Strange networking situation with strange terminology

maiku

Recently I've gotten a T1 service. The T1 company installed a router called the "Hatteras" and tell me to connect it to my system with a cross over cable. They sent me an e-mail with IP information and blocks of static IPs (as they should) but they sent me two gateways and a range outside of the first gateway. Here is the e-mail they sent.

ianw1974 · Posted: Thu Jul 23, 2009 8:24 pm Post subject:

Is one of the two gateways they sent you a router? And the other is a bridge?

If so, you'll be looking at something like this:

LAN Ports --> Router --> WAN Port --> Bridge Device --> Internet

I only think this if I compare it to my DSL service, since I have an ethernet modem which bridges the wan port to the ethernet port on this modem. I then connect this modem to the wan port on my firewall, and have an IP range I use internally for the LAN side of the firewall. It is all I can think of in similar respects to mine on how it should look. I don't have T1 here though, and never used it but the principal should be the same - I hope!
_________________
Ian Walker

Light travels faster than sound. This is why some people appear bright until you hear them speak.........

Linux Systems Limited | Masternode Monitoring

maiku · Posted: Thu Jul 23, 2009 9:08 pm Post subject:

Actually there is no router provided.

Here is the setup.

Hatteras (bridge) -- (connected using crossover) --> Linux server --> Internal net

I'm assuming what I'm supposed to do, is set up the WAN Eth with the first IP (the one I list as yyy.). Then set up certain machines internally with the xxx. addresses and have IP tables nat using a destination IP to the xxx IP address. I'm not sure if I'm making any sense really.
_________________
Michael

Inodoro_Pereyra · Posted: Fri Jul 24, 2009 2:10 am Post subject:

They want a real pure IP router. You are not supposed to do NAT on that router.

Your ISP is telling you:

Hatteras (bridge)-- (connected using crossover) --> [WAN SIDE] Linux server [LAN SIDE] --> Internal net

The lan side of your linux server needs to have:
LAN IP: xxx.48.167.129

Your dhcp server needs to lease:
Useable Range: xxx.48.167.130 to xxx.48.167.158
Subnet Mask: 255.255.255.224

Your DNS server (if is relaying), should do it to:
Primary DNS: xxx.254.95.2
Secondary DNS: xxx.231.41.2

After that you can lease real IP address for internal hosts.

If anyway you want to do NAT, The WAN side of your linux server should have:

IP address: yyy.156.96.10

Gateway: yyy.156.96.9

Subnet Mask: 255.255.255.252

Primary DNS: yyy.254.95.2

Secondary DNS: yyy.231.41.2

And the LAN side of your linux server does not matter at all, just use whatever you where using until now and that should work.

Cheers!
_________________
Mi Blog.

Si no fuera por C, estaríamos escribiendo programas en BASI, PASAL y OBOL.

maiku · Posted: Fri Jul 24, 2009 3:07 am Post subject:

So if I get this straight you are saying that I just need to set the WAN IP to the yyy series, then the LAN IP to the xxx series and set up the box as a router as I usually do? I just don't have to set up any MASQ rules in iptables for the WAN iface, I guess. Do I still have to enable net.ipv4.ip_forward?
_________________
Michael

ccp · n00b Joined: 14 Sep 2007 Posts: 62

ianw1974,

you said

maiku · Posted: Fri Jul 24, 2009 8:41 pm Post subject:

If you're talking to me the T1 connects to the Hatteras thing.
_________________
Michael

ccp · n00b Joined: 14 Sep 2007 Posts: 62

Maiku, I am sorry I guess check wrong frame. my question is direct to you.

Since you said it is connection to the Hatteras, I am guessing it is for data. so the other end of T1 is your other office or it is your ISP?

The reason I am asking is because base on the your early description it seems to me you already have internet connection through yous Linux server so I am not sure what is the T1 line is for.

My interpretation from the first post; I think this is what your vendor said,

maiku · Posted: Mon Jul 27, 2009 9:04 pm Post subject:

The server was set up on the yyy. IPs that you see above and that worked for the server. My question is, what do I do with the other IPs in the xxx series?
_________________
Michael

ccp · n00b Joined: 14 Sep 2007 Posts: 62

This is a little bit confusing, you said