Discussion Locked

Router problem

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How to describe a network which is behind the router so it can be visible from the Internet. How to do it if my router is CISCO or Linux server?

7 replies

by steved

Assuming you're using a private address space on your network and wish to do network address translation (NAT) to a public address supplied by your ISP, here are the basics, adapted from my Cisco router's configuration. I've used the fictional IP address 100.100.100.100 to represent the public address. The IP 192.168.0.1 is the router's address on the LAN. This is not a complete router configuration. These are just the parts that handle the NAT.

ip nat pool mypool 100.100.100.100 100.100.100.100 prefix-length 30
ip nat inside source list 1 pool mypool overload
!
interface Ethernet0
ip address 192.168.0.1 255.255.255.0
ip nat inside
!
interface BRI0
ip address 100.100.100.100 255.255.255.252
ip access-group 111 in
ip nat outside

I hope this helps.

Steve Diamond

by schannachie

Hi,

In case of using linux boxes you have some solutions, of course are not simple things to do.

1.- Option (easy)Kernel 2.2x or higher level for Suse distribution i.e.

Download form www.boutell.com/rinetd

and install the package . It's a GPL software that redirects ports and ip addresses.

2.- Set ipfwadmin-wrapper (Very more complex)
all you need is at the info files and man pages.

3.- Set Suse firewall software and routing facilities.

4.- Set ipchains masquerading options (most dificult of all) this will act as a powerfull packet filter, NAT, and will allow you to reach your LAN and the internet on both sides. Info related at www.linux.org on ipchains and masquerading options. This will work fine in most linux kernels and the LAN will be protected with a user class firewall

For more info www.suse.com, firewall projects.

Good luck !

This discussion is closed to new replies.