Dear Lin,

If you need to use LISPmob behind NAT then you will have to use the testing branch of LISPmob in the github: (the configuration file has some changes)

    git clone git://github.com/LISPmob/lispmob -b testing

This code is not yet official but it will be released in a few days.
Anyway, I'm not sure of the current state of the support of NAT traversal in LISP Beta Network. I know they were working on it but I don't know the current status of deployment. You will have to try if your Map Server has already support for it. Regarding the RTR configuration, it is done automatically through the control plane of LISP but I don't think it will help you to bypass the firewall. As far as I know, it is only used to bypass NAT.

Regards

Albert


On 09/03/2013 09:43 PM, Lin Feng wrote:
Hello Lori and LISPMob Team:
The LISP MN host RLOC128.107.130.179using right nowis a Cisco IP.
-If possible to avoid the NAT and Firewall issuethrough the RTR when try to join the lisp beta network?
-How to specify the RTRin lispd.conf?
// See the log
Please let me know.

I will try find a non-cisco network but it may be also behind the NAT :-).
Thanks

Lin
-----Original Message-----
From: Lori Jakab [mailto:[email protected]]
Sent: Tuesday, September 03, 2013 2:09 AM
To: Lin Feng (linfeng)
Cc: [email protected] <mailto:[email protected]>
Subject: Re: [Contactus-linux] [Linux] : Can not ping MS/MR after joining LISP beta network
Hi Lin,
You should post these kind of support questions on the LISPmob-users mailing list, where the responses are archived and indexed by search engines to the benefit of the larger LISPmob community.
On Sep 3, 2013, at 9:46 AM, Lin Feng (linfeng) wrote:
> Thank you Lori.Got someissues after joining LISP beta network with the information provided.
>
> 1]I tried to provision myLISPMobMN(Ubuntu 12.04 host) with
> IPV4 EID 153.16.22.147/32 as you provided andstart the LISP MN
> according to http://lispmob.org/documentation->Running <http://lispmob.org/documentation-%3eRunning> LISPmob with
> command likesudo lispd -f /etc/lispd.conf after adding the IPv4
> EID/MS/MR/PXTR information you provided into lispd.conf and change
> /etc/sysctl.conf
>
> 2] Howeveronce this LISP MN join the LISP beta network,...
> I can not ping MS/MR 149.20.48.77andSJC-PXTR 173.36.193.25 and more.
> There is no issue to ping MS/MR/SJC-PXTR before startinglispd and join the beta network.
>
> Both 'ip addr' and 'ip route'output looks fine even after joining beta n/w.
>
> You can find the detailed logbefore and after running lispd on Ubuntu 12.04 LISP host.
> The LISPMob host RLOC is 128.107.130.179
This looks like a Cisco IP address, and it is most likely behind a restrictive firewall.I cannot ping it from a non-Cisco network (but can from a Cisco laptop).The Map-Server shows your EID as never registered, so probably the Map-Register packets never reached the server.We had some partial success using LISPmob from the Guest wireless network, which was outside the firewall, and from lab servers that are in the DMZ.I recommend you use a VM in a non-Cisco network for LISPmob.
-Lori
>
> 3] Could you please have a look on the log and see if there is any issue for LISP MN to join the beta n/w?
>
>
> Thanks
>
> Lin
>
>
>
> -----Original Message-----
> From: Lori Jakab [mailto:[email protected]]
> Sent: Monday, September 02, 2013 2:01 AM
> To: Lin Feng (linfeng)
> Cc: [email protected] <mailto:[email protected]>
> Subject: Re: [Contactus-linux] [Linux] : Need to join LISP beta
> network
>
> Hi Lin,
>
> I just provisioned v4 and v6 EIDs for you, here are your connection details:
>
> IPv4 EID: 153.16.22.147/32
> IPv6 EID: 2610:d0:1219:128::13/128
> Map Server: 149.20.48.77
> Map Server password: Mos7Knik
> Map Resolver: 149.20.48.77
>
> You can find more information about the Beta network (like potential
> Proxy-ETR if you need one) here:
