Re: fake static IP; SBC; Netopia; VPN and NAT

["Jerome Draper" <jdraper@xxxxxxxxxxxxx>]

This pertains to SBC SDSL service only.

Jerry

----- Original Message -----
From: Chuck Morehead <cbmorehead@nokuse.com>
To: <midrange-l@midrange.com>
Sent: Wednesday, March 06, 2002 11:32 AM
Subject: Re: fake static IP; SBC; Netopia; VPN and NAT


> Jerome,
>
> I'm a little confused about what you are saying.  We use, and have clients
> using, SBC's aDSL offering with NAT.  SBC offers static IP addresses, i.e.
> public IP's, that you can use as needed.  E.g. you might assign a public
IP
> to the router and have it use NAT to use private IP's inside the LAN.  And
I
> have never had a problem connecting to a client's VPN, even though we have
> this scenario.  The only problem I have ever had was that I had to
> reconfigure the router that SBC provided to a client so that it would work
> with their firewall and VPN appliance - but I expected this since their
> techs won't configure the LAN side of the router anyway, just the WAN side
> so that they can test.
>
> Perhaps I am missing part of your problem.  Could you expand on what your
> configuration is and where you are having problems?
>
> Chuck
>
>
> ----- Original Message -----
> From: "Jerome Draper" <jdraper@trilosoft.com>
> To: <midrange-l@midrange.com>
> Sent: Wednesday, March 06, 2002 12:10 PM
> Subject: fake static IP; SBC; Netopia; VPN and NAT
>
>
> > SBC fake static IP address:
> >
> > For those interested in VPN and the requirement for static IP I have
> > finished trudging my way through a morass spun by SBC.  Althought their
> lit
> > says they offer static IP's they really don't.  The static IP's the
> "offer"
> > are inside my customer's LAN which is useless as the customer uses NAT
and
> > private addresses inside.
> >
> > To check whether a Netopia DSL router (in this case an R3100T) is using
> > "fake" IP addresses do the following from the quick menus:
> >
> > Under user profile <internet>, if you see the IP address 127.0.0.2 you
> know
> > that this is Netopia's way to ask for a userid/pw for chap
authentication
> > instead of an IP address for authentication; In this case the router
gets
> it
> > 's IP address from a server (in SBC's case a Radius server) instead of
as
> > defined in the router.
> >
> > You cannot do either NAT or VPN with this setup.
> >
> > Hoping to save others from the fray.
> >
> > Jerry
> >
> >
> >
> > Jerome Draper, Trilobyte Software Systems, since 1976
> > Network and Connectivity Specialist -- Mac's, LAN's, PC's, Linux, Sun,
and
> > iSeries
> > Representing Synapse, Nlynx, Perle, CLI, Intermate and Others .....
> > http://www.trilosoft.com - (415) 457-3431 - (415) 258-1658fax -
> > jdraper@trilosoft.com
> >
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>