[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: how do i NAT a legacy network ?



In article <[🔎] 002b01bf108b$dfa9a9c0$2200a8c0@linux.gtsl.co.in> you write:
>An interesting problem...
>
>we have a legacy network which has IPs : 95.x.x.x ( NOT REGISTERED, i.e illegal)
>that we can't change now !!! ( those network enginners of 1994,when the network
>was installed; obviously did not know about rfc1918  )
>
>now we want to connect this network to the Internet... we cannot re-number our
>network... so i looked at using a linux box with NAT ...that should be straight
>forward ... right ? wrong ! hey this is fun !!
>
>and i am a bit confused...
>
>NAT -- for 2.0.36 and 2.2.x is available ... but it does NOT support "Dynamic
>NAT" i.e. 95.x.x.x NATed behind ONE IP
>(http://www.csn.tu-chemnitz.de/HyperNews/get/linux-ip-nat.html)
>It does support static NAT though ... it should be good to NAT our internal web
>server with a Legal IP.... (any comments ?)
>
>The new NAT code IPROUTE in the  2.3.x kernels requires iproute ... whose docs
>are not good enough for me(anybody care to explain ?)... and then the code is
>still very alpha...

I dont know anything about NAT code, other then...

>IP MASQ supports network NAT very well....but the docs say that we have to use
>only private IPs..... so .. can i use IP MASQ to hide my 95.x.x.x network also
>??

This is what I would do. The only possible problem I can imagine is
if you try to connect to the Internet host that really does have the
address 95.x.x.x (you would get the host on the local network instead).

-- 
Brian May <bam@snoopy.apana.org.au>


Reply to: