Re: (PM) OR-U sub interfaces?

John-David Childs (jdc@nterprise.net)
Mon, 10 May 1999 14:58:42 -0600

On Thursday May 6, 1999, Jake Messinger <jake@ams.com>
had this to say about "Re: (PM) OR-U sub interfaces?":

> You cant do that unless you want to set up NAT in the or-u and that is st=
ill
> in closed beta (ugh!).

Nope...it's in open beta, but NAT is *not* technically required on the
OR-U in this case.

I've used the subinterface mechanism quite a few times in 3.8 to
completely renumber a network without the client even knowing about it :)

If we assume that the OR-U has a public IP address and you want to create
a subinterface address of 192.168.200.1, I've done the following:

---------
add subi rfc1918
set subi rfc1918 address 192.168.200.1
set subi rfc1918 netmask 255.255.255.0
set subi rfc1918 port ether0
---------

Now, all the internal machines at 192.168.200.(2-254)=20
will see the OR/U at 192.168.200.1 assuming their gateway/netmask
is set up properly. Using static routes, I can pass packets from this
network all the way to my "border" router which speaks non-beta NAT=20
(maybe a Cisco or Ascend?) *OR* I can put NAT on the PM3 (upstream
to the OR-U) and translate the packets from there.

The release notes for ComOS 3.9 suggest that I can configure NAT on
the OR/U to do this, but quite honestly in several attempts I've
never gotten it to work *unless* I use a numbered PPP/Frame connection=20
to the PM3 (i.e. I cannot have a public network and a private NAT'd
network on the same interface).=20

> On Thu, 6 May 1999, Gregory A. Carter wrote:
>=20
> :
> :I have a situation where a client needs to use 192.168.200.0/24 range on
> :their local machines for internal reasons however I wish to route a block
> :of ips to the client via an OR-U connected to our PM3. The problem I'm =
in
> :is that I can't change the physical addresses on the clients machines,
>=20
> :they HAVE to be in the unrouted range and since some of the machines are
> :winblows 95 I can't just add another ip to their adaptor interface. I've
> :been looking through the OR-U manuals and can't figure out how to get the
> :OR-U which sits on a simple /30 block to see the 192.168.200.0/24 ips
>=20

>=20
> :the unroutable block? NAT maybe?
>=20
> You COULD set up an NT or a linux box to be your NAT router for you.
>=20
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-=
*~
> Jake Messinger, VP. ph:713-772-6690 Lucent Dealer
> AMS, Inc. fx:713-774-3498 Medical Billing
> 8300 Bissonnet #400 jake@ams.com , ICQ# 4403734 Internet Services
> Houston, Texas 77074 www.ams.com/~jake and Hardware
>=20
> Adjunct Professor University of Houston, CBA jake@uh.edu
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-=
*~
>=20
> INVENTOR OF the _.,-*~'=1E'~*-,._ SQUIGGLES (c) 1978
>=20
> -
> To unsubscribe, email 'majordomo@livingston.com' with
> 'unsubscribe portmaster-users' in the body of the message.
> Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>

--=20
John-David Childs (JC612) Enterprise Internet Solutions
Systems Administration http://www.nterprise.net
& Network Engineering 8707 E. Florida Ave #814 Denver, CO 80231
Numeric stability is probably not all that important when you're
guessing.
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>