How to setup IP range given by ISP?

Assuming you are given 10.1.1.0/28 by your ISP, (used 0 to save calculation overhead :)) with gateway as 10.1.1.1 and broadcast 10.1.1.15 and netmask as 255.255.255.240. You can give IP address 10.1.1.2 (the first available IP to router) and set default route of router to the gateway, that is 10.1.1.1. This would allow router to access internet. Trying pinging IPs like 4.2.2.2 from router and you should be able to see response.

Once that is done you can configure NAT on router so that requests for IP 10.1.1.2 get forwarded to internal IP of the server.

This is too vague you would have to learn how to do above things

It sounds like you're looking to use one of your static IPs as the main public IP that outbound Internet traffic for your office uses, and then map a separate one of your public static IPs for use by the server? If that is the case, you'll just want to create a "one-to-one" NAT entry in the firewall. Using the emulator link you provided, it would be under the Setup -> One-to-One NAT. This basically associates one of the external IPs to an internal IP address.

Assuming your ISP is providing you a "bridged" connection (so that you can assign the public IP info directly to your firewall), you'll basically plug in the IP info into your firewall. Assuming you can access the Internet, the router will typically route all traffic outbound via the IP address you assign to it. If you have one-to-one NAT enabled, those hosts should communicate via a secondary IP.

Does that answer your question?

Well first the router is going to need an IP address, so you should configure it for a static IP.

I would recommend you keep NAT going for security reasons, and then if you need to forward outside traffic, set up a pinhole through NAT. Your router should let you map IP's to inside NAT addresses if you need multiple services (like RDP) going to multiple clients.

Otherwise you would set up the router just as a gateway and either set up DHCP to assign those addresses out or set up internal static IP's on the machines with the router as the gateway.

Are these bits of a Cisco config of any use to you at all?

!
ip dhcp pool <pool name>
   import all
   network 10.0.0.0 255.255.0.0
   dns-server <dns servers>
   default-router 10.0.0.1
   lease 0 2
!
!
ip domain lookup source-interface Dialer0
ip name-server <ns1>
ip name-server <ns2>
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode ansi-dmt
!
interface ATM0.1 point-to-point
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
!
interface Dot11Radio0
 no ip address
 ip nat inside
 ip virtual-reassembly
 !
 ssid <wireless name>
    vlan 10
    authentication open
    guest-mode
 !
 speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
 no cdp enable
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 ip address 10.0.0.1 255.255.0.0
 ip nat inside
 ip virtual-reassembly
 no cdp enable
!
interface Dialer0
 ip address negotiated
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname <chap username>
 ppp chap password 7 <chap password>
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip nat pool NAT_GROUP <starting IP> <ending IP> netmask 255.255.255.240
ip nat inside source list 10 pool NAT_GROUP
!
access-list 10 permit 10.0.0.0 0.0.255.255
dialer-list 1 protocol ip permit

This is the config used for an ADSL router that has been allocated a bunch of public IP addresses. These addresses are then NAT'ed 1:1 to an address within the 10.0.0.0/16 range on the wireless interface

This may, or may not, give you something to start with. Not knowing the make of router in use, it's hard to tell :)

From your question it looks like you are not 100% familiar with IP addressing. (Or I did get you wrong.)

You got only one network from your ISP. So those IP addresses have to be within the same Layer 2 domain. But what you want is to have different networks. Like this:

internal network -> Firewall -> external network 1 -> Router -> external network 2 -> Internet

The external network 2 is the one provided by the ISP.

If you want to put the firewall within this network then you have to place a switch in front of the router. And connect the firewall directly to it. But then is the question why you still need the router.

If you want to have the router in there you will need to either use NAT (to hide external network 1, which will then become an internal network) or you have to ask you ISP to give you a second IP range.

To clarify my wordings:
internal network = private IP addresses/range
external network = public IP addresses/range

And the last question: With firewall do you mean the server you are mentioning later? Or how many devices should have public IP addresses at the end?

i have a simple sloution

if you are given a pool of 8 ips, six of them are useable for you, like if u r given xxx.xxx.xxx.76-xxx.xxx.xxx.83 xxx.xxx.xxx.76 and xxx.xxx.xxx.83 are not useable for u.

if u have a ppoe connection with isp...configure ur router like this

connection type: PPOE username: xxxxxxxxxxx Password: xxxxxxxxxx

LAN Configuration

LAN IP: xxx.xxx.xxx.77 Subnetmask: xxx.xxx.xxx.xxx

DHCP: Disabled

now take a wire out from ur router and insert it in a lan card of ur server and gv that lan card ip IP xxx.xxx.xxx.79 Subnet: xxx.xxx.xxx.xxx Gateway: xxx.xxx.xxx.77 DNS: xxx.xxx.xxx.77 DNS2: (ur isp's DNS) if required

same ur can use ur rest of ips.......if ur like.....