IP Pool and Gateway of Total Control
Dear All I need to set public IP address on hiper arc interface and private IP address pool , but when configured it the user connect to system couldn't browse internet. for example the setting is as below : Hiper ARC interface IP address : 212.200.200.10 Default Gateway : 212.200.200.1 IP Pool : 192.168.100.1 size 60 the user connect to the system and get ip address from pool but they can't ping for example 192.9.9.3. Please guide me if this is possible and what should I do ? Thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Mohsen wrote:
Dear All I need to set public IP address on hiper arc interface and private IP address pool , but when configured it the user connect to system couldn't browse internet. for example the setting is as below :
Hiper ARC interface IP address : 212.200.200.10 Default Gateway : 212.200.200.1
IP Pool : 192.168.100.1 size 60
the user connect to the system and get ip address from pool but they can't ping for example 192.9.9.3.
Please guide me if this is possible and what should I do ?
Are the users able to ping the HiperARC's IP address? How about the default gateway? What kind of device is acting as the default gateway? In order to use private IP addresses in that way you will need to NAT those addresses behind a public IP address. I've never experimented with NAT on the HiperARC. In fact, I'm not even sure if it supports it. However, that is not to say that you can't perform the NAT on another device in front of the HiperARC - e.g. a router or PC. - Wayne -- Wayne A. Tucker IT and Network Operations Manager wtucker@donobi.com DONOBI, Inc. <http://www.donobi.com/> +1-360-782-4477 "The Internet Solutions Company"
Reading Wayne Tuckers response to you makes sense. It's been a while since I've been heavily involved with the total controls and we always used public ip space, but what about using proxy-arp on the hiperarc? Anyone on the list have any comments regarding doing it this way? I believe it will work for you. Enable proxy-arp and let the hiper arc do the "routing" from public to private space. I could be totally off base and I don't have any test chassis's at the moment to play with but you could give it a try unless someone else has a different suggestion. Todd -----Original Message----- From: usr-tc-bounces+berto=core.com@mailman.xmission.com [mailto:usr-tc-bounces+berto=core.com@mailman.xmission.com] On Behalf Of Mohsen Sent: Wednesday, January 03, 2007 8:05 AM To: usr-tc@mailman.xmission.com Subject: [USR-TC] IP Pool and Gateway of Total Control Dear All I need to set public IP address on hiper arc interface and private IP address pool , but when configured it the user connect to system couldn't browse internet. for example the setting is as below : Hiper ARC interface IP address : 212.200.200.10 Default Gateway : 212.200.200.1 IP Pool : 192.168.100.1 size 60 the user connect to the system and get ip address from pool but they can't ping for example 192.9.9.3. Please guide me if this is possible and what should I do ? Thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
Todd Bertolozzi wrote:
Reading Wayne Tuckers response to you makes sense. It's been a while since I've been heavily involved with the total controls and we always used public ip space, but what about using proxy-arp on the hiperarc?
Anyone on the list have any comments regarding doing it this way? I believe it will work for you. Enable proxy-arp and let the hiper arc do the "routing" from public to private space. I could be totally off base and I don't have any test chassis's at the moment to play with but you could give it a try unless someone else has a different suggestion.
