Date: Fri, 13 Aug 1999 09:03:23 +0100 From: Brian Somers <brian@FreeBSD.org.uk> To: "Andy V. Oleynik" <andyo@prime.net.ua> Cc: Brian Somers <brian@FreeBSD.org.uk>, freebsd-isp@FreeBSD.ORG Subject: Re: Problem with aliasing unregistered IPs on dialup server. Message-ID: <199908130803.JAA00498@keep.lan.Awfulhak.org> In-Reply-To: Your message of "Thu, 12 Aug 1999 23:09:54 %2B0300." <37B32A12.6369EC44@prime.net.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
> Brian Somers wrote:
> =
> > >
> > > Hi everybody,
> > >
> > > I'm trying to configure dialup ppp server to
> > >
> > > assign unregistered IP to dialup clients.
> > >
> > > Before begining this process clients was assigned
> > >
> > > real IPs per ttyd* basis. All the changes I made
> > >
> > > was entry for one of the clients in ppp.secret like this:
> > >
> > > testclient * 10.0.0.1 *
> > >
> > > to override "set iffaddr" statements in ppp.conf's profiles
> > [.....]
> >
> > Sounds like your Internet gateway doesn't know how to route 10.0.0.1
> > to your ppp server.
> >
> =
> No, it knows. I can ping from client ppp server and other hosts residin=
g on
> =
> the same ethernet in the same subnet can too . Also I can reach 10.0.0.=
1
> client from ppp server
> and these hosts. I understand that while ppp-server has direct route to=
the
> client and
> other hosts on the ether have this ppp-server as defaultrouter they can=
> reach client.
> But hosts from outside this subnet, such as host that is defaultrouter =
for
> my ppp-server
> doesnt know how to reach 10.0.0.0/24 hosts and they sends their repleys=
to
> their
> defaultrouters - checked with tcpdump. And my question was why ppp does=
nt
> alias the
> packets from unregistered networks. I think ppp have to works like nat=
d in
> this case.
> I.e. every packet from unregistered have to be resent to destination by=
ppp
> with its own addr.
> And answers have to be retransmitted to the client. Isnt it? What is th=
e
> reason of my failure?
If you've got the following setup:
------- ------------- --------
'net---| Box A |-- LAN --| Box B (ppp) |-----| Client |
------- ------------- --------
You need to run the aliasing software on the 'net side of Box A and =
make sure that Box A knows how to route to Client via Box B (10/24) =
so that it makes everything look like it comes from itself when it =
transmits to the 'net and so that it knows what to do with the =
replies when it gets them back.
My suspicion was that Box A didn't know how to route to Client via =
Box B.
If Box A can talk directly to Client, and Box A runs either natd or =
ppp -alias on it's 'net interface, there should be no problem.
> --
> WBW Andy V. Oleynik (When U work in virtual office
> prime.net.ua's U have good chance to obtain
> system administrator virtual money =C3%o)
> +380442448363
-- =
Brian <brian@Awfulhak.org> <brian@FreeBSD.org>
<http://www.Awfulhak.org>; <brian@OpenBSD.org>
Don't _EVER_ lose your sense of humour ! <brian@FreeBSD.org.uk>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908130803.JAA00498>