-1

I work for a machine builder, and our system has it's own ethernet network (192.168.1.x) with a switch and a dozen devices, most of which have firmly established static IP addresses. For our next job we will be integrating our machine/system into our customer's larger LAN network. Our system needs internet access, but for security reasons, should not be able to access anything in the customer's existing network. Assuming that the customer's LAN addresses are 192.168.55.xx, we would still need to preserver our own internal addressing. What is the easiest way to achieve this? Does our system require a router to interface with the customer's existing network? Or can it be done via their router via subnetting?

Extra info: we need to be able to access our system remotely via VPN (Hamachi), remote desktop, and port-forwarding for remote viewing of two of our own IP cameras.

Thanks

BCA
  • 103
  • 3
  • 1
    Have you spoken to your customer's IT department yet? They're the ones who need to do this integration... – voretaq7 Sep 25 '13 at 19:47

1 Answers1

2

as the two networks, existing company network 192.168.55.0/24, and your hardcoded network 192.168.1.0/24, are mutually exclusive, and neither should access each other, this would be a good place to leverage a firewall with three interfaces. one public IP, one 192.168.55.1/24, and one 192.168.1.1/24.

you then set up nat and fw rules. there are many firewalls to choose from. my favorites are linux iptables and freebsd pfsense.... if you have lots of cash check out the cisco pix/asa's

once this is set up, portforwarding and vpn can be configured for either or both internal LANs. pfsense gives you a ton of vpn options, and configuring openvpn for remote clients is easy.

nandoP
  • 2,021
  • 14
  • 15
  • I don't understand a thing you wrote; time to crack open the networking books from college – BCA Sep 26 '13 at 20:12
  • I understand about a rounter (firewall) having a WAN (public) interface and a private interface, but how does one go about setting up TWO private interfaces? – BCA Dec 12 '13 at 16:31