[LARTC] PPPoE w/ "static" /29 ip range, how is it done?

[LARTC] PPPoE w/ "static" /29 ip range, how is it done?

[Dan]

Hello everyone, I hope this is on-topic for the list...

I'm familiar with NAT, but I can't see how to route a fully routed LAN.  
My new ISP has given me a /29 (I understand this to be 6 addresses + 
network address + broadcast address) which I would like to use, as 
multiple PCs here want to use p2p and games at the same time, and 
reconfiguring the port forwarding all the time is getting pretty silly.  
I'd also like the experience, since I've been messing with traffic, IDS 
and NAT for a while and I'm more interested in larger networks career 
wise, and they are typically not NATed.

So how do I do this?  Do I have to rewrite all the iptables/ipchains 
myself?  Can e-smith or freesco or ipcop understand what I'm doing?

Is there a way to test that the ISP is correctly routing the /29 traffic 
to the IP I get for the external link?  I suspect anything I may do will 
be a waste of time if the ISP is misconfigured on their end.

My early scratchings around the net indicate that "real" firewalls don't 
want pppoe, and pppoe distros want to do NAT.  There's also a lot of 
discussion about how pppoe sucks compared to static IP but here in 
Australia the economics don't work so well....

Any help, advice or abuse would be welcome!



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] PPPoE w/ "static" /29 ip range, how is it done?

[mjoachimiak]

The first thing to do more complicated things you should change your
distribution to full linux, not fresco or something like that. I've been
trying to do raw routing on fresco a few months ago. It is much more
complicated than on full distro. To much automatization.

----- Original Message ----- 
From: "Dan" <drose@dtlm.homelinux.net>
To: <lartc@mailman.ds9a.nl>
Sent: Saturday, August 28, 2004 9:09 AM
Subject: [LARTC] PPPoE w/ "static" /29 ip range, how is it done?


> Hello everyone, I hope this is on-topic for the list...
>
> I'm familiar with NAT, but I can't see how to route a fully routed LAN.
> My new ISP has given me a /29 (I understand this to be 6 addresses +
> network address + broadcast address) which I would like to use, as
> multiple PCs here want to use p2p and games at the same time, and
> reconfiguring the port forwarding all the time is getting pretty silly.
> I'd also like the experience, since I've been messing with traffic, IDS
> and NAT for a while and I'm more interested in larger networks career
> wise, and they are typically not NATed.
>
> So how do I do this?  Do I have to rewrite all the iptables/ipchains
> myself?  Can e-smith or freesco or ipcop understand what I'm doing?
>
> Is there a way to test that the ISP is correctly routing the /29 traffic
> to the IP I get for the external link?  I suspect anything I may do will
> be a waste of time if the ISP is misconfigured on their end.
>
> My early scratchings around the net indicate that "real" firewalls don't
> want pppoe, and pppoe distros want to do NAT.  There's also a lot of
> discussion about how pppoe sucks compared to static IP but here in
> Australia the economics don't work so well....
>
> Any help, advice or abuse would be welcome!
>
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/