<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Arial;
font-weight:bold;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Arial;
font-weight:bold;}
span.EmailStyle16
{mso-style-type:personal;
font-family:Arial;
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:black;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:8.5in 11.0in;
margin:.75in .75in .75in .75in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>I always like to use
first usable in the subnet as the default gateway. When you have non /24
networks it sometimes is not as easy to remember the last usable as some people
like to use for the gateway.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>If you’re using
something like HSRP, VRRP, or similar I like to have the virtual IP still be
the first and then the second, third, etc be the physical routers.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>I like DHCP to start
somewhere easy to remember (depends on network size) but I try to make it a 10’s
number (10, 20, 30,etc) and go not quite to the end of the subnet. Then I leave
a handful of IPs open at the end of the subnet as reserved for cold spare
equipment that will already have addresses assigned in the reserved range so
you can just whack them into place and they are network-ready without having to
console into them (server, switches, firewalls, etc) then change them to their
proper final address. Then you also have a little breathing room at the front
side of the subnet as well for any static assignments you may need.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>I like having categorized
equipment on their own private networks. Servers on network A, workstations on B,
voip phones on C, misc junk like printers and light utility things on D, etc.
If your switches support private isolated vlans or even just private vlan edge
ports this is fantastic for workstations and phones in particular.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>When interconnecting
remote networks outside of your control via a VPN tunnel, having segregation
makes it very nice (especially in case of address overlap) so you only have to
NAT the things that need to cross the VPNs instead of all of your entire
network.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>When possible multi-homing
servers, routers, firewalls, etc is very nice to make an OOB management network
as well. Then you don’t have remote access (ssh, rdp, etc) open on the
production facing networks which is great for security. You can then setup a
private remote access VPN login that gives various users only access to various
hosts as necessary. This OOB management network is another fantastic place for
private/isolated vlans as well.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'>This is likely going
way beyond the scope of your request but you didn’t have to read the
whole email if you didn’t want to.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 color=black face=Arial><span
style='font-size:10.0pt;color:black;font-weight:normal'><o:p> </o:p></span></font></b></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><b><font size=3
face="Times New Roman"><span style='font-size:12.0pt;font-family:"Times New Roman";
font-weight:normal'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></b></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma'>From:</span></font></b><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;font-weight:normal'>
tclug-list-bounces@mn-linux.org [mailto:tclug-list-bounces@mn-linux.org] </span></font><font
size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>On Behalf
Of </span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:normal'>Thomas Rieff<br>
</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma'>Sent:</span></font><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;font-weight:normal'> Wednesday,
December 02, 2009 1:06 PM<br>
</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma'>To:</span></font><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;font-weight:normal'> TCLUG<br>
</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma'>Subject:</span></font><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;font-weight:normal'> [tclug-list]
Internal IP Address Guidelines</span></font><font face="Times New Roman"><span
style='font-family:"Times New Roman";font-weight:normal'><o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><b><font size=3 face=Arial><span style='font-size:12.0pt'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><span class=EmailStyle16><b><font size=2 color=black
face=Arial><span style='font-size:10.0pt'>Are there any basic guidelines for
assigning ip address to various devices on the internal network???<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal><span class=EmailStyle16><b><font size=2 color=black
face=Arial><span style='font-size:10.0pt'>That is ranges for different devices
within the 255 numbers and/or as follows…<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal style='margin-left:1.0in'><span class=EmailStyle16><b><font
size=2 color=black face=Arial><span style='font-size:10.0pt'>.1 Gateway<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal style='margin-left:1.0in'><span class=EmailStyle16><b><font
size=2 color=black face=Arial><span style='font-size:10.0pt'>.?-.? switch<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal style='margin-left:1.0in'><span class=EmailStyle16><b><font
size=2 color=black face=Arial><span style='font-size:10.0pt'>.?- .? servers<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal style='margin-left:1.0in'><span class=EmailStyle16><b><font
size=2 color=black face=Arial><span style='font-size:10.0pt'>printers <o:p></o:p></span></font></b></span></p>
<p class=MsoNormal style='margin-left:1.0in'><span class=EmailStyle16><b><font
size=2 color=black face=Arial><span style='font-size:10.0pt'>dhcp. Etc.<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal><span class=EmailStyle16><b><font size=2 color=black
face=Arial><span style='font-size:10.0pt'>Working on updating my internal
network so would like to reorganize things in a proper manner.<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal><span class=EmailStyle16><b><font size=2 color=black
face=Arial><span style='font-size:10.0pt'>Hope you can help.<o:p></o:p></span></font></b></span></p>
<p class=MsoNormal><span class=EmailStyle16><b><font size=2 color=black
face=Arial><span style='font-size:10.0pt'>Tom <o:p></o:p></span></font></b></span></p>
<p class=MsoNormal><span class=EmailStyle16><b><font size=2 color=black
face=Arial><span style='font-size:10.0pt'><o:p> </o:p></span></font></b></span></p>
<p class=MsoAutoSig><font
color=black><span style='color:black'>Thomas Rieff</span></font><o:p></o:p></p>
<p class=MsoAutoSig><b><font size=5 color="#003300" face=Arial><span
style='font-size:16.0pt;color:#003300'>GreenCare<o:p></o:p></span></font></b></p>
<p class=MsoAutoSig><b><font size=3 color=black face=Arial><span
style='font-size:12.0pt;color:black'>1717 3rd Avenue<o:p></o:p></span></font></b></p>
<p class=MsoAutoSig><b><font size=3 color=black face=Arial><span
style='font-size:12.0pt;color:black'>Mankato, MN 56001<o:p></o:p></span></font></b></p>
<p class=MsoAutoSig><b><font size=3 color=black face=Arial><span
style='font-size:12.0pt;color:black'>(507) 344-8314 Office<o:p></o:p></span></font></b></p>
<p class=MsoAutoSig><b><font size=3 color=black face=Arial><span
style='font-size:12.0pt;color:black'>(507) 344-8316 Fax<o:p></o:p></span></font></b></p>
<p class=MsoAutoSig><b><font size=3 color=black face=Arial><span
style='font-size:12.0pt;color:black'>(507) 381-0660 Cell<o:p></o:p></span></font></b></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>