> http://www.lisp4.net/images/lisp-ddt.pdf
>
> Should you have any issues or questions, please post to the LISPmob-users mailing list for support.
>
> Best regards,
> -Lori
>
> On Aug 30, 2013, at 1:28 AM, Lin Feng (linfeng) wrote:
>
>> Thank you, Alberto. Please keep us posted..
>>
>> -----Original Message-----
>> From: Alberto Rodriguez-Natal [mailto:[email protected]]
>> Sent: Thursday, August 29, 2013 11:46 AM
>> To: Lin Feng (linfeng)
>> Cc: [email protected] <mailto:[email protected]>
>> Subject: Re: [Contactus-linux] [Linux] : Need to join LISP beta
>> network
>>
>> Hi Lin,
>>
>> Thank you for the details. We have all the information we need. There is no problem in provision you both IPv4 and IPv6 EIDs ;). Usually, the provision is a matter of just a few days, but right now part of the team is on vacation and some delay is expected. We'll get back to you with the connectivity details ASAP.
>>
>> Thanks!
>> Alberto
>>
>> On 29 August 2013 01:29, Lin Feng (linfeng) <[email protected] <mailto:[email protected]>> wrote:
>>> Thank you Alberto. Please see reply and let me know the detail asap.
>>>
>>> * geographical location of the intended deployment (we need to
>>> provision mapping service on Map-Servers topologically close to
>>> you);
>>>
>>> ++++[Lin] I am in San Jose, California, USA.
>>>
>>> * Linux distribution you will use;
>>>
>>> ++++[Lin]I am using Ubuntu 12.04 , kernel 3.0.35
>>>
>>> * the scenarios and use cases you are most interested in (e.g.,
>>> multihoming, IPv6 transition, ingress traffic engineering, just
>>> learning a new tech, etc.);
>>> * how did you learn about LISP beta-network and the LISPmob project.
>>>
>>> ++++[Lin] We are evaluating the LISP technology for the purpose of
>>> ++++IP mobility.In the areas
>>>
>>>
>>> - To keep LISP MNIP address or session persistenceeven whenthe
>>> user LISP-MN roaming into different service provider, access n/w
>>> 3G/Wif or even different country
>>> - Proper Authentication of LISP MN
>>> -IPv6 Transition
>>> - MultiHoming,
>>> -Ingress Traffic Engineering,
>>>
>>> If possible, please assign both IPv6and IPv4 EID for my linux host :-).
>>>
>>>
>>>
>>> Thanks
>>>
>>> lin
>>> -----Original Message-----
>>> From: Alberto Rodriguez-Natal [mailto:[email protected]]
>>> Sent: Wednesday, August 28, 2013 6:30 AM
>>> To: Lin Feng (linfeng)
>>> Cc: [email protected] <mailto:[email protected]>
>>> Subject: Re: [Contactus-linux] [Linux] : Need to join LISP beta
>>> network
>>>
>>> Hi Lin,
>>>
>>> We will be more than glad to provide you connectivity. Keep in mind that you will need a public IP address to use as RLOC since the beta-network doesn't support NAT traversal (yet).
>>>
>>> We will need a few pieces of information before we can provision
>>> your EID
>>> space:
>>>
>>> * geographical location of the intended deployment (we need to
>>> provision mapping service on Map-Servers topologically close to
>>> you);
>>> * Linux distribution you will use;
>>> * the scenarios and use cases you are most interested in (e.g.,
>>> multihoming, IPv6 transition, ingress traffic engineering, just
>>> learning a new tech, etc.);
>>> * how did you learn about LISP beta-network and the LISPmob project.
>>>
>>> Once we have the above info, we will provide you with all the information you need to get you started.We recommend you explore the documentation on our web site http://lispmob.org/ and subscribe to the LISPmob users mailing list at https://lispmob.org/mailman/listinfo/users.
>>>
>>> Thank you for your interest in LISPmob!
>>>
>>> Alberto
>>>
>>
>> _______________________________________________
>> Contactus-linux mailing list
>> [email protected] <mailto:[email protected]>
>> https://lispmob.org/mailman/listinfo/contactus-linux
>
> <before_run_lispd.txt><after_run_lispd.txt>


--
Albert López
CCABA System Administrator
Universitat Politècnica de Catalunya
Telf: 93 4017182

Reply via email to