Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) Re: ascend-users-digest V96 #1296



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On 18 Aug 98, at 22:45, you wrote :
> From: Jon Rust <jpr@vcnet.com>
> Date: Tue, 18 Aug 1998 17:50:55 -0700
> Subject: (ASCEND) 2 LANS, the 'Net, and a sprinkle of NAT
> 
> Got a customer with 2 buildings. They have 2 Pipelines, one at each 
> location. They want each location to be able to connect to their ISP, and
> they also want each location to be able to connect to each other for file
> sharing and whatnot:
> 
>                         ISP
>                         /\
>         (real IP) ------  ------- (real IP)
>                  |               |
>                 router <---> router
>            10.0.0.1/24       10.0.1.1/24
>                  |               |
>                  |               |
>              win98's,NT       win98's
>             10.0.0.2,3,4...  10.0.1.2,3,4...
> 
> 
> 
> First I set-up each P50 with the ISP's account. NAT worked like a champ,
> and Internet access is working fine.
> 
> Next I set-up new accounts for the 2 routers to call each other on 
> demand. Each router now has 1 account connecting to their ISP (and the
> default route points to their ISPs IP), and 1 account connecting to the
> other router. Manually dialing works fine and the connection is
> established. However, it seems like some packets are getting lost (some
> pings get unanswered, etc), and that the router is confused about which
> account to use to send packets out. Are there some pref's I need to
> change? Routes I need to add? I thought simply having an account defined
> with a subnet would be enough for the P50 to figure out where to send
> things. Was I wrong?

Jon:

I believe that what you're seeing is another example of the problem/defect 
which I had described on 28 July, 1998 in a post to this list entitled 
"(ASCEND) P75, NAT, strange routing behaviour".  This describes a situation 
where, when NAT is enabled for one connection profile on a P75, the default 
route becomes always set to the gateway defined in the connection profile for 
the NAT connection.

This bit me because I was/am trying to connect to my ISP (for which I have 
static IPs), and to my employer (for which I must use NAT).  Whenever NAT is 
enabled, the default route is set to my employer's gateway IP address if the 
connection to my employer's network is up, and to NULL (i.e. NO default 
route) if the connection to my employer's network is down, regardless of the 
state of my connection to my ISP, and any settings in the static routes 
subsection of the P75 config.  This is a problem because my ISP uses several 
discontiguous IP address ranges, not all of which are covered by the route 
which is added because of their connection profile.  I would also like to use 
the ISP's connection to the net in preference to my employer's -- it is 
faster, and isn't firewalled as stringently! ;-)

I had forwarded this problem/defect to Ascend technical support.  They first 
advised me to downgrade my P75 to 5.1Ap8, which is unacceptable, because I 
need the new features (particularly the per-connection profile setting of 
user name) found only in the 6.1.x branch.  They then advised me to upgrade 
to 6.1.5 (I had been using 6.1.3) -- no joy.  My further communication with 
Ascend technical support on this matter has not been fruitful.

As of now, I must manually turn NAT on when I want to connect to my 
employer's network, and then manually turn it OFF when I want to connect to 
my ISP and/or the net-at-large.   :-(

I would recommend that you upgrade to 6.1.5 if you haven't already, because 
it does include some NAT routing fixes which may help your situation.

Cheers

-----BEGIN PGP SIGNATURE-----
Version: PGP 5.5.5 -- QDPGP 2.11 
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBNdqg1bbo92HIJrtuEQL/jACaAufiu7eHLmtV8bikay+/bfeUcx4AoMsf
4LC2SefCfGwBqmNx8hcdsszr
=Mofu
-----END PGP SIGNATURE-----
=======================================================================
Greg R. Broderick           
                            God is real
                            unless explicitly declared as integer.
ganymede@insync.net
greg@qrd.org
=======================================================================
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>