DHCP Server conflict - SBS2011 v. Router

I’m hoping to find a relatively simple networking solution for the following scenario: I’m setting up SBS 2011 in a new office. From what I understand, SBS 2011 needs to be the network DHCP server for everything to run “well” under Active Directory. The conflict is with a FIOS router, that also “needs” to be the DHCP server in order to communicate with a set-top box (MOCA bridge.) Verizon lists a handful of network configurations with multiple routers that might work, although completely unsupported. Is it possible for router, SBS2011, and set-top box to coexist in harmony on the same network (preferably keeping DHCP server on the SBS box)?

if you router and switch supports it use vlans. Have a different dhcp scope be controlled by your sbs 2011 that does the AD stuff......then just have the default / gateway route go to 192.168.1.1 (default vlan that the FIOS router DHCP's to....)

That's what I would do

Thanks for the suggestion Soldier, I don't have much experience with vlans, but I get the idea. If I understand correctly, you suggest both router and SBS can be DHCP servers, using different scopes. From what I've read, that doesn't work because the SBS DHCP server will automatically shut down if it detects any other DCHP server on the network; SBS won't check that the scopes are compatible, it will just turn off.

That is where the vlans come in. the SBS DHCP will not see the other DHCP due to the vlans (they allow segmentation as if the devices are on 2 separate networks. From there you just tell the vlan to use the router as the default gateway via a trunk port.

Again though, you need at the minimum a layer 3 switch or a switch that supports vlans being used in combination with a router that is configured with the proper sub interfaces etc...

Now that's interesting - I wasn't aware of the segmentation feature. So I would configure 2 separate vlans in this scenario (assuming I have the capable hardware)?

Less money...and you will benefit from more advanced features...to get your own business grade router, and stick in the DMZ plus mode of the Verizon unit..thus your own router pulls the public IP address and you can do port forwarding and stuff...and you effectively separate the two networks. You want your own business grade router...because to put it bluntly..the "router/firewall" that Verizon gives you is more useless than used toilet paper.