Todd I would think that would work but I don't have a spare one to try it out on either. enabLE ip prOXY_ARP_ALL_DIALIN
-- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 Off. 325-691-3301 Cell 325-439-0533 fax 325-695-6841
I know that proxy-arp is the right way to go. Proxy ARP will not perform the address translation needed from private IP space to public IP space. Proxy-arp in simplistic terms is a method to basically bridge two network segments on two separate interfaces (see more at http://en.wikipedia.org/wiki/Proxy_ARP). You will need to either find the way to enable NAT on the HiperARC (sorry never tried it) or place a router or PC in front of the HiperARC to do the NAT translations as Wayne suggested. In the past we've found it best to assign private addresses to the IP pool as well as the HiperARC and perform the translations on another router dedicated to this traffic (depending on how many calls you are supporting). Even a simple Linksys router from your local office superstore would do the trick depending on your requirements. We would then forward the administrative ports through the NAT to the HiperARC so that we could access the ARC from public address space. Please keep in mind that if you are providing internet access to dial in users like an ISP would that NAT may interfere with some applications working properly across the internet. For this reason I believe most people opt to use public IP addresses even if it means calling your upstream provider and requesting more. I hope this helps, Brandon Lehmann CCNA, CFOT, A+ Network Administrator Great Lakes Internet Service, LLC 218 Justice St. Fremont, OH 43420 blehmann@glis.cc On 1/3/07 10:34 AM, "Lewis Bergman" <lbergman@wtxs.net> wrote:
Todd Bertolozzi wrote:
Reading Wayne Tuckers response to you makes sense. It's been a while since I've been heavily involved with the total controls and we always used public ip space, but what about using proxy-arp on the hiperarc?
Anyone on the list have any comments regarding doing it this way? I believe it will work for you. Enable proxy-arp and let the hiper arc do the "routing" from public to private space. I could be totally off base and I don't have any test chassis's at the moment to play with but you could give it a try unless someone else has a different suggestion.
Todd I would think that would work but I don't have a spare one to try it out on either. enabLE ip prOXY_ARP_ALL_DIALIN
My apologizes. The first line should have read "I know that proxy-arp is not the right way to go." Brandon On 1/3/07 11:09 AM, "Brandon Lehmann" <blehmann@glis.cc> wrote:
I know that proxy-arp is the right way to go. Proxy ARP will not perform the address translation needed from private IP space to public IP space. Proxy-arp in simplistic terms is a method to basically bridge two network segments on two separate interfaces (see more at http://en.wikipedia.org/wiki/Proxy_ARP).
You will need to either find the way to enable NAT on the HiperARC (sorry never tried it) or place a router or PC in front of the HiperARC to do the NAT translations as Wayne suggested. In the past we've found it best to assign private addresses to the IP pool as well as the HiperARC and perform the translations on another router dedicated to this traffic (depending on how many calls you are supporting). Even a simple Linksys router from your local office superstore would do the trick depending on your requirements. We would then forward the administrative ports through the NAT to the HiperARC so that we could access the ARC from public address space.
Please keep in mind that if you are providing internet access to dial in users like an ISP would that NAT may interfere with some applications working properly across the internet. For this reason I believe most people opt to use public IP addresses even if it means calling your upstream provider and requesting more.
I hope this helps,
Brandon Lehmann CCNA, CFOT, A+ Network Administrator Great Lakes Internet Service, LLC 218 Justice St. Fremont, OH 43420 blehmann@glis.cc
On 1/3/07 10:34 AM, "Lewis Bergman" <lbergman@wtxs.net> wrote:
Todd Bertolozzi wrote:
Reading Wayne Tuckers response to you makes sense. It's been a while since I've been heavily involved with the total controls and we always used public ip space, but what about using proxy-arp on the hiperarc?
Anyone on the list have any comments regarding doing it this way? I believe it will work for you. Enable proxy-arp and let the hiper arc do the "routing" from public to private space. I could be totally off base and I don't have any test chassis's at the moment to play with but you could give it a try unless someone else has a different suggestion.
Todd I would think that would work but I don't have a spare one to try it out on either. enabLE ip prOXY_ARP_ALL_DIALIN
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
Todd Bertolozzi wrote:
Reading Wayne Tuckers response to you makes sense. It's been a while since I've been heavily involved with the total controls and we always used public ip space, but what about using proxy-arp on the hiperarc?
Anyone on the list have any comments regarding doing it this way? I believe it will work for you. Enable proxy-arp and let the hiper arc do the "routing" from public to private space. I could be totally off base and I don't have any test chassis's at the moment to play with but you could give it a try unless someone else has a different suggestion.
