Re: public ip on LAN

[Michael Gale <mgale@utilitran.com>]

I have never used VoIP .. but would it not be easier to setup a separate box with a VPN server and all the needed software ... of place it on the firewall box .. but a separate one is nice ... then have the clients use it for VPN access and tunnels ?

Michael.


On Fri, 02 Jan 2004 12:31:24 -0500
"John A. Sullivan III" <john.sullivan@nexusmgmt.com> wrote:

> Are these users running VoIP and others through a VPN tunnel and the
> problem is using NAT on an IPSec tunnel or are they using VoIP AND an
> IPSec VPN tunnel and each presents a problem.  If it is just using NAT
> and an IPSec VPN, investigate using NAT Traversal.  Otherwise, if you
> cannot find an application proxy or an iptables helper for every
> application they want to use, you may be stuck with DNAT and SNAT for
> those users - John
> 
> On Fri, 2004-01-02 at 12:40, Amit Pasari wrote:
> > Dear Antony,
> > 
> > 1. Do your clients *really* need public IPs on the machines themselves, or is
> > it sufficient if you use NAT and ensure that packets to some public IP reach
> > a specific client, and packets from that client have the public IP when they
> > return to the Internet?   What protocols / services are you using which
> > require public IPs on the client machines?
> >  >>
> > Well my clients wants to use Voip / Webserver and other VPN applications .
> > So they need public ip .
> > 
> > 2. We can't answer your question in any detail without more information about
> > the topology of your network, in particular whether your ISP provides a small
> > subnet to you, terminated at your netfilter machine, or whether that subnet
> > block can be routed across the netfilter machine so that thLet me explain
> > on My LAN i have ip address - 172.16.1.1
> > subnet - 255.255.0.0
> > on My WAN i have ipaddress - 203.122.51.178
> > subnet - 255.255.255.240
> > 
> > Yes i have read many  things , but didn't find the solution.
> > 
> > Regards
> > Amit
> -- 
> John A. Sullivan III
> Chief Technology Officer
> Nexus Management
> +1 207-985-7880
> john.sullivan@nexusmgmt.com
> 
> 


-- 
Michael Gale
Network Administrator
Utilitran Corporation