Setting up a DSL network!!

[Jay32]

Hi Folks,
I've recently volunteered to set up a network for my employer so that all the office computers(8 systems throughout a two story building) could share a DSL conection. I've had limited networking experience so I figured this would give me some real world experience. After researching and pouring over the posts here at the forum, I've come up with the following:

ISP will provide the cable modem and the connection to it, the phone lines come in in the basement so I'm guessing the network will start there. I'll run a cable from the modem to a Linksys 8-port Router/Switch (BEFSR81) on the first floor, then connect the three first floor computers. I'll then uplink to a Linksys 8-port Switch (EF2S16) on the second floor and connect the remaining 5 systems.

And now the questions:
Two of the systems that they want DSL access on are already part of a small network that they don't want me touching. Can I just install a second NIC in these machines so they can be a part of both networks? And would that network be safe from intrusion from the DSL network?

Will the router provide enough security for the network? I want to be able to asure them that it is as safe as possible.

Is there any cable run that needs to be shorter that the magic 325ft. that I keep coming across, such as the run from modem to router or router to switch?

Any tips for running cat5 throughout a commercial building?

And finally, if your still reading the post, about what would it cost to have the pro's come in and set up such a network? I might be able to use the savings as an angle for a raise!!

Thanks for any replies!!
Jay

[troubleshooter]

Jay32:

I was actually going to post a message asking almost the same question in this forum.

I've been doing some research into this because I want to go into business setting these up for homes and businesses.

You'll want to get a DSL router that connects to the Cable modem, one that has built in NAT and firewall. The NAT (Network Address Translation) allows the PC's on the network to share the one IP that the Cable co gives you. The firewall prevents any unwanted intrusions.

A more secure solution as I understand it is to buy a fully fledged firewall instead. I think you can get these with or without routers supplied. These devices I think also come with the (recommended)option of paying a subscription for description files of known intrusions, such as trojans and hackers.

What I wanted to know though was how you would set up a network to share the DSL with existing LAN's, along the same principles of separation and security that you were talking about.

As for paying the pro's, sometimes that means paying for experience and professional backup incase the hardware goes down and is urgently needed. If you have good backup (eg does 3com for example offer quick swap out and good phone tech support? then you could assume the responsibility yourself.

Will the experience be useful to you? Can you use it elsewhere? Possible sideline in networking perhaps.


Hope someone has some ideas about the network issue.

Troubleshooter

[HAL9000]

Originally posted by Jay32 Two of the systems that they want DSL access on are already part of a small network that they don't want me touching. Can I just install a second NIC in these machines so they can be a part of both networks? And would that network be safe from intrusion from the DSL network?

It depends on what kind of network they currently have. If they have it based on NETBEUI or IPX/SPX, you won't be changing anything. If they are on TCP/IP, you may have to change IP address so you should discuss this with them. If they don't want the IP's touched, install the second NIC's.

Originally posted by Jay32 Will the router provide enough security for the network? I want to be able to asure them that it is as safe as possible.

Yes.

Originally posted by Jay32 Is there any cable run that needs to be shorter that the magic 325ft. that I keep coming across, such as the run from modem to router or router to switch?

Nope, keep them under 100m (328ft) and you'll be fine. I usually stay under 300ft to be sure.

Originally posted by Jay32 Any tips for running cat5 throughout a commercial building?

Keep the lines away from electical cables and at least 3ft away from flourescent light ballasts.

Originally posted by Jay32 And finally, if your still reading the post, about what would it cost to have the pro's come in and set up such a network? I might be able to use the savings as an angle for a raise!!

I charge $100 per hour + materials which I usually have at least 30% markup on. Cable is marked up much more. We buy 1000ft rolls which cost us $.08 per foot and charge $.50 per foot.

[Jay32]

Thanks for the input!!

You'll want to get a DSL router that connects to the Cable modem, one that has built in NAT and firewall. The NAT (Network Address Translation) allows the PC's on the network to share the one IP that the Cable co gives you. The firewall prevents any unwanted intrusions.

I'm pretty sure the Linksys I spec'ed provides all these functions, someone correct me if I'm wrong.

It depends on what kind of network they currently have. If they have it based on NETBEUI or IPX/SPX, you won't be changing anything. If they are on TCP/IP, you may have to change IP address so you should discuss this with them. If they don't want the IP's touched, install the second NIC's.

Thanks Hal, I'll take a look at one of the machines on the existing network and see how it's set up.

[glc]

The pros charge around $90 to $120 an outlet to professionally wire with Cat5 and put in a patch panel. The rest of the job is well within the average person's capability, the Linksys router is simple to set up.

[Jay32]

Thanks glc.

One more question to throw in the mix, since I plan on crimping my own wire, should I use the 568A or B standard.

[glc]

B. A is used at one end of a crossover cable.

[troubleshooter]

Is that really all it would need to get the DSL access to an independent network? An extra NIC for the DSL LAN in each machine?

If the LAN was using a file/authentication server, could you just put a second NIC in that and set it as a gateway to serve the other machines on the network?

[Jay32]

Well, everything is in place and seems to be working but I've come up with more questions:

I took a closer look at the existing network, it is a Netware server linked to four other systems through a SMC 8port 10M hub. I've never messed with netware but it looked like it was using IPX so I just uplinked the hub to the router to get the DSL access to those machines. All machines seem to be playing nice but I'm still concerned about the security of the server. Not so much internal security but external since I've linked it to a DSL line. Any thoughts or additional steps I should take here?

Starting with the first system I hooked up and continuing to the last, I noticed that I was getting stalls while surfing the net. I'd click through 5-10 pages real fast (I was exited as I've never used DSL before ) then it would come to a screeching halt for 30 sec. or so, then blast off again. This was with the default settings on the LinkSys router(DCHP enabled) and all systems set to obtain the IP automatically. After spending some time at dslreports.com I've come to the conclusion that the DCHP is creating a broadcast storm that is interupting the DSL connection. I plan on disabling DCHP on the router and manually setting the IP's at each machine. Anyone seen this before and am I on the right track?

While in the set up for the router, I noticed the option to buy ZoneAlarm and PCcillian. Would these run local at the router (don't see how that is possible) or was it just a link to buy and install on all the systems in your network. I've already warned them to keep an up to date virus program on all systems but should I suggest Zonealarm on all systems too?

And finally, should I be asking one question per thread instead all loading them all into one like this?

Thanks for all the help so far!!

Jay

[MaxDaemon]

What's the chance there's a DHCP already running on the Novell server that's conflicting w/ the DHCP in the router/modem/hub/whatever?

[glc]

The server is very secure if it's running Novell with IPX only. Just make sure that file and print sharing is NOT enabled over TCP/IP on the workstations and your security should be acceptable.

[Jay32]

MaxDaemon:
I was getting the stalls even before I connected the Novell segment so I had ruled that possibility out.

glc:
Thanks, you've eased a troubled mind

[Jay32]

MaxDaemon:
I was getting the stalls even before I connected the Novell segment so I had ruled that possibility out.

glc:
Thanks, you've eased a troubled mind

[Jay32]

hmmm...that's odd. How did I manage a double post 5 hours apart?

[Jay32]

Just to bring closure to the thread...

Releasing and renewing all the IP's in the router seems to have cured the stalling problem so I'm leaving the DCHP enabled for now.

Everyone in the office is enjoying their fast internet connection and I gained valuable experince in networking (though I realize that was just scratching the surface).

Thanks to all that provided help on this project!!

Jay