From mboxrd@z Thu Jan 1 00:00:00 1970 From: Axel Neumann Subject: Re: [B.A.T.M.A.N.] two-way-tunnel quirks Date: Tue, 4 Dec 2007 10:05:46 +0100 References: <20071130232852.GC3934@apoderado.ometepe.net> <200712021954.24310.axel@open-mesh.net> <20071204040309.GA3827@apoderado.ometepe.net> In-Reply-To: <20071204040309.GA3827@apoderado.ometepe.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-6" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200712041005.46329.axel@open-mesh.net> Reply-To: The list for a Better Approach To Mobile Ad-hoc Networking List-Id: The list for a Better Approach To Mobile Ad-hoc Networking List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: The list for a Better Approach To Mobile Ad-hoc Networking Hi, On Dienstag 04 Dezember 2007, Jan Hetges wrote: > Hi Axel > > On Sun, Dec 02, 2007 at 07:54:24PM +0100, Axel Neumann wrote: > > ... > > > > > > - Can you describe it in way that i can reproduce it ? > > > > > > A---B---C > > > > > > A: your computer > > > > > > B: bmxd_rv804 client node } > > > }running 2-way-tunnel > > > C: bmxd_rv804 gw node } > > > > I am just curious, can you confirm if the following correctly > > describes the HNA/SNAT of your setup: > > > > for the two-way-tunnel setup: > > - you were doing SNAT at Cs' upstream interface AND at Bs' bat0 > > interface > > MASQUERADE > > > for the one-way tunnel setup: > > - you are only doing SNAT at Cs' upstream interface > > no, i still do MASQUERADE also on Bs' bat0, because i was too lazy to > comment it out ;-) Interesting to know that this is possible, because (as I understand): - Internet Uplink packets are MASQUERADEd (*) when being entunnelled at Bs' bat0 interface and a second time at your upstream GW interface A B C eth0 eth0 bat0 bat0 dsl0 Internet >---------->*===============>*---------> MASQUERADE MASQUERADE - Downlink packets are de-MASQUERADED (*) at Cs' upstream interface (dsl0). But using one-way-tunnel, the Downlink packets are NOT routed via the bat-tunnel, therefore downlick packets will not come out of Bs' bat0 interface and (I thought) would not be de-MASQERADEd (?) ! A B C eth0 eth0 wlan0 wlan0 dsl0 Internet <---------- > > - and additionally an HNA announcement by B for the address used by A > > yes, but also with 2-way-tunnel (because i want net internal routing) > > cheers > > --Jan