Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) 5.0Ap42 for MAX products

I am getting the exact same behavior under 5.0Ap42.  

The 5.0Ap36 *will* enter the route properly.

The old behavior is the proper behavior.  There are some systems
which can only do interface-based routing.  A good example is a
customer with a dedicated modem account which uses an NT box
as a router.  They route from their modem interface (a /32 host
entry w/ a static IP address) to their ethernet interface (a /27
network subnet).  

Regardless of the application, it is improper to route the
entry to the Ethernet interface,  especially when the RADIUS
profile calls for the route to go through the switched (modem) port
explicitly.  For example, this profile does NOT work properly 
under 5.0Ap42:

modem-route Password = "UNIX"
        User-Service = Framed-User,
        Framed-Protocol = PPP,
        Ascend-Route-IP = Route-IP-Yes,
        Framed-Address = 208.133.30.33,
        Framed-Netmask = 255.255.255.255,
        Framed-Route = "208.145.43.160/27 208.133.30.33 1",
        Ascend-Maximum-Channels = 1,
        Ascend-Idle-Limit = 64000

(route 208.145.43.160/27 gets routed to the Ethernet IF, even
though it should go to WANXX where the gateway address is
associated with)

However, this does:

isdn-route Password = "UNIX"
        User-Service = Framed-User,
        Framed-Protocol = MPP,
        Ascend-Route-IP = Route-IP-Yes,
        Framed-Address = 208.146.102.65,
        Framed-Netmask = 255.255.255.192,
        Framed-Route = "208.146.100.160/27 208.146.102.65 1",
        Ascend-Maximum-Channels = 2,
        Ascend-Idle-Limit = 64000

(route 208.146.100.160/27 gets routed to WANXX just like it should)

Same technique, only difference is that the isdn-route is an
ISDN port and that the gateway address is associated with a /26
route entry.

Any thoughts on the matter?

At 06:08 PM 2/2/98 -0500, you wrote:
>At 19:59 1998/01/22 -0600, Dale R. Henninger wrote:
>>rivrisdn        Password = "UNIX"
>>        Ascend-Idle-Limit = 600,
>>        Framed-Route = "206.145.56.32/28 0.0.0.0 1"
>
>>***** This is with 5.0Ap38
>>Destination        Gateway         IF       Flg   Pref Met     Use     Age
>>206.145.48.85/32   206.145.48.85   wan54    rT     100   1       5    3211
>>206.145.56.32/28   206.145.48.85   ie0      rGT    100   1      12    3211
>
>>Notice how the subnet route under p38 shows up as going back out the
>>Ethernet...that sucks...
>
>it broke the original behavior, so technically a bug,
>but I can't see a need to do this anyway...
>
>the net effect of your profile seems to be to give the remote 
>router a dynamic "/32" ip for its wan connection,
>but that seems pretty pointless, why not just run unnumbered?
>
>using the ethernet IP of the remote router plus a mask:
>rivrisdn        Password = "UNIX"
>        Ascend-Idle-Limit = 600,
>	Framed-Address = 206.145.56.33,
>	Framed-Netmask = 255.255.255.240,
>
>-Jim H
>----
>Jim Howard             Sr Network Engineer        Lyceum Internet
>jhoward@lyceum.com     http://www.lyceum.com/     404.248.1733     
>
>My PGP Public Key: http://www.lyceum.com/~jhoward/pgp-key.txt
>Fingerprint: 7E8B E2BA 1314 2535 CB08  CFF9 119B 7CD3 2488 954D
>
>++ Ascend Users Mailing List ++
>To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
>To get FAQ'd:	<http://www.nealis.net/ascend/faq>
>
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: