Forum Home
Press F1
 
Thread ID: 68836 2006-05-12 06:13:00 NAT router TideMan (4279) Press F1
Post ID Timestamp Content User
454383 2006-05-12 06:13:00 Is every router an NAT router (i.e., are all routers equal, or are some more equal than others)?

Will the following arrangement work:
Internet=>Cable Modem=>NAT Router=>Switch=>several PCs

And if I do it this way, do I need software firewalls on each machine?
If so, why?

Will I need to configure the NAT router with a PC, or will I be able to just connect it up?

In such an arrangement, will the PCs be able to talk to each other behind the router (one of them is a Linux box)? If so, how does that work?

I guess there's a website somewhere that answers my questions, but I haven't found it yet.
TideMan (4279)
454384 2006-05-12 06:31:00 No. A router with NAT is for use in small local networks, so one IP address will work for a number of computers. Real routers out on the Internet don't do that. They work only with "real" IP addresses.

Yes (but many "domestic" routers come with an internal switch with a few ports, so you might not need an extra switch).

Probably not if the router has a firewall as well. Essential if it hasn't, but maybe desirable for extra protection.

You will need to configure it, but it will come with instructions. Just turn on one computer the first time. It will probably have a Web browser interface for the setup.

In that arrangement you have a Local Area Network, and the computers talk to each other through (not "behind") the router. They use their LAN IP addresses (probably in the 192.168.x.y or 10.x.y.z range) to communicate together.
Graham L (2)
454385 2006-05-12 07:33:00 And if I do it this way, do I need software firewalls on each machine?
If so, why?

whats stopping any nasies from gaining access to he net from your pc? a nat router/firewall will not do that. only a software firewall can do that.
tweak'e (69)
454386 2006-05-13 00:24:00 Just to clarify........
When I look for routers in PriceSpy, it gives me lots of devices with descriptions like "ADSL router with firewall".
1. But I don't have ADSL. I have a cable modem. Will such a router work with a cable modem?
2. Will such a router have NAT by default, or must it be specified in the description?
3. I already have a switch with 4 ports. Could I just buy a single port router and plug the switch into it?
4. Any suggestions of a suitable router?

I'd ask these questions at a store like DSE, but I'm never sure if they actually know what they're talking about, or whether they know as much as me (which isn't much).
TideMan (4279)
454387 2006-05-13 00:50:00 An "ADSL router" is a modem plus router. You need a router without the ADSL modem built in and you want network address translation.

Have a look at the Ascent site:

www.ascent.co.nz

They all seem to have a 4 port switch built in.
Terry Porritt (14)
454388 2006-05-13 01:35:00 Just to clarify........
When I look for routers in PriceSpy, it gives me lots of devices with descriptions like "ADSL router with firewall".
1. But I don't have ADSL. I have a cable modem. Will such a router work with a cable modem?

You need a router that can connect to a cable modem. Pricespy lists a dsl/cable router for $11 2.


2. Will such a router have NAT by default, or must it be specified in the description?

Almost certainly, along with DHCP and a basic firewall. Ask before you buy though.


3. I already have a switch with 4 ports. Could I just buy a single port router and plug the switch into it?

Yes. You can also use one of the PCs as a router. (easy)For XP, get another network card for it, connect the switch to one and the cable modem to the other, enable ICS, and connect the other machines to the switch. (hard)With Linux, do the same with the hardware, and then configure NAT, routing table and firewall etc.
vinref (6194)
454389 2006-05-13 03:25:00 Get a Linksys WRT54GS, it'll do what you want and give you wireless.

I'd wager that every router under $1000 in price has NAT functions without extra pain.
Growly (6)
454390 2006-05-13 04:03:00 Yes. You can also use one of the PCs as a router. (easy)For XP, get another network card for it, connect the switch to one and the cable modem to the other, enable ICS, and connect the other machines to the switch.

Yes, this is what I do already, but it's been pointed out me that it's not very secure and anyone who knows how could bypass the software firewalls, get into any computer in my LAN, and play havoc.

But as I understand it, installing an NAT router will provide my LAN with hardware protection. Correct?

With a cable router, can I simply plug in a switch to expand the LAN, or does the switch need to be connected to a computer running ICS?
TideMan (4279)
454391 2006-05-13 04:19:00 NAT is not really a "hardware protection" . It makes the individual computers "invisible" to the Internet . . . the local IP addresses used are not "routable" which means that they can't be used on the Internet . If you've got a PC with ip 192 . 168 . 2, no-one "out there" can connect to it by using that IP . (There are probably 100 million PCs using that particular IP address at this moment . :D)

Firewalls are needed .

ICS is a way to have a router when you haven't got a router . It requires one PC to be on for any other to access the Internet through it .

A router and switch is the right way to do it . Just plugging in a switch and all the PCs to the switch makes a LAN . If it's a cable router with included switch, just plug the PCs into it . No ICS required . It's all TCP/IP . ;)
Graham L (2)
454392 2006-05-13 05:10:00 Thank you Graham. You have explained it very well. Even I can understand that.
So, that's exactly what I'll do.
Now, I've got to find the right router.

I just called in to a PC shop in town and as expected the pimply-faced kid serving had no idea what I was talking about. But he did have the grace to admit that "we haven't covered that in my network class yet."
TideMan (4279)
1