<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Passive FTP works fine.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Please note that SE doesn’t support
ALG in NAT, for those subscribers who need VPNs you would have to assign real
IP for instance.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Cheers,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>/denis<o:p></o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Navin Nepali
[mailto:navin_n@yahoo.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Saturday, October 02, 2010
10:44 AM<br>
<b><span style='font-weight:bold'>To:</span></b> Michal Korzeniowski; <st1:PersonName
w:st="on">Denis Mikhaylovskiy</st1:PersonName><br>
<b><span style='font-weight:bold'>Cc:</span></b> <st1:PersonName w:st="on">redback-nsp@puck.nether.net</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [rbak-nsp] Nat
does'nt work</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0>
<tr>
<td valign=top style='padding:0cm 0cm 0cm 0cm'>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>I was wondering if IPSEC VPN and FTP works well if
we use NAT?<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>Before I was also using NAT but the services like
VPN, FTP didn't work well as the subscriber increased. The users were not
able to connect VPN or FTP.<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>Thanks<br>
<br>
--- On <b><span style='font-weight:bold'>Sat, 10/2/10, <st1:PersonName w:st="on">Denis
Mikhaylovskiy</st1:PersonName> <i><span style='font-style:italic'><<st1:PersonName
w:st="on">denis.mikhaylovskiy@ericsson.com</st1:PersonName>></span></i></span></b>
wrote:<o:p></o:p></span></font></p>
</div>
<blockquote style='border:none;border-left:solid #1010FF 1.5pt;padding:0cm 0cm 0cm 4.0pt;
margin-left:3.75pt;margin-top:5.0pt;margin-bottom:5.0pt'>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><br>
From: <st1:PersonName w:st="on">Denis Mikhaylovskiy</st1:PersonName> <<st1:PersonName
w:st="on">denis.mikhaylovskiy@ericsson.com</st1:PersonName>><br>
Subject: Re: [rbak-nsp] Nat does'nt work<br>
To: "Michal Korzeniowski" <misha@iim.pl><br>
Cc: "<st1:PersonName w:st="on">redback-nsp@puck.nether.net</st1:PersonName>"
<<st1:PersonName w:st="on">redback-nsp@puck.nether.net</st1:PersonName>><br>
Date: Saturday, October 2, 2010, 11:01 AM<o:p></o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>Hi Michal,<br>
<br>
Your interface has /24 and addresses in pool overlap this.<br>
<br>
Regarding your config in general.<br>
In NAT pool we usually put real IP addresses, it allows your private networks
to be NATed through real IPs. <br>
<br>
<br>
<br>
HIH<br>
/denis<br>
<br>
-----Original Message-----<br>
From: Michal Korzeniowski [mailto:<a
href="http://us.mc1127.mail.yahoo.com/mc/compose?to=misha@iim.pl"
ymailto="mailto:misha@iim.pl">misha@iim.pl</a>] <br>
Sent: Friday, October 01, 2010 5:49 PM<br>
To: <st1:PersonName w:st="on">Denis Mikhaylovskiy</st1:PersonName><br>
Cc: <a href="http://us.mc1127.mail.yahoo.com/mc/compose?to=misha@iim.pl"
ymailto="mailto:misha@iim.pl">misha@iim.pl</a>; <a
href="http://us.mc1127.mail.yahoo.com/mc/compose?to=redback-nsp@puck.nether.net"
ymailto="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
Subject: RE: [rbak-nsp] Nat does'nt work<br>
<br>
<br>
> Second)<br>
> Ip address in NAT pool should not overlap with others ip addresses of<br>
> interfaces<br>
<br>
maybe I think wrong but they are no overlaps:<br>
- ip addr of interface is 10.11.12.1<br>
- ip addr of pool are 10.11.12.2 to 100<br>
<br>
<br>
> ip nat pool NAT_pool napt multibind<br>
> address 10.11.12.2 to 10.11.12.100 <--- why you are
using private space<br>
> for NAT ?!?<br>
<br>
Which space should I use?<br>
My Idea is to distribute the internet "from" one public IP
83.142.192.100 <br>
to subscribers ( giving them private space 10.11.12.0/24 like simply<br>
router from super markt)<br>
<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a
href="http://us.mc1127.mail.yahoo.com/mc/compose?to=redback-nsp@puck.nether.net"
ymailto="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><o:p></o:p></span></font></p>
</div>
</blockquote>
</td>
</tr>
</table>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>