Real Time Ascend Maling List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Max 1800 to WinNT routing



What I don't understand is where your customer is putting the firewall.
NT is certainly not a good platform for it.
Cheers
James


Earl Smith wrote:
> 
> Thanks.  I got a similar suggestion yesterday and luckily our static IPs
> are on one /24 and pools are on another /24 so hopefully we can get this
> to work.
> 
> --On Thu, 27 Apr 2000 22:59:51 -0400, Troy Settle said...
> >
> > Earl,
> >
> > With most routers (cisco, ascend, 3com, etc..) and OSes (BSD, redhat,
> > debian, solaris, etc...), you can use the Radius profile you're familiar
> > with.
> >
> > Unfortunately, with NT as a router, you have to take special steps to get
> > things to work.  NT can not route between 2 interfaces that are on the same
> > subnet (or the same class-c).  Here's a profile that will work with NT:
> >
> > ntbox   Password="Isuck"
> >     Service-Type = Framed-User,
> >     Framed-Protocol = PPP,
> >     Framed-Routing = None,
> >     Framed-Address = 192.168.10.1,
> >     Framed-Route = "192.168.20.1/24 192.168.10.1 1",
> >     Ascend-Maximum-Channels = 2,
> >     etc....
> >
> > This sucks in general, but sucks most specifically for those young ISPs with
> > only a single /24 to play with.  They end up having to use private addresses
> > for the Framed-Address.
> >
> >
> > G'luck,
> >
> > -Troy
> >
> > PS:  This might be a given, but I think it's worth mentioning that the NT
> > box really should have RRAS installed (as opposed to normal RAS).
> >
> >
> >
> > ** -----Original Message-----
> > ** From: owner-ascend-users@max.bungi.com
> > ** [mailto:owner-ascend-users@max.bungi.com]On Behalf Of Earl Smith
> > ** Sent: Thursday, April 27, 2000 7:09 AM
> > ** To: jcdutton@lucent.com
> > ** Cc: ascend-users@bungi.com
> > ** Subject: Re: (ASCEND) Max 1800 to WinNT routing
> > **
> > **
> > ** Thanks for the info.  I looked at the ascend notes at freeradius.org and
> > ** have one last thing to try on this end and that is changing the 0.0.0.0
> > ** below to his interface address.
> > **
> > ** --On Thu, 27 Apr 2000 11:53:32 +0100, James Courtier-Dutton said...
> > ** > Your customer will have to adjust his end, and manually put in the
> > ** > default gateway. When one changes IP address, one also has to
> > ** change the
> > ** > default gateway to point to the new address.
> > ** > There is nothing your end which will set his default gateway. PPP does
> > ** > not allow for it.
> > ** > Just ask your customer to go into the static route settings and adjust
> > ** > it.
> > ** > Cheers
> > ** > James
> > ** >
> > ** >
> > ** > Earl Smith wrote:
> > ** >>
> > ** >> I have a customer that has been using a Pipe15 and NT to connect his
> > ** >> small network to another provider and is moving to us.  Everything
> > ** >> worked fine at the previous provider but I cannot get him connected.
> > ** >>
> > ** >> Here is his entry in our users file:
> > ** >>
> > ** >> # For ISDN MP users
> > ** >> DEFAULT Group = "MP", Simultaneous-Use = 2
> > ** >>  Fall-Through = 1
> > ** >>
> > ** >> puser            Auth-Type = System
> > ** >>          Service-Type = Framed-User,
> > ** >>          Framed-Protocol = PPP,
> > ** >>          Framed-IP-Address = XX.XX.XX.193,
> > ** >>          Framed-Route = "XX.XX.XX.192/29 0.0.0.0 1",
> > ** >>          Framed-IP-Netmask = 255.255.255.248,
> > ** >>          Framed-MTU = 1500,
> > ** >>          Fall-Through = No
> > ** >>
> > ** >> He can connect and get the 193 address, I look in the 1800's routing
> > ** >> tables and the route is there but on his end he doesn't have a gateway
> > ** >> and therefore cannot go anywhere.  I tried adding
> > ** Ascend-Client-Gateway
> > ** >> = XX.XX.XX.192 and XX.XX.XX.193 and the NAS address.  We've tried
> > ** >> server assigned and static IP settings in DUN for the connection.
> > ** >>
> > ** >> This setup is identical to my 3COM OC, Cisco and Pipe50
> > ** users.  What am
> > ** >> I missing ?  I find it is hard to believe there is a problem on
> > ** >> his end as all he is doing is changing IP addresses from one subnet to
> > ** >> another.
> > ** >>
> > ** >> --
> > ** >> Regards,
> > ** >>
> > ** >> Earl
> > ** >>
> > ** >> ****************************************************
> > ** >> Earl Smith  Systems Administrator  Parkcity Net
> > ** >> Off: (435) 658-2398 x 204      Fax: (435) 658-0702
> > ** >>         PO Box 980654, Park City, UT  84098
> > ** >> ***************************************************
> > ** >> ++ Ascend Users Mailing List ++
> > ** >> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> > ** >> To get FAQ'd:   <http://www.nealis.net/ascend/faq>
> > ** >
> > **
> > ** ---End reply
> > **
> > ** --
> > ** Regards,
> > **
> > ** Earl
> > **
> > ** ****************************************************
> > ** Earl Smith  Systems Administrator  Parkcity Net
> > ** Off: (435) 658-2398 x 204      Fax: (435) 658-0702
> > **         PO Box 980654, Park City, UT  84098
> > ** ***************************************************
> > **
> > **
> > **
> > ** ++ Ascend Users Mailing List ++
> > ** To unsubscribe:  send unsubscribe to ascend-users-request@bungi.com
> > ** To get FAQ'd:    <http://www.nealis.net/ascend/faq>
> > **
> >
> 
> ---End reply
> 
> --
> Regards,
> 
> Earl
> 
> ****************************************************
> Earl Smith  Systems Administrator  Parkcity Net
> Off: (435) 658-2398 x 204      Fax: (435) 658-0702
>         PO Box 980654, Park City, UT  84098
> ***************************************************
> 
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:   <http://www.nealis.net/ascend/faq>
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>