Voir la source de TB0323 Stuga On-Site Private Networking Net116

{{Tuto Details
|Description=<translate>Setting up external router for customer network isolation</translate>
|Categories=Software
|Tags=router, Network, IP
}}
<translate>= Technical Bulletin =
{| class="wikitable" border="0" cellspacing="0" cellpadding="0"
| width="106" valign="top" |'''TB Number:'''
| width="554" valign="top" |323
|-
| width="106" valign="top" |'''Originator:'''
| width="554" valign="top" |Gareth  Green
|-
| width="106" valign="top" |'''Machine:'''
| width="554" valign="top" |All
|-
| width="106" valign="top" |'''Date:''' 
| width="554" valign="top" |15/09/16
|-
| width="106" valign="top" |'''Circulate to:'''
| width="554" valign="top" |Service; Design; 

'''DO NOT FORWARD TO  CUSTOMERS WITHOUT PERMISSION FROM GMG'''
|-
| width="106" valign="top" |'''Title:'''
| width="554" valign="top" |Stuga  On-Site Private Networking “Net-116”
|}

== Overview ==
All customer internal networks are different, and Stuga Service have been having increasing problems with issues related to areas beyond our control. Problems include:

·      Loss of network connection to printer

·      Cannot connect to Drive D from MH to Saw on switch-on

·      Loosing batch directory connection

·      Crashing during program running

Root causes can be

·      IP address conflicts with iPhones and other random device

·      Security protocols on customer network

A solution to this is to put the Stuga devices in their own “ring-fenced” network, with their own range of IP addresses that the customer devices cannot use. To enable this, the Stuga network needs its own router (a box that generates its own IP address range), to act as bridge between customer network and Stuga network. This enables us to permanently fix the same IP addresses on every machine we produce. Another benefit is that a WiFi router can give our Staff instant internet access with the same password all the time. A pilot scheme has been launched on Z049 for Radley, despatched 15/09/16.

The new Router forms a bridge between the customer’s network and ours. This means the IP range on the customer side can be anything, yet on the Stuga side, the network range and IP addresses can be fixed tin the range 192.168.116.1 to 192.168.116.255. 

The following standard policy has been designed for IP addressing on the Stuga network. This standard allows multiple machines on the same network with up to 20 IP addresses for each machine.

192.168.116.axn

X is assigned as 1 for one machine, 2 for second machine, 3 for 3<sup>rd</sup>, etc. This is for multiple Stuga machines on the same site. Within this, the final digit is fixed for the device type on each machine:
{| class="wikitable" border="1" cellspacing="0" cellpadding="0"
| width="160" valign="top" |'''IP Address'''
| width="225" valign="top" |'''Device'''
| width="242" valign="top" |'''Example for Single Machine'''
|-
| width="160" valign="top" |'''192.168.116.001'''
| width="225" valign="top" |Router
| width="242" valign="top" |
|-
| width="160" valign="top" |'''192.168.116.0x1'''
| width="225" valign="top" |Camera PC
| width="242" valign="top" |192.168.116.11
|-
| width="160" valign="top" |'''192.168.116.0x2'''
| width="225" valign="top" |Main Machine PC
| width="242" valign="top" |192.168.116.12
|-
| width="160" valign="top" |'''192.168.116.0x3'''
| width="225" valign="top" |Second Machine PC (eg Saw)
| width="242" valign="top" |192.168.116.13
|-
| width="160" valign="top" |'''192.168.116.0x4'''
| width="225" valign="top" |Printer
| width="242" valign="top" |192.168.116.14
|-
| width="160" valign="top" |'''192.168.116.0x5'''
| width="225" valign="top" |Inverter / Brainbox device
| width="242" valign="top" |192.168.116.15
|-
| width="160" valign="top" |'''192.168.116.0x6 to'''

'''192.168.116.0x9'''
| width="225" valign="top" |Cameras
| width="242" valign="top" |192.168.116.16 to

192.168.116.19
|-
| width="160" valign="top" |'''192.168.116.1x0 to 192.168.116.1x9'''
| width="225" valign="top" |Future expansion (e.g. more cameras) 
| width="242" valign="top" |192.168.116.110
|}
'''Note: Leading Zeros are NOT required for most devices, only add it to the setup if the device needs it'''

== Router Set up schedule for Cisco RV215W ==
'''This is done at Stuga before sending the router to site'''

Goals:

·      Create a private Stuga network with ip range 192.168.116.xxx.

