OpenAccess Multi Tenant service defaults to a Secure and Simple configuration. This configuration is optimized for small offices so you can simply move in, setup your computers and get to work. Our First Line firewall service is built-in. This gives you a reliable layer of protection against threats on the Internet and no time, trouble or expense installing a firewall. In fact, we recommend not using a firewall or router behind the default services because it creates system complications.

If you intend to provide services to the Internet, i.e., running your own web server, mail server or to make extensive use of VPN connections to branch offices or for telecommuters, then our First Line firewall can get in the way. Please contact us if this is the case. We can assign you a block of static IP addresses to work around the standard Secure and Simple configuration.

If the Secure and Simple configuration is the answer for you (as for most small business customers), then read the following:

1. Your office is behind NAT (Network Address Translation). NAT provides you with the Secure part of the Secure and Simple configuration. This means that the IP subnet in your office will be 192.168.V.0/24, where 'V' depends on the office suite you are in.

2. Our First Line firewall provides you with DHCP (Dynamic Host Configuration Protocol) services. DHCP is the Simple part of the Secure and Simple configuration. You plug in your computer and set it to 'DHCP' or 'Automatic' in the network settings and you are instantly on the Internet, hassle-free.

3. Each office suite using our NAT/Firewall/DHCP services has some basic and simple guidelines regarding how the 192.168.V.0/24 subnet is used.

192.168.V.1 is always the default gateway. The default gateway is the router that provides the 'gateway' between your computers and the rest of the Internet. Do not assign this address to a computer or device.

192.168.V.2 is always a 1:1 NAT mapping to a real 'static IP' address. If you need a static IP address to do a few things, like run a mail server for a small staff, then the simplest way is to set the mail server to use this IP address. That server will then be fully available on the Internet. Be sure to do a security audit on it!

192.168.V.3-127 are addresses completely blocked from the Internet. These are the IP addresses you will use for devices that need fixed IP addresses but no Internet access, like printers or file servers, so that your workstations can always find it, but you don't want it on the Internet.

192.168.V.129-222 is the DHCP range that our server leases out. When you first plug in a workstation with it set to 'Automatic' or 'DHCP' it will request an IP address and our server will assign it one in this range. usually the first computer plugged in gets 192.168.V.222, the next 192.168.V.221 and so on.

192.168.V.225-254 is configured for outbound access and is the DHCP range that our server leases out. When you first plug in a workstation with it set to 'Automatic' or 'DHCP', it will request an IP address and our equipment hands it one in this range. Usually the first computer plugged in gets 192.168.V.254, the next 192.168.V.253 and so on.

A couple qiuck tips on what not to do...

NEVER assign the 192.168.V.2 address to a computer that you are not 100% sure is completely secure, and you do not have the time and resources to keep secure. It will be completely open to the Internet and hackers.

NEVER assign a printer or other device an IP address in the DHCP range. Although our DHCP servers are pretty smart, it is possible the server will not recognize that your device is assigned the address and assign it to one of your workstations also. Then neither device will be able to connect to the network.

If the above information is a little overwhelming and you're not sure about something, please call us.

For help to set up a VPN, a file server, an Exchange server or anything within your own network, consult an office network specialist. You can find a short list of local Office Network firms on the Partners section of our website.