OpenAccess Network Services
Get connected... Stay connected...

SpeedTest | MyAccount | WebMail | Tech Bulletin
    Internet     Hosting     Telephone     Security     Support     Company     Community    
Support  > Multi Tenant  > Simple & Secure 

Multi Tenant NAT/Firewall and DHCP

OpenAccess Multi Tenant service defaults to a Secure and Simple configuration. This configuration is optimized for small offices so you can simply move in, setup your computers and get to work. Our First Line firewall service is built-in. This gives you a reliable layer of protection against threats on the Internet and no time, trouble or expense installing a firewall. In fact, we recommend not using a firewall or router behind the default services because it creates system complications.

If you intend to provide services to the Internet, i.e., running your own web server, mail server or to make extensive use of VPN connections to branch offices or for telecommuters, then our First Line firewall can get in the way. Please contact us if this is the case. We can assign you a block of static IP addresses to work around the standard Secure and Simple configuration.

If the Secure and Simple configuration is the answer for you (as for most small business customers), then read the following:

1. Your office is behind NAT (Network Address Translation). NAT provides you with the Secure part of the Secure and Simple configuration. This means that the IP subnet in your office will be 192.168.V.0/24, where 'V' depends on the office suite you are in.

2. Our First Line firewall provides you with DHCP (Dynamic Host Configuration Protocol) services. DHCP is the Simple part of the Secure and Simple configuration. You plug in your computer and set it to 'DHCP' or 'Automatic' in the network settings and you are instantly on the Internet, hassle-free.

3. Each office suite using our NAT/Firewall/DHCP services has some basic and simple guidelines regarding how the 192.168.V.0/24 subnet is used.

192.168.V.1 is always the default gateway. The default gateway is the router that provides the 'gateway' between your computers and the rest of the Internet. Do not assign this address to a computer or device.

192.168.V.2 is always a 1:1 NAT mapping to a real 'static IP' address. If you need a static IP address to do a few things, like run a mail server for a small staff, then the simplest way is to set the mail server to use this IP address. That server will then be fully available on the Internet. Be sure to do a security audit on it!

192.168.V.3-127 are addresses completely blocked from the Internet. These are the IP addresses you will use for devices that need fixed IP addresses but no Internet access, like printers or file servers, so that your workstations can always find it, but you don't want it on the Internet.

192.168.V.129-222 is the DHCP range that our server leases out. When you first plug in a workstation with it set to 'Automatic' or 'DHCP' it will request an IP address and our server will assign it one in this range. usually the first computer plugged in gets 192.168.V.222, the next 192.168.V.221 and so on.

192.168.V.225-254 is configured for outbound access and is the DHCP range that our server leases out. When you first plug in a workstation with it set to 'Automatic' or 'DHCP', it will request an IP address and our equipment hands it one in this range. Usually the first computer plugged in gets 192.168.V.254, the next 192.168.V.253 and so on.

A couple qiuck tips on what not to do...

NEVER assign the 192.168.V.2 address to a computer that you are not 100% sure is completely secure, and you do not have the time and resources to keep secure. It will be completely open to the Internet and hackers.

NEVER assign a printer or other device an IP address in the DHCP range. Although our DHCP servers are pretty smart, it is possible the server will not recognize that your device is assigned the address and assign it to one of your workstations also. Then neither device will be able to connect to the network.

If the above information is a little overwhelming and you're not sure about something, please call us.

For help to set up a VPN, a file server, an Exchange server or anything within your own network, consult an office network specialist. You can find a short list of local Office Network firms on the Partners section of our website.

Whats New?

2010.11.01 Digital telephone & PBX services expanded
Over the summer of 2010 OpenAccess has rolled out digital telephone service for ourselves, affiliated companies and a few customers who were willing to be 'guinea pigs'.  Overall things went better than we expected and we are now opening up our digital telephone service plans to more customers.

2010.10.21 IPv6 Transition
OpenAccess will be having a mid range time line for adoption and implementation of IPv6.  As most people know who are reading this, there is a certain 'chicken & egg' problem with IPv6 in as much for any organization to move to IPv6 requires that other organizations have moved to IPv6.

2010.07.15 NAS.COM wholesale VPS and WebHosting services
This fall, OpenAccess will be re-purposing the '' domain name to provide VPS and WebHosting services, primarily wholesale to web developers. If you have an e-mail address, or a personal website located at, those services will continue be supported although we will not be accepting new accounts.

2010.02.22 Joomla auto install wizard now available.
Due to popular request, we now have a Joomla auto-installer available on our newer cPanel® servers.  This allows customers to quickly and easily install Joomla on their website.  The auto-installer is available under the 'site software' section in the administrative interface of your webhosting account.

2009.10.25 OpenAccess begins internal testing for Windows 2008 Server hosting solutions.
OpenAccess is happy to finally be able to announce that we are beginning internal testing of cPanelŽ/Enkompass as a platform for our customers to be able to deliver Windows(c) 2008 Server solutions on.

2007.09.26 Changes in paper billing system.
Effective January 1st 2008 we will be doing what most of our competitors have been doing for years and adding a $1.00 surcharge for paper invoices.

2007.05.30 New web servers in production.
In May we got two new web servers in production. These machines are based out of our facilities in Seattle and were needed as we have about hit capacity on our existing webhosting infrastructure.

2007.03.15 Additional nationwide and global network capacity added.
OpenAccess is glad to announce that we have put into production a new circuit providing us with direct Tier-1 nationwide and global Internet transport.

2007.01.17 Verizon DSL speed upgrades complete
Today we did the work to convert all NAS.COM customers over to our faster connection into Verizon. Everybody should be seeing performance increases.

More News...

(c) 1998-2012 OpenAccess Network Services
P.O. Box 4220, Bellingham, WA 98227
Bellingham/Whatcom (360) 647-0785 Toll Free: (800) 882-4979

OpenAccess is now part of the family.