Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

Router - TG582N - Mixed NAT: Difference between revisions

Content deleted Content added
Adsb (talk | contribs)
m Mention that 3G fallback might get broken by specifying the outside address
Reedy (talk | contribs)
clean up
 
(4 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[Image:T582-small.png|link=:Category:Router_TG582N|Got to Main TG582N Page]]
[[Image:T582-small.png|link=:Category:Router TG582N|Got to Main TG582N Page]]


This is how to configure a Technicolor gateway with two subnets on its
This is how to configure a Technicolor gateway with two subnets on its
local network such that one gets translated and the other does
local network such that one subnet gets its addresses translated by NAT and the other
subnet does not get NATed. Or, looking at it differently, adding a subnet of (e.g.)
not. This configuration is not recommended, far better to use a real
RFC1918 addresses which will be NATed on a router with an existing routeable IP block setup.

Mixed NAT is not recommended, far better to use a real
router made out of FireBrick, BSD or Linux that gives proper control of things
router made out of FireBrick, BSD or Linux that gives proper control of things
on an address level rather than on an interface.
on an address level rather than on an interface level.


Firstly, you need to put a public address on the Ethernet interface.
Firstly, you need to put a public address on the Ethernet interface.
Line 34: Line 37:
this needs to be added for each of the public addresses that have been
this needs to be added for each of the public addresses that have been
assigned. Thankfully these days only small blocks are obtainable.
assigned. Thankfully these days only small blocks are obtainable.
''[Actually according to an application note it is possible to specify address ranges, e.g.''
:nat mapadd intf=Internet type=nat outside_addr=192.0.2.[2-6] inside_addr=192.0.2.[2-6]
''but your author doesn't have enough routeable addresses to check that this works.]''

== Firewalling ==


There is still a problem, however, if you want to allow unfettered
There is a problem, however, if you want to allow unfettered access inbound
access inbound to that address -- it will get caught by the stateful
to the routeable address(es) -- it will get caught by the stateful
firewall. Again there appears to be no way to selectively disable the
firewall. Again there appears to be no way to selectively disable the
keeping of state, so it must be turned off globally:
keeping of state, so it must be turned off globally:
Line 81: Line 89:
AAISP's Broadband Backup product you'll be OK though.
AAISP's Broadband Backup product you'll be OK though.


==Other pages regarding this router:==
==Other pages regarding this router==
<ncl style=bullet maxdepth=5 headings=bullet headstart=2 showcats=1 showarts=1 showfirst=1>Category:Router TG582N</ncl>
<ncl style=bullet maxdepth=5 headings=bullet headstart=2 showcats=1 showarts=1 showfirst=1>Category:Router TG582N</ncl>




[[Category:Router TG582N]]
[[Category:Router TG582N|Mixed]]
[[Category:Router]]