Eircom Public IP Range - Zyxel D1000

derek214

Hi All,

I am having some trouble routing my public IP range from the Eircom Zyxel modem/router.

Current setup:

DSL line

---

>Zyxel Model

---

>Cisco Router

I have a /29 Public IP range from Eircom - the first usable IP is dynamically assigned to the WAN interface of the Zyxel modem. The second usable I have statically assigned to the Cisco Router external interface.

The problem I am having is that from the Zyxel router if I try try to ping or traceroute to my Cisco IP it gets routed out the towards the internet (via first usable IP).

The Zyxel doesn't allow a static route towards an interface - only to a GW IP which would mean i would nee to set a static public IP on an internat interface....Fine - but the Zyxel has no option for this

There is a DMZ option in the Zyxel GUI but any playing I have done with it has been unsuccessful. Any ideas or thoughts are greatly appreciated!

Thanks,
Derek

Xennon

Bridge the Zyxel and handle the DSL connection from the Cisco?

derek214

Think I need an ADSL module in the Cisco router before it can handle it??

TheNileEffect

The usual way of doing this is to assign the second usable IP to the internal interface of the Zyxel Modem, and setting the Cisco router IP (facing the Zyxel) to a 3rd usable IP, and use the internal IP on the Zyxel as the GW.

Alternatively, as mentioned, use bridging, which relies on the Zyxel to do the DSL hardware work, and the Cisco to do all the authentication and routing etc.

derek214

Thanks for the replies folks!
A public IP on the internal interface of the Zyxel would be ideal but it doesnt appear to allow it - not in the GUI anyway. Surprisingly there doesn't see to be an easy way to do this in DD-WRT either!

It seems my understanding of bridging was slightly incorrect - looks a solid solution!

Found this Doc http://www.cisco.com/c/en/us/support/docs/long-reach-ethernet-lre-digital-subscriber-line-xdsl/asymmetric-digital-subscriber-line-adsl/4105-2600pppoe-4105.html

Will be trying out a variation of the 2611 config tomorrow!

TheNileEffect

If you want to experiment, according to the manual of the Zyxel D1000 from Eircom, you can add an additional IP to the LAN interface via the Network Setting > Home Netwoking > IP Alias screen. (There is nothing stopping you setting the main LAN IP to a public IP either). It all sounds abit sucky though, bridging is easier and less of a waste of IPs

ED E

Bridging is definitely the way to go, let the cico open a pppoe tunnel and then it can assign the ips at will, leave the d1000 as just a modem.

Bog Standard User

set the sub net mask on each machine that requires a static ip to 255.255.255.255

on the cisco router just use the normal sub net mask of 255.255.255.248

derek214

Thanks all! Bridging went nice and smooth this morning.


Config used:

interface FastEthernet0/0
no ip address
duplex auto
speed auto
pppoe enable
pppoe-client dial-pool-number 1
!
!
interface Dialer1
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap chap callin
ppp chap hostname eircom
ppp chap password 0 broadband1
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
dialer-list 1 protocol ip permit



If anyone has any advice/info on hardening this device ACL's etc. please feel free to shout!

Thanks,
Derek

efrisby

Hi, I know this post is a number of years old, but I was just wondering where did you get the public default gateway from EIR. I just purchased an public ip range from EIR but they never provided the public default gateway and no one in EIR knows what it is. I was just wondering, the public default gateway on the router that shows up with public static ip, was that the public default gateway address that you used for the IP Range.

I'm in the process of getting a firewall to configure soon and i'm trying to find out the above before I waste money on a firewall to configure it if I don't have the default gateway to get out.

Thanks

Glaceon

https://www.boards.ie/discussion/comment/121233949#Comment_121233949

Normally with Eir you authenticate with PPPoE (eir@eir.ie and broadband1) to get the static IP.