Hi There This is my basic setup: Internet || Linksys Router ip 41.xx.xxx.xx || Windows 2008 server ip 41.xx.xxx.xx domain.local || 3Com 24port gigabyte switch || 12 LAN PC's using dhcp & one windows 2008 server with terminal service using IP 41.xx.xxx.xxx I have a very basic windows 2008 server with a public static ip assigned from a block of 5 assigned from my isp. I have used two of these addresses one on the router and one on the server wan card for internet connectivity. Now I want to use a second public IP inside a domain on a second server for terminal services which needs to be accessible from the internet. Everytime I put in the next available ip it does not want connect. Please could someone tell me the right way to set this up, Ive tried so many different variations with ip addresses. Thanks Cathy

You will most likely need to change your network design. There is information missing in your description that would help in providing advice... You mentioned that you have 5 public IPs, but your diagram shows a 41.x.x.x address on your public interface and your internal nodes? Why do you have public IPs configured on your internal LAN? Also, the Windows 2008 server shows connected to the router and also your internal LAN? Are you intended for this server to act as a router also? If so, did you configure RRAS? A better approach is probably to create a DMZ zone and move all of the publicly accessible resources into that zone. The rest of your hosts should be behind a private LAN. Here is an example of a network with a DMZ/Private LAN. Visit: anITKB.com, an IT Knowledge Base.

I cant go with that setup I only have one very small very basic router. I have two network cards on the main server one for the lan for our internal network card utilising 192.168.0.254/24 and the second for the WAN which connects to the router using 2 of my 5 ip's RRAS has been configured on this server. What I was hoping was that I could just input one of my public ip's on the server no the lan and point it to the existing server. Ive seen it done before I just cant remember how it was done?

Ok, for that scenario, you need to install RRAS on the server and configure NAT. In the RRAS configuration, you'll need to create an inbound rule which maps one of hte public IPs to the private IP. You can do a one to one relationship by IP, or you can do this by port, or a combination. This is going to depend on what you are trying to accomplish. In all scenarios for this design, RRAS/NAT is required on the server. There are security concerns you should be thinking about with this design. Visit: anITKB.com, an IT Knowledge Base.

Hi Cathyb569, Thanks for posting here. Yes I agree with JM, this is a typical scenario that you should deploy NAT and set address or port mapping for publishing internal service to external through NAT: NAT Example http://technet.microsoft.com/en-us/library/dd469842(WS.10).aspx Please also take look the articles below, it is also applied to Windows server 2008: Configuring Access to Services Behind a Network Address Translator (NAT) http://technet.microsoft.com/en-us/library/bb878046.aspx Thanks. Tiger Li Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Cathy, Based on your description, the more appropriate design would be something like this... Visit: anITKB.com, an IT Knowledge Base.