Google Answers Logo
View Question
Q: Small Network Setup ( Answered,   1 Comment )
Subject: Small Network Setup
Category: Computers > Internet
Asked by: johngl-ga
List Price: $30.00
Posted: 31 Mar 2003 13:08 PST
Expires: 30 Apr 2003 14:08 PDT
Question ID: 183800
I’m in the process of building a windows network for my small business
and need some help setting it up.  I would like for my employee
workstations to have 10.x.x.x IP addresses, Internet access and to be
inaccessible to the outside world.  I have enclosed a small diagram of
the way I would like to setup this network
( ).  If I understand
correctly one, or more, of my servers need to have two network cards,
one with an outside IP address and one with a 10.x.x.x address.  Then
my workstations would use that server’s 10.x.x.x address as the
gateway for Internet access.  I’m pretty clear on everything except on
how the 10.x.x.x addresses are used or get created/maintained.  So my
question is how do the 10.x.x.x address work and how to I set up my
servers and workstations to use them (including what subnet mask to
use and why).  I would appreciate any help you can offer.  Have a
great day and thank you for reading my question.
Subject: Re: Small Network Setup
Answered By: wengland-ga on 31 Mar 2003 13:35 PST

I am going to make the assumption that you wish to remain a full
Windows network, and not introduce a Unix machine in the mix.

I am also going to assume that you will be using the latest versions
of the OS, Windows 2000 for the servers and Windows XP for the

If either of these assumptions are incorrect, please ask for a
clarification and I will update the answer.

Now, the basic technology you will need to have one external IP
address and many internal reserved addresses (the 10-dot network
addresses) is called Network Address Translation (NAT).

NAT is a standard feature of Windows 2000 Server's Routing and Remote
Access Service (RRAS) and Win2K Professional's Internet Connection
Sharing (ICS) component that lets an Internet-connected host act as an
Internet gateway for internal LAN clients. NAT translates clients'
internal network IP addresses into the appropriate address on the
NAT-enabled gateway device and protects internal client IP addresses
by making them inaccessible to Internet hosts.

You are correct in thinking you will need a machine with two network
cards, one connected to the outside, and one connected to the inside.

You can enable NAT from the Routing and Remote Access window on Win2K.
 Full details of the exact process are available from the article
"Windows 2000's Network Address Translation" by Zubair Alexander as
published in the February, 2000 issue of Windows and .Net Magazine,
and available here:

On the workstations, you will simply need to have the 'Obtain an IP
Address Dynamically' selected in the TCP/IP configuration dialog. 
This will cause the workstations to dynamically search your internal
network for a DHCP server (the NAT server) and get an IP address from
there.  Or, you can manually assign the IP addresses to each
workstation in the same control panel.

Directions and screen shots for this under Windows XP are found in the
article, 'Windows XP Network Protocols', published by at:

Regarding the subnet mask, you generally leave that blank if using
DHCP to obtain addresses for the workstations; the DHCP server (the
NAT server) will assign that along with the IP address.  Subnetting is
generally only used in much larger networks to group and divide
network segments for logical management.  You can read up on
subnetting at these resources:, a free lecture based presentation of IP addresses
and subnetting

Also, has a printed tutorail about IP addressing and
subnetting, along with great calculators to help figure subnets.

Again, tho, I reinforce the notion that you do not need to worry about
subnetting for smaller networks - less than 254 machines will only
occupy one class-C subnet.

I hope this has answered your question; if you need further
information, please post a clarification request.

Search Strategy:

windows 2000 nat

windows XP network setup

how to subnet

Further Reading:

Understanding NAT, Sean Daily in Windows & .Net Magazine, August 14,

Request for Answer Clarification by johngl-ga on 03 Apr 2003 20:06 PST
I used the NAT service that the article you posted suggested and am
still having some problems.  I don’t think I’m clear on a few things. 
I have one Network card with the following settings.

IP 208.48.X.X
Subnet  255.255.X.X
Gateway 208.48.X.X

I set this, when asked by the setup wizard, as the network card to get
onto the Internet with.

The second network card is set with:

Gateway (Blank)

I then changed one of my workstations to get IP from DHCP server (as
said in the article).  I did all of this but it’s still not working. 
What could I be doing wrong?  Thanks for your time.

Clarification of Answer by wengland-ga on 07 Apr 2003 08:49 PDT

Ok - we're going to have to go back and forth on this a bit.  Please
ask for clarification of this answer to answer my questions.

First, are you getting any errors or other indications that anything
is wrong when  you attempt to connect to the internet via the

Second, are you able to connect to the internet via the NAT server?

Third, does the workstation obtain an IP address in the range you
specified? What are the settings shown by IPConfig or winipcfg?  if
you attemt to release and renew the IP address on the workstation with
IPConfig or winipcfg, what messages or errors do you get?

Fourth, are you able to connect via the network from the workstation
to any other shared resources on your internal network, like file
shares?  An easy test is to share out a folder on the NAT server with
full access permissions and see if you can map that folder from the
workstation.  I would suggest trying this with the NAT server
disconneced from the Internet.

Fifth, are you able to ping the NAT server from the workstation? 
Bring up a command prompt and type 'ping '.  What is the

Thank you for the answers to these questions.  This will help to
narrow down the nature of the problem.

Thank you,

Subject: Re: Small Network Setup
From: wengland-ga on 13 Apr 2003 07:30 PDT
johngl-ga -- have you had a chance to review my questions?  I would
like to help you get this working.



Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  

Google Home - Answers FAQ - Terms of Service - Privacy Policy