Another Small Business Server Sharing Bandwidth

[Will]

We currently run small business server 2000. We have a
leased T1 line for internet access and wish to resell a
portion of this access to a completely seperate company
that resides on a nearby property using a wireless link.

Since small business server can be the only DC on a
network, would there be any problems if I mapped one of
our public IP address to the WAN end of a router in their
facillity? They will be using SBS 2003 in the near future.

Like I said befoe, we are completely different companies
and I do not want any direct communications between our
networks.

Do I need to place a firewall or something between us and
them in addition to the router to ensure that our Active
Directories do not conflict or mix?

 

[Leythos]

We currently run small business server 2000. We have a
leased T1 line for internet access and wish to resell a
portion of this access to a completely seperate company
that resides on a nearby property using a wireless link.

Since small business server can be the only DC on a
network, would there be any problems if I mapped one of
our public IP address to the WAN end of a router in their
facillity? They will be using SBS 2003 in the near future.

Like I said befoe, we are completely different companies
and I do not want any direct communications between our
networks.

Do I need to place a firewall or something between us and
them in addition to the router to ensure that our Active
Directories do not conflict or mix?

I'm going to HOPE that you have some form of NAT between your router/T1
and your internal network.

With that in mind, I do what you are thinking all the time. We have a 4
port CISCO router that provides our public connection, that connection
it taken to 4 firewalls and blocks of our public IP's are assigned to
each firewall. The firewalls isolate each other and also provide the
base security for all of the networks.

You could do the same - assign a single IP to a cheap NAT router and
then provide them with the connection. Do not let them have the password
to the NAT router.

 

[Cary Shultz [A.D. MVP]]

Will,

Leythos answered your question but I would like to point something out if
you do not mind.

In a SBS2000 environment the SBS2000 Domain Controller does indeed need to
be the first DC in the environment. However, you can have additional DCs in
that environment. You would simply add an additional DC to an existing
domain.

There can be no trusts in a SBS2000 environment. With one exception: If
you have a SBS2000 environment I believe that you can have a temporary trust
to a SBS2003 environment for purposes of migrating user, computer and group
accounts. I believe that 14 days is the time span. But, this is obviously
for a very specific purpose.

HTH,

Cary