Configure BT Infinity Static IPv4 on Draytek Router



  • Stacks Image 2835
    Image slide caption
  • Stacks Image 2836
    Image slide caption
  • Stacks Image 2837
    Image slide caption
If you need to setup a DrayTek, or similar router, where you have BT static IP addresses, and you want to assign those static dresses directly to you servers, endnote use post redirection, then continue reading to see how it can be done.

Note: You might want widen the window size to fit in the large images used below.

Stacks Image 4355
For the purpose of this example I will be using the following addresses:
  • Network Address (Subnet Id): 213.33.10.8
  • Subnet mask: 255.255.255.248
  • LAN Router adress: 213.33.10.14
  • Usable IPs: 213.33.10.9 - 213.33.10.13
You need to replace the above IP addresses (213.33.10.x) with he ones you got from BT. The CIDR for the above is 213.33.10.8/29.

It is possible to use some of the public IP’s on the DrayTek, and the others devices. For example if you 5 usable static IP addresses, you can use 3 static IPs on the DrayTek (and using port redirection), and the remaining 2 static IPs on 2 other devices. The example here does not follow that and use all 5 static IP’s on public servers *.example.com.

1. Connect the WAN


Stacks Image 4384
Login onto the Draytek router (Usually at http://192.168.1.1) , select
  • WAN
  • General setup
  • WAN1
Configure your settings as in the image and
  • Click OK


Stacks Image 4429
On the left pane, select
  • WAN
  • Internet Access
On the right pane
  • WAN1 Index
Configure like in the image. Do not assign your BT static IP addresses in WAN IP Alias.
  • Click OK


2. Setup and enable the IP Routed Subnet


Stacks Image 4474
On the left pane, select
  • LAN
  • General Setup
On the right pane
  • Tick “IP Router Subnet”
  • Click “Details Page”


Stacks Image 4503
  • Still on the right pane
  • Setup the DHCP Server for the static IP sorted subnet as this image
You can either assign the static IP via LAN port or MAC Address. I choose the MAC address option to fix and server to an IP. Enter the MAC addresses of the network adaptors you want to get the BT static IPs. For the moment the “given IP address” should be clear as the subnet has not been created.
  • Click OK
The router will reboot.



Stacks Image 4516
Once rebooted the BT static network IPs should be assigned. The IP address of WAN1 (associated with the VDSL connection) should display you network address (Subnet Id), which I marked sharp green colour. If you choose to use the BT Openreach modem, the lights for the WAN2 parts on the DrayTek will be on/green.

3. Assign BT Static Public IPs to a MAC


Stacks Image 4529
On the left pane, select
  • LAN
  • Bind IP to MAC
and enter MAC address with corresponding BT static public IP (i.e. 213.33.10.9 - 213.33.10.13). The example below the corresponding entry for index 1 in the DHCP Server Configuration section of the “LAN -> General Setup”. Reboot the devices and you the DHCP server should now assign the Public IPs and subnet routing info the the network adaptors of the servers.

On the right pane
  • Click OK


4. LAN DNS Forward


Stacks Image 4574
In my network diagram you will have notices that I have a server with two network adaptors, one I assign to the WAN (a BT Static Public IP) in order to *ONLY* serve requests from other public addresses/Internet and then the second adaptor will serve *ONLY* private IP addresses ( 196.168.1.x) on the LAN. In order for private LAN network adaptors (with an IP 196.168.1.x) to redirect traffic to 196.168.1.11, instead of 213.33.10.13, without the need to change software settings from server5.example.com to server5.local we configure DrayTek to act as LAN DNS :
On the left pane, select
  • Application
  • LAN DNS / DNS Forwarding
On the right pane
  • Assign the LAN DNS entries
  • Click OK
Once done, pinging (or DNS lookup) server5.example.com within the private LAN, would redirect traffic to 192.168.1.11. When outside the LAN say at your favourite coffee shop, client or home, pinging (or DNS lookup) for server5.example.com will yield 213.33.10.13.

5. Firewall: a note

If you use the setup as above, you need to be sure you have setup and configured a firewall. I use UFW as another layer after the DrayTek firewall. Some administrators will be religiously against the above setup and will rather use port forwarding/redirection. You might have noted I use both Web content filter and APP Enforcement in my setup.