·      Set up router as a bridge between customer network and Stuga network

·      Create a secure wireless access point for Stuga Engineer use ONLY

·      Create a fixed, standard IP range for the Stuga machines
{| class="wikitable" border="1" cellspacing="0" cellpadding="0"
| width="66" valign="top" |'''1.       '''
| width="593" valign="top" |Find current DNS address of customer network  (cmd-> ipconfig /all. DNS Server address should be displayed)
|-
| width="66" valign="top" |'''2.       '''
| width="593" valign="top" |Connect  Router in between customer network and machine(s)
|-
| width="66" valign="top" |'''3.       '''
| width="593" valign="top" |Ensure a PC on Stuga side is set to DHCP to get an  IP address assigned
|-
| width="66" valign="top" |'''4.       '''
| width="593" valign="top" |Using  this PC, connect to the Router web page - Open Internet Explorer,  <nowiki>http://192.168.1.1</nowiki>
|-
| width="66" valign="top" |'''5.       '''
| width="593" valign="top" |Username cisco, password cisco
|-
| width="66" valign="top" |'''6.       '''
| width="593" valign="top" |On  wizard, click next to detect network, this will detect customer network
|-
| width="66" valign="top" |'''7.       '''
| width="593" valign="top" |Keep existing WAN connection setting (should be  Dynamic IP Address)
|-
| width="66" valign="top" |'''8.       '''
| width="593" valign="top" |Enter  time zone - GMT (England)
|-
| width="66" valign="top" |'''9.       '''
| width="593" valign="top" |Use Default MAC Address
|-
| width="66" valign="top" |'''10.  '''
| width="593" valign="top" |Enter  new password: Stuga001
|-
| width="66" valign="top" |'''11.  '''
| width="593" valign="top" |Enter Network Name: StugaWiFi
|-
| width="66" valign="top" |'''12.  '''
| width="593" valign="top" |Choose  "Better Security" and enter password: S.T.U.G.A.0.0.1

=== NOTE: This is now a WiFi network  for the use of Stuga staff ONLY – The password should not be given to anyone  else under ANY circumstances, as it will compromise the point of installing  this system ===
|-
| width="66" valign="top" |'''13.  '''
| width="593" valign="top" |Click Yes on WPS warning
|-
| width="66" valign="top" |'''14.  '''
| width="593" valign="top" |Log  back in to router
|-
| width="66" valign="top" |'''15.  '''
| width="593" valign="top" |Navigate to Networking->LAN->LAN  configuration
|-
| width="66" valign="top" |'''16.  '''
| width="593" valign="top" |Change  Local IP Address to 192.168.116.1
|-
| width="66" valign="top" |'''17.  '''
| width="593" valign="top" |Click Save, then Yes to restart
|-
| width="66" valign="top" |'''18.  '''
| width="593" valign="top" |Log  back in to router on <nowiki>http://192.168.116</nowiki>
|-
| width="66" valign="top" |'''19.  '''
| width="593" valign="top" |Set up each Stuga device IP addresses as per  standard policy (PCs, printers, cameras, etc)

'''Note: Leading Zeros are NOT required for most  devices, only add it to the setup if the device needs it'''

·        Default  Gateway should be 192.169.116.1

·        DNS  should be the original DNS setting from Step 1

·        Camera  recording NAS settings will need to be changed
|-
| width="66" valign="top" |'''20.  '''
| width="593" valign="top" |On  Stuga Windows 7, 8 or 10 PCs, make the new network a private network. 

a.      Open  Explorer and click on Network. 

b.      A  yellow bar should appear "Network discover and...". 

c.       Click  on it, Then click "Turn on network and file sharing". 

d.      Then  click "No, make the network that I am connected to a Private Network
|-
| width="66" valign="top" |'''21.  '''
| width="593" valign="top" |Remap any mapped drives:

·        D:  drive

·        Batches  folder on customer PC
|-
| width="66" valign="top" |22.   
| width="593" valign="top" |Ensure  Teamviewer connection works (This is usually an incorrect DNS address)
|}</translate>
{{PageLang
|SourceLanguage=none
|IsTranslation=0
|Language=en
}}
{{AddComments}}
{{Tuto Status
|Complete=Draft
}}