Provider ------------- ADSL --------- IPCOP --- LAN --- Workstation pool external IP Internal IP .. RED I/F || GREEN I/F .. eg 222.152.169.203 192.168.0.254 .. 192.168.0.253 || 192.168.1.254
For NAT on your ADSL router you can do worse than route EVERY port through to the IPCOP's RED I/F .. then let IPCOP deal with redirection.
In the above example you'd point your workstation gateway and DNS at the GREEN I/F ..
HTH
Paul.
PS I have seen cases where either RED or GREEN I/F configs are dropped for no apparent reason. logging in to IPCOP box as setup/password will let you fix this.
Nick Rout wrote:
On Wed, December 1, 2004 12:18 pm, Steve Holdoway said:
I'm trying to get vpn working into this installation, and it is just totally dead. I think the problem *might* be that I've set the red interface up incorrectly.
As I'm behind an adsl router,
So do i take it that both the adsl router, and the ipcop box are doing NAT?
You will know that you need to forweard whatever ports and protocols are needed by your breed of VPN through the adsl router to the ipcop box.
I've set the red interface up so it's a network connection, and given it an ip address adjacent
not sure what you mean by an "ip address adjacent" - adjacent to what?
Frankly this double router/nat is a pain IMHO, you are better, if you can, to get the ip address of the outside world onto the ipcop box, but whether that is possible is dependent on the adsl-router device. What is the device? i have some experience with various ones :-)
to allow a very small subnet mask to be used.
Should I have set it up differently... like using the external (static) ip address of the router in there somewhere?
Everything apart from this vpn is working fine - both routing out, and pinholing ssh back in via both the router and the ipcop firewall.
However, I can get no life whatsoever from the vpn ):
Cheers,
Steve
-- Due to financial crisis the light at the end of the tunnel is switched off
-- (E-CAF, 301 Montreal St, Christchurch, NZ) (ph/fax ++64 3 3656 480 : www.e-caf.com)
