Re: Wireless Access Point and proxy server setup problem

Peter Dow (ML) wrote:

First, I'm no networking expert either. I probably have no good answer. I've been watching to see if anyone else has an answer; but since none has arrived in my inbox, I'll kick off a discussion.

DSL modem connects to Netgear router which has a static IP address of 10.1.1.1. Three of the NG router's 4 LAN ports are connected to a 1GB switch, a Netgear wireless access point (static IP address of 10.0.0.5) , and a fiber optic transceiver that connects to another campus. The proxy server PC has two network interface cards (NICs), both connected to the 1GB switch. The proxy server NICs have static IP addresses of 10.1.1.2 and 10.0.0.1. PCs on the LAN specify the proxy server (10.0.0.1) as their gateway, DNS server and proxy server.

Description _seems_ to match your diagram below.

DSL modem --> Netgear router (10.1.1.1) --> switch --> (10.1.1.2) proxy server
| | | |____________________| (10.0.0.1)
| | |
| | |_________ PCs (10.0.0.n)
| |
| |__________Netgear wireless access point (10.0.0.5)
|
|_________> FDDI -> FDDI -> hub -> PCs (10.0.0.n)
|
|
|_____Airport wireless repeater


Airport wireless repeater --> switch --> PCs (10.0.0.n)

The diagram _seems_ to have come through okay.

I hope that comes through. The intent is to isolate the initial Netgear router on its own subnet (10.1.1.n) so all the PCs have to go through the proxy server to get to it.

Here's where I get lost.

I don't exactly see how the parts that you say are working work. My first thought is that few of the parts should be able to connect with others.

I am confused by the subnetting.

I had started to get an understanding of how things work, but your assertion makes me want to toss what I thought I knew out.

Part of my understanding has been based in the supposed standard that 10.x.x.x addresses are /non-routable/. That's supposed to be fundamental and is supposed to be why such addresses can be reused by each of us in our own local networks.

But you're asserting that you have a router in a 10.1.x.x subnet that successfully routes addresses in 10.0.x.x subnets.

I'd rethink things if I were setting this up.

I'm waiting harder now for someone that clear it up -- why there are working subnets in this.

Everything works fine except the Netgear wireless access point. PCs that connect via this device are unable to see anything on the LAN, including the proxy server.

If I attach the Netgear AP to the same 1GB switch the proxy server is connected to, it works fine.

The switch I can /kind of/ accept. I don't really know what switches actually do as far as choosing what port a packet should go out. I've kind of assumed that they simply send all packets out the uplink port whenever they don't match the addresses that have made themselves known at initial connection time (or however things make their presence known to switches.)

But I would expect the router simply to discard such packets if they're from a non-routable address.

Wish I could give an authoritative answer instead of adding more questions. I like this kind of thread starting here. It's such a great area where we can learn stuff without broadcasting to the world how limited our (my) knowledge is.

Tom Liotta