Re: Nat & Port forwarding
Tommi Kyntola <[email protected]> Wed, 21 Apr 2004 13:24:37 +0300
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <[email protected]> |
[email protected] wrote: > > Hi, > I'm trying to use cipe between 2 Linux servers, one with static > public IP address(server1), and another that connects to the > Internet via NAT with dinamic public address(server2). > > I wanted to know if I should enabled port-forwading in my NAT > router to my cipe server2 that has a private address. Port-forwarding is not necessary, with dynip turned on from the server side cipe config you can just aswell masquerade the ports as usual. Other (but not as flexible and redundantly complex) solution is to do port forwarding without the dynip and the set the peer to match the port forwarded machine, but I certainly don't recommend this, because it's far more easier with dynip turned on. After that it doesn't matter where your machines connect to the server. > I have setup my server1 to listen only, that is, its peer address > is 127.0.0.1:9 Well, with dynip turne on it doesn't matter what you have there. 0.0.0.0 will do just fine, too. > As far as I understand, server2 will connect to server1 and > then, server2 will run the ping command in order to server1 > to optain the IP address of server2. you should set dynip 1 in you server1 config and set the server2 to ping 60 (or whatever suits you. > Is this correct? Yes, but you musn't forget the dynip setting from the public static server. > Many thanks > Oliver > > -- > Oliver Schulze L. > <[email protected]> > > > -- > Message sent by the [email protected] mailing list. > Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body > Other commands available with "help" in body to the same address. > CIPE info and list archive: > <URL:http://sites.inka.de/~bigred/devel/cipe.html> > -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>