Proxy ARP allows you to use IP addresses from the LAN's network range in the pool. For instance, if the IP address on the HiperARC was 10.0.0.2 with a network mask of 255.255.255.0 (/24) and was routing through a router at 10.0.0.1, you could use 10.0.0.3 through 10.0.0.254 as the IP pool in the HiperARC. Enabling proxy arp tells the ARC to respond with its MAC address to any ARP requests for IP addresses in its pool. The alternative is to have a different network range as the pool (say, 10.0.1.0/24) which would be reached through a static route that you would have to program into the gateway router. Neither of these would make a difference in this situation since the problem with private IP addresses isn't reaching them from within your network, it's reaching them from the outside. - Wayne -- Wayne A. Tucker IT and Network Operations Manager wtucker@donobi.com DONOBI, Inc. <http://www.donobi.com/> +1-360-782-4477 "The Internet Solutions Company"
Mohsen wrote:
Dear All I need to set public IP address on hiper arc interface and private IP address pool , but when configured it the user connect to system couldn't browse internet. for example the setting is as below :
Hiper ARC interface IP address : 212.200.200.10 Default Gateway : 212.200.200.1
IP Pool : 192.168.100.1 size 60
the user connect to the system and get ip address from pool but they can't ping for example 192.9.9.3.
Please guide me if this is possible and what should I do ?
Thanks Since that address range won't route you need to get a public range or NAT those addresses.
Moshen, Are you thru now? noticed your examples ip did not tally with pool. may ocurr if pool is not specified in setting up the network and there are more than on pool set up on the ARC. Also you may need to execute a default route command on the ARC. Regards 'Tunde On 1/3/07, Mohsen <mohsen1380@yahoo.com> wrote:
Dear All I need to set public IP address on hiper arc interface and private IP address pool , but when configured it the user connect to system couldn't browse internet. for example the setting is as below :
Hiper ARC interface IP address : 212.200.200.10 Default Gateway : 212.200.200.1
IP Pool : 192.168.100.1 size 60
the user connect to the system and get ip address from pool but they can't ping for example 192.9.9.3.
Please guide me if this is possible and what should I do ?
Thanks
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
There were some recent discussions on this topic (not sure if they were really answered). You are going to have to setup NAT on the hiper arc if you want your customers to be using private space. I've never done it as we've always had public ip space on our pools. I'm sure if you search the 3com docs for NAT related info you should be able to find something. Todd -----Original Message----- From: usr-tc-bounces+berto=core.com@mailman.xmission.com [mailto:usr-tc-bounces+berto=core.com@mailman.xmission.com] On Behalf Of AkinTunde Popoola Sent: Monday, January 22, 2007 4:45 AM To: Mohsen; Discussion relating to the 3Com/US Robotics Total Control modemsystems. Subject: Re: [USR-TC] IP Pool and Gateway of Total Control Moshen, Are you thru now? noticed your examples ip did not tally with pool. may ocurr if pool is not specified in setting up the network and there are more than on pool set up on the ARC. Also you may need to execute a default route command on the ARC. Regards 'Tunde On 1/3/07, Mohsen <mohsen1380@yahoo.com> wrote: Dear All I need to set public IP address on hiper arc interface and private IP address pool , but when configured it the user connect to system couldn't browse internet. for example the setting is as below : Hiper ARC interface IP address : 212.200.200.10 Default Gateway : 212.200.200.1 IP Pool : 192.168.100.1 <http://192.168.100.1> size 60 the user connect to the system and get ip address from pool but they can't ping for example 192.9.9.3. Please guide me if this is possible and what should I do ? Thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com <http://mail.yahoo.com> _______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
participants (6)
-
AkinTunde Popoola -
Brandon Lehmann -
Lewis Bergman -
Mohsen -
Todd Bertolozzi -
Wayne Tucker