Date: Fri, 13 Aug 1999 11:09:54 +0100 From: Brian Somers <brian@FreeBSD.org.uk> To: "Andy V. Oleynik" <andyo@prime.net.ua> Cc: Brian Somers <brian@FreeBSD.org.uk>, freebsd-isp@FreeBSD.ORG Subject: Re: Problem with aliasing unregistered IPs on dialup server. Message-ID: <199908131009.LAA27283@keep.lan.Awfulhak.org> In-Reply-To: Your message of "Fri, 13 Aug 1999 11:48:40 %2B0300." <37B3DBE7.F575EF31@prime.net.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
You need to run the aliasing software on the external interface - in =
your case, either the external BoxB interface or have the client box =
run it.
Running it on the private interface of Box B doesn't work :-|
> Brian Somers wrote:
> =
> > >
> > > No, it knows. I can ping from client ppp server and other hosts res=
iding on
> > >
> > > the same ethernet in the same subnet can too . Also I can reach 10.=
0.0.1
> > > client from ppp server
> > > and these hosts. I understand that while ppp-server has direct rout=
e to the
> > > client and
> > > other hosts on the ether have this ppp-server as defaultrouter they=
can
> > > reach client.
> > > But hosts from outside this subnet, such as host that is defaultrou=
ter for
> > > my ppp-server
> > > doesnt know how to reach 10.0.0.0/24 hosts and they sends their rep=
leys to
> > > their
> > > defaultrouters - checked with tcpdump. And my question was why ppp =
doesnt
> > > alias the
> > > packets from unregistered networks. I think ppp have to works like=
natd in
> > > this case.
> > > I.e. every packet from unregistered have to be resent to destinatio=
n by ppp
> > > with its own addr.
> > > And answers have to be retransmitted to the client. Isnt it? What i=
s the
> > > reason of my failure?
> >
> > If you've got the following setup:
> >
> > ------- ------------- --------
> > 'net---| Box A |-- LAN --| Box B (ppp) |-----| Client |
> > ------- ------------- --------
> >
> =
> No, but similar:
> =
> _______
> ________
> INET------|BOXA|---PPP-leased-multi-line---|BOX B |---PPP-dialup--|Cli=
ent|
> ----------
> -------------
> On the BOXB ppp-server side I have aliasing with:
> alias enable yes
> alias unregistered_only yes
> BOXB have real IP. All the packets from Client go w/o aliasing through =
the BOXB
> outside the subnet.
> =
> >
> > You need to run the aliasing software on the 'net side of Box A and
> > make sure that Box A knows how to route to Client via Box B (10/24)
> > so that it makes everything look like it comes from itself when it
> > transmits to the 'net and so that it knows what to do with the
> > replies when it gets them back.
> >
> > My suspicion was that Box A didn't know how to route to Client via
> > Box B.
> >
> > If Box A can talk directly to Client, and Box A runs either natd or
> > ppp -alias on it's 'net interface, there should be no problem.
> >
> > > --
> > > WBW Andy V. Oleynik (When U work in virtual office
> > > prime.net.ua's U have good chance to obtain
> > > system administrator virtual money =C3%o)
> > > +380442448363
-- =
Brian <brian@Awfulhak.org> <brian@FreeBSD.org>
<http://www.Awfulhak.org>; <brian@OpenBSD.org>
Don't _EVER_ lose your sense of humour ! <brian@FreeBSD.org.uk>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908131009.LAA27283>