Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Aug 1999 09:03:23 +0100
From:      Brian Somers <brian@FreeBSD.org.uk>
To:        "Andy V. Oleynik" <andyo@prime.net.ua>
Cc:        Brian Somers <brian@FreeBSD.org.uk>, freebsd-isp@FreeBSD.ORG
Subject:   Re: Problem with aliasing unregistered IPs on dialup server. 
Message-ID:  <199908130803.JAA00498@keep.lan.Awfulhak.org>
In-Reply-To: Your message of "Thu, 12 Aug 1999 23:09:54 %2B0300." <37B32A12.6369EC44@prime.net.ua> 

index | next in thread | previous in thread | raw e-mail

> Brian Somers wrote:
> 
> > >
> > > Hi everybody,
> > >
> > > I'm trying to configure dialup ppp server to
> > >
> > > assign unregistered IP to dialup clients.
> > >
> > > Before begining this process clients was assigned
> > >
> > > real IPs per ttyd* basis. All the changes I made
> > >
> > > was entry for one of the clients in ppp.secret like this:
> > >
> > > testclient    *    10.0.0.1    *
> > >
> > > to override "set iffaddr" statements in ppp.conf's profiles
> > [.....]
> >
> > Sounds like your Internet gateway doesn't know how to route 10.0.0.1
> > to your ppp server.
> >
> 
> No, it knows. I can ping from client ppp server and other hosts residing on
> 
> the same ethernet in the same subnet can too . Also I can reach 10.0.0.1
> client from ppp server
> and these hosts. I understand that while ppp-server has direct route to the
> client and
> other hosts on the ether have this ppp-server as defaultrouter they can
> reach client.
> But hosts from outside this subnet, such as host that is defaultrouter for
> my ppp-server
> doesnt know how to reach 10.0.0.0/24 hosts and they sends their repleys to
> their
> defaultrouters - checked with tcpdump. And my question was why ppp doesnt
> alias the
> packets from unregistered networks. I think  ppp have to works like natd in
> this case.
> I.e. every packet from unregistered have to be resent to destination by ppp
> with its own  addr.
> And answers have to be retransmitted to the client. Isnt it? What is the
> reason of my failure?

If you've got the following setup:


          -------           -------------       --------
  'net---| Box A |-- LAN --| Box B (ppp) |-----| Client |
          -------           -------------       --------

You need to run the aliasing software on the 'net side of Box A and 
make sure that Box A knows how to route to Client via Box B (10/24) 
so that it makes everything look like it comes from itself when it 
transmits to the 'net and so that it knows what to do with the 
replies when it gets them back.

My suspicion was that Box A didn't know how to route to Client via 
Box B.

If Box A can talk directly to Client, and Box A runs either natd or 
ppp -alias on it's 'net interface, there should be no problem.

> --
> WBW  Andy V. Oleynik            (When U work in virtual office
> prime.net.ua's                   U have good chance to obtain
> system administrator             virtual money Ã%o)
> +380442448363

-- 
Brian <brian@Awfulhak.org>                        <brian@FreeBSD.org>
      <http://www.Awfulhak.org>;                   <brian@OpenBSD.org>
Don't _EVER_ lose your sense of humour !          <brian@FreeBSD.org.uk>




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908130803.JAA00498>