IP numbering on private networks

For stakes that are interested in creating a building-to-building private IP network, how should we assign IP addresses? Currently certain buildings have an internet connection and others do not. For those that do a 10.x.x.* range is assigned on the VPN that is unique to that building and accessible only behind the Pix firewall. Should we follow this same numbering scheme or create our own?

Buildings that don't have IP access on their own might still need to be used as repeater sites for a private network, which would bring them IP connectivity where it doesn't already exist. Should this network be behind the Pix firewalls? Or should it ride on the outside? What if we wanted to plug a computer in at the in-between buildings with no inherent IP access? Would we need to purchase another Cisco Pix?

-Jeff

You probably should request additional networks through the appropriate channels for provisioning them. Adding non-managed networks which the Church is not aware of is a potential security/networking problem waiting to happen.

lakeytw wrote:You probably should request additional networks through the appropriate channels for provisioning them. Adding non-managed networks which the Church is not aware of is a potential security/networking problem waiting to happen.

Yes, before adding additional machines, please work through CHQ.

Tom

Are you trying to create a network between buildings or just get internet access to each building?