Text 326, 133 rader
Skriven 2006-03-17 22:16:00 av Sniper (39.dove-nix)
    Kommentar till text 325 av Moon Raker (38.dove-nix)
Ärende: Re: 3 NIC's
===================
-=> Moon Raker wrote to Sniper <=-

 MR>   Re: Re: 3 NIC's
 MR>   By: Sniper to Moon Raker on Wed Mar 15 2006 11:54 pm

 > Geez...  Dude... your probably confusing what VPN is.  Its a "Virtual
 > Private Network".  Means your opening a door up to your internal network
 > so you can gain access to it from outside.  You don't run VPN on something
 > that's already connected internal.  Now, the rest of the configuration has
 > to take place...  VPN needs to know what network IP range your connecting
 > to, hence your problem above connecting to your multiple internal
 > networks.  You really need to choose one and dump the rest of that crap,
 > your just going to cause yourself nightmares.  See, us network guru's have
 > a saying, which I'm sure your've heard of:  KISS  Keep It Simple
 > Stupid.  If I run into a nightmare network setup, the first thing I'm
 > going to do it try to streamline it, bring it down to acceptable ranges.

 MR> I know what VPN is geez... What do you mean internal?  How do you
 MR> figure my Laptop is internal?  I have file sharing and my entire
 MR> Network Neighborhood when I connect to my openvpn from frickin WI.
 MR> guess I'll call the gentoo box the server..  It is the one with 2
 MR> nic's. the 10.10 net is bridged to a tap0 device my internet is plugged
 MR> into the 192.168 ip range and yes I understand that router can only
 MR> operate in the 192.168 ip range.  My road warrior laptop is on sprint
 MR> for internet.  The way I understand is if I am connected via VPN.
 MR> wouldn't that mke me part of my home network that should put me in my
 MR> mediacom ip range if it was configured correctly. If you are on a proxy
 MR> server and went to a web page or who am I wouldn't your IP be the one
 MR> of the proxy and not your orginal connection therefore you are
 MR> annonomoous you would be in the ip range of the proxy.

KISS.  Now, the laptop, your able to connect to your network via the VPN,
do you have the VPN server passing through the IP range, do you have a
DHCP server, or are you staticly assigning IP's?  Is the VPN Server
configured for this?

 MR> I don't what to be on a proxy server.  What is the difference if I am
 MR> at home or on the road.  A VPN connection should` make me part of home

A proxy server is this:  A server on your network that all your internet
traffic goes through.  When you configure a proxy server <for Linux, I
suggest Squid>, you setup the ports used.  So, lets say in Internet
Explorer, you go to "Tools > Internet Options > Connections > Lan
Settings, under this area, you tell IE to use your proxy server, <ip and
port you configured in Squid.  This tells IE to use that system, that port
to go out onto the internet.  There's a couple of reasons for using
this... 

One: It allows you to monitor what/where/when someone on your
network can go.  

Two:  Central point of internet access.  You can have
dual nic's in the proxy server, and have internet on one side, with your
internal network on the other.  This is a biggie for security, rather hard
to access a system on the internal network from the internet.

Three:  You can centrally administer where users are allowed to go.  You
can totally shut down internet access except for one site if you so
desire.  You can block specific sites or sites of a specific nature by
using wildcards, etc...  

 MR> network.  MY problem is how do I make my laptop get it's traffic from
 MR> my homelan and just use the sprint to make the connection to my home
 MR> network..Say I was an employee my boss didn't want me to use the
 MR> internet for personal stuff.  I can't think of the name of the service
 MR> but they sell you soo much download bytes to open a VPN connection you
 MR> login and bamm your IP is now the VPN server you cnnected to.. you do a
 MR> who am I and now your IP is different then the one from work.  I know
 MR> it can be done. and I don't think I need expensive cisco router to do
 MR> it..

I'd have to say your VPN isn't completely configured if your not able to
get connected.  I suspect you don't have the IP side setup
correctly.  But, then, I have only setup a couple of VPN connections and
none of them with Linux.

 MR> Thanks for you help dude... I don't own any book's on this stuff just
 MR> what I read on the net.  I was lucky to get the VPN part working that
 MR> took me 2 days because my kernel didn't have support for it.  I thought
 MR> it was cool to see my hood from the road.  I think it is all in the
 MR> configuration not the equipment. Oh.. tracert to pggentooftp.dyndns.org
 MR> that is one router and tracert to j5.dyndns.org connected to my 1 cable
 MR> modem.  Tell me I don't have 2 ip's again. grin<-- Your still my good
 MR> friend<... I'm just giving you shit. I love it here.

I don't doubt you have 2 IP's.  I'm setup with 8 currently, Your problem
is getting them into your network with a off the shelf cheapy router.  If
your router can't do multiple IP NAT, then your SOL.  I believe your cable
modem can though, but you have to statically assign the IP's to the
NIC's.

Another way to utilize them correctly would be to have 2 computers each
with 2 NIC's in them, one for the external, one for the internal.  Both of
those computers would need to be able to do NAT, and you'd use them as
your gateways for each network... You'd need one hub connected to the
cable modem, that the 2 external computers can connect to and 2 hubs for
each of the internal networks...

				Internet
				    |
				Cable Modem
				    |
				   Hub1
				    |
	Computer 1 External IP #1	Computer 2 External IP #2
		    |		        	       |
		   Hub2			     	      Hub3
		    |				       |
	Computer in 192. network	Computers in 10. network

In this configuration, if cable modem works as it should, you could setup
specific computers ports in network 1 to be available to network 2 and
vise versa.

Normally, in place of Hub1 you'd have a router and within that you'd have
it configured for NAT...  

But all that's just me.  :)


 

Sniper
Killed In Action BBS, telnet://kiabbs.org
Home of the Unofficial SynchroNet Support Network.
download the info pack at any of the below sites:
http://www.chcomputer.net/USSNET.ZIP or http://www.ussnet.org

... A little light in his loafers
--- MultiMail/Linux v0.46
 þ Synchronet þ Killed In Action - telnet://kiabbs.org
--- SBBSecho 2.12-Win32
 * Origin: Joe's Computer & BBS -= joesbbs.synchro.net =- (1:275/412)