Forum Moderators: phranque

Message Too Old, No Replies

Creating multiple IPs against 1 webserver

I'll try again, clearer this time

         

txbakers

4:49 am on Sep 22, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I want to install SSL Certificates for my various websites on IIS/W2K.

I know that.....
1) Each domain needs its own static IP address.
2) I point the A records of the domain to the new IP.
3) My router/firewall currently only allows 1 WAN IP. (209.)
4) Behind the firewall, I route port 80 requests to my webserver with one internal IP address (192.)
5) Various websites are set up with host headers on IIS.
6) Can't use host headers with SSL Certs.
7) Webserver only has 1 static Internal IP address.
8) Webserver still needs to be behind firewall.

What do I do and *how* do I do it?

Thanks.

IanTurner

8:48 am on Sep 22, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



The easiest solution is probably going to be to get more WAN IP Addresses assigned to you and obtain a better router.

However there may be a way if you running a DNS server on the machine itself?

txbakers

1:42 pm on Sep 22, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks Ian, I'm not running a DNS server. I have my domains parked at a large space, and just modify the Zone files as needed.

Both items you mentioned are doable, but I can't figure out the last part - still having 1 server/box with multiple shared sites, but using IP addresses and not hostnames.

The IP address that appears in the dropdown box when I set up a new site is the static internal IP of the server itself.

I don't see a way, in IIS, to "install" new IP addresses for that machine.

txbakers

6:20 pm on Sep 22, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I think I found it.

It's in the TCP/IP configurations for the machine. Nothing to do with the webserver itself.

And I will need to get a better firewall/router. A friend recommended the Cisco pix 501.

That way I can have multiple externals, route them to individual internals, and have my SSL Certs.

I'll let you know if I get it all put together......

IanTurner

10:21 pm on Sep 22, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I know its possible to get multiple IP addresses in the hostname dropdown as I have it running on one of my servers, unfortunately I didn't set it up myself.

If you don't find the solution by the end of the week I will look into it in more detail.

txbakers

2:09 pm on Sep 23, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hi Ian, it was very simple after all. I added the additional IPs to my server, they are in the drop down, and the new Cisco PIX Firewall is on the way......

My first Cisco...

bakedjake

2:12 pm on Sep 23, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



My first Cisco...

Which one did you buy, tx? They're neat beasts. Give a shout if you have any issues setting it up. I used to do that in my former life. :)

txbakers

3:24 pm on Sep 23, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



pix 501. Got a good price on EBay, should arrive in a few days.

I'm installing SSL Certs on my main sites and needed to learn how to deal with multiple IP addresses and my Linksys router/firewall just won't do that any more....