" that handles what Nathan wants to do and it all depends which ASA firewall he has as to whether or not this mode is supported.

Nathan666 · 29-01-2014, 02:46

Thanks for the reply, unfortunately only the one IP can be assigned to the ASA interface as this is supposed to be the point that the traffic exits the local environment.

Don't have a cisco router due to the Firewall config this router not really work.

But at least the Superhub is seeing that there are multiple IP's coming from the one interface. I assume your Superhub is not set to "modem" mode?

Regards

Nathan

---------- Post added at 01:46 ---------- Previous post was at 01:40 ----------

Seph,

It's a 5505 but I am unsure if this is something that will work, I just have the one internal subnet that is part of the same Windows domain but I will give it a proper read through when I get a chance tomorrow.

Thanks

Sephiroth · 29-01-2014, 02:50

I've had a look at the Cisco site and maybe this will be definitive.

https://supportforums.cisco.com/thread/2086259

ccarmock · 29-01-2014, 02:52

Nathan - yes correct I am using the business Superhub, which does not have modem mode in the current firmware. (That is due in the next release by the way)

This was my suspicion that the ASA will not allow multiple addresses on a single interface. To at least verify your setup - do you have a spare interface on the ASA that you could bind another public IP address to and run another cable to the Superhub?

Or will the ASA insist that all interfaces are on different subnets?

The Superhub is quite happy to see multiple public routable IPs appear on a single interface yes.

---------- Post added at 01:52 ---------- Previous post was at 01:51 ----------

Quote:

Originally Posted by Sephiroth

I've had a look at the Cisco site and maybe this will be definitive.

https://supportforums.cisco.com/thread/2086259

Yup that looks promising Seph. That's the scenario here