It doesn't matter one bit.  192.x.x.x and 10.x.x.x are private only that
they are non-routable address ranges.  That means by design, any packet with
a 10 or 192 header dropped on the internet will go nowhere.  Which is why
everyone can use them in their internal LAN without needing to reserve
unique ranges.  It also makes for great security, because in the event that
some of your internal LAN traffic does get on the net nobody can do anything
with it.

So changing from 192 to 10 ranges is really only cosmetic.  But if you are
intent on doing it, it shouldn't be too hard.  If you are using your router
as a DHCP server, then you should be able to change this fairly simply.
Somewhere in the router settings should be the ability to specifcy what
address range the router gives out.  Not all routers wil probably support
this, but I think most will.

If your router doesn't support it, or if you are using static IPs, then just
go to each machine and give it a unique 10.x.x.x address.  But make sure you
get them all, otherwise anything left on the old 192 range won't be ablet to
communicate.

For more info, see this page:

http://en.wikipedia.org/wiki/IP_address#IPv4_private_addresses

Or check out the audio/transcript of Security Now! Epsiode 108:

http://www.grc.com/sn/SN-108.htm

---------------------------
Brian Weeden
Technical Consultant
Secure World Foundation <http://www.secureworldfoundtion.org>
+1 (514) 466-2756 Canada
+1 (202) 683-8534 US


On Mon, Apr 6, 2009 at 7:28 PM, DHSinclair <dsinc...@bellsouth.net> wrote:

> I wish to change the IP series I use on my home LAN.
> Yes, I believe I know what this involves, but am willing to read alternate
> thoughts.
> For the past 2 yrs I have been using 192.168.x.x
> I with to go back to 10.x.x.x.
>
> I get way too much external FUTZ trying to get into 192.168.x.x.  Perhaps I
> read my logs wrongly.
> Perhaps.  To me, I would like to stop using the [private] series used by
> most all of the commercial equipment suppliers.
> Please. Rain on my parade!
> Thank you,
> Duncan
>
>

Reply via email to