Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) NAT question

Leon, thanks for the reply.

In a nutshell, I was trying to have all the computers on the clients LAN be
able to access the Internet using NAT to conserve the IPs required by them,
but also have a couple of their computers have actual Internet IPs.

I've tried several additional configurations recently involving trying to
use multiple subnets, and I'm pretty well convinced that at this time it's
just not possible to have some computers use NAT and other be able to not
use NAT.  I'm just going to assigned the client a large enough subnet and
be done with it.  Eventually we'll migrate the client to a proxy server and
reduce the size of their subnet.


Joseph


At 11:30 PM 2/4/98 -0500, Leon McCalla wrote:
>I'm still trying to understand what you are doing but i think i have it.
>I think you may be having the problem since you are using NAT addressed on
>the LAN and Net addresses on the 2nd Adrs. Try to swap them and see what
>happens?
>
>I had a similar problem once and i had to resolve it with a proxy server.
>In my situation i had a IPX LAN (machines a - z) however about 4 machines
>had IPs and were part of a Private WAN (machines a-d). My job was to use a
>P50 to give every machine NET access. I thought about using NAT on some
>machines while giving real IP to other machines but i was told that was
>impossible.
>
>ultimately what i came up with was giving the server machine IPs from the
>private and public ranges and running a proxy on it. no need for NAT after
>all.
>
>Leon McCalla
>leon@caribbeanlink.com
>
>-----Original Message-----
>>Within the operation of NAT, all the computers are able to access the
>>Internet.  The Internet is NOT able to access the computers with the
>>statically assigned IPs.
>>
>>I've tried various combinations of configurations.  Presently, the Max
>>connection profile has LAN Adrs=209.29.179.129/28.  The P75 has IP
>>Adrs=192.168.139.100/24 and 2nd Adrs=209.29.179.129/28.
>>
>>The Internet accessible computers don't actually need 20 ports visible... I
>>possibly could get away with 10 static mappings if that would allow me to
>>solve the problem.  I'd really like to use a default server IP to take care
>>of the one computer that has the most ports that need to be available, but
>>that doesn't work with Multi IP NAT and I believe I can't fulfill my other
>>needs with Single IP NAT.
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: