Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Q. Can you run servers behind Pipeline (running NAT)?
yes you can...
the way that it works, is that the device you are dialing into, dynamically
assigns you 1 "real" address. Then you would have your web/http/ftp servers
on .201 .203 .204 of you "local" addressing. On the pipeline you would
assign static mappings to a port. So it would be like port 80 go to .201
the web server, port 21 got to .202 the ftp server, port 119 go to .203
your newserver... and on and on...
so if i wanted to get to your webpage on .201, i would open up my web
browser, put in your "real" address, this would go to your pipeline, your
pipeline would realize that this is requesting port 80, the pipeline would
look to it static mappings and say "this request is for port 80, my mapping
say send port 80 to .201" then it will process it to .201. The same for all
the other ports...
Got it?
but no, you can not assign individual address to each device that can be
accessed by the "outside world".
At 09:12 AM 11/13/97 -0500, you wrote:
>Is there a way to statically map IP bogus addresses to a valid IP address
in order to be hit
>from the outside world?
>
>Lou.
>
>------------------------
> From: Scott Chrestman <src@netropolis.net>
> Subject: Re: (ASCEND) Q. Can you run servers behind Pipeline (running
NAT)?
> Date: Wed, 12 Nov 1997 16:24:56 -0600 (CST)
> To: Edwin Yeh <ery2@po.cwru.edu>
> Cc: ascend-users@bungi.com
>
>
>> On Wed, 12 Nov 1997, Edwin Yeh wrote:
>>
>> > I don't know exactly how NAT works. (I'll be interested to know. All I
can
>> > guess, is that when the packet exists the router, somehow the header
>> > information is wrapped.)
>>
>> From http://www.ascend.com/895.html :
>>
>> When the Pipeline first connects to the NAS, it receives an initial IP
>> address via PPP negotiation. The Pipeline then builds a
>> lookup table that matches the workstation's bogus address with the
>> registered address that the NAS assigns. The Pipeline
>> re-addresses packets destined for your workstation (i.e., destined to the
>> registered address) with the bogus address it actually has.
>> This translation is transparent both to the workstation and to devices on
>> the WAN.
>>
>> >
>> > But can you run servers (such as ftp server or web server) behnid the
>> > Pipeline router (running NAT)?
>>
>> Yes you can run them, but users from the outside world will not be able to
>> hit them.
>>
>> >
>> > In other words, is there a way for outside users to point to a specific
>> > machine inside the NAT subnet.
>>
>> No.
>>
>> >
>> > Thanks.
>> >
>> > Edwin
>> >
>> > P.S. I can think of a solution. That is, don't use NAT and run DNS
after the
>> > pipeline router. The DNS effectively become the router and the pipeline
>> > effectively become a Terminal Adapter. But if this is the case, why
buy the
>> > pipeline. We can do it with ~$150 ISDN TA. We are using pipeline because
>> > it's cost effective for a subnet running multiple machines and the router
>> > performs better than the computer. However, functionality will come
before
>> > performance. If we cannot solve this problem, we will be forced to
drop the
>> > pipeline solution.
>>
>> I totally dont understand what you mean by "The DNS effectively becomes
>> the router", as they are two TOTALLY different things, doing two TOTALLY
>> different functions, but your overall answer is NO. Go buy a Motorola
>> BitSucker Pro for $150, and save some cash.
>>
>> Scott R. Chrestman
>> System Administrator
>> Netropolis Communications Corp.
>> src@netropolis.net
>>
>> ++ Ascend Users Mailing List ++
>> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
>> To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
>---------------End of Original Message-----------------
>
>-------------------------------------
>Name: Lou Melograna
>E-mail: Lou Melograna <lmelogra@atrioncomm.com>
>Atrion Communications Resources
>185-I Industrial Parkway
>Branchburg, NJ 08876
>Phone: 908.231.7777 ext.112
>Fax: 908.231.8228
>Date: 11/13/97
>Time: 09:12:07
>"When Quality Counts"
>-------------------------------------
>
>++ Ascend Users Mailing List ++
>To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
>To get FAQ'd: <http://www.nealis.net/ascend/faq>
>
>
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* Luke Parrish * Email lparrish@iamerica.net *
* LDS-iAmerica, ISP * Email luke@ciscokid.iamerica.net *
* Network Engineer * Phone 1-800-789-6062 x3010 *
* AS 4958 * http://cust.iamerica.net/lparrish *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* The Internet is our friend. *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
References: