Re: cipe real ip

On Wed, 1 Jun 2005 10:49:54 +0530 Robin Harwani <[email protected]> w=
rote:

> real ip is the ip which is not an internal ip in the network for=20
> e.g.10.10.1.1 is a internal ip of the network=20
> so can cipe be configured from such an ip.
> im new to vpn s as m into final year engineering and im doin a project on=
=20
> "remote server configuration on linux vpn ".

hi,

if your question is if it=B4s possible to connect a tunnel with cipe when t=
he external interfaces are behind routers,
your routers do something like NAT oder Adress-Translation, then here we go:

if you have no access to the router, simply use openvpn, it connects via TC=
P.

If you have access to the router, it is possible do do this with cipe,
you only have to forward cipe=B4s udp-port from the external interface to t=
he host the cipe peer is running at.

An example:

Your (internal) cipe-peer is at 192.168.32.253, the remote network is 192.1=
68.33.0/24
your cipe.conf looks like this:

device cipcb0
dynip
ptpaddr 192.168.33.253
ipaddr  192.168.32.253
cttl=3D64
me      0.0.0.0:19981
peer    cipe.remote.net:19981
maxerr -1

you now must forward all udp 19981 from your routers external interface to =
192.168.32.253:19981
your cipe hosts has to have a route to cipe.remote.net via the same router.
if your borderrouter is a linux box at 192.168.32.254, you could do this fo=
r exp. with:

EXTIF=3Dppp0
iptables -t nat -A PREROUTING -i $EXT_IF -p udp --sport 19981 --dport 19981=
 -j DNAT --to 192.168.32.253:19981

# on the cipe box:
ip route add cipe.remote.net via 192.168.32.254
ip route add 192.168.33.0/24 via 192.168.33.253 dev cipcb0

I have one peer like that running behind a dialup dsl line,
there are problems if the (in this case dynamically assigned) external ip c=
hanges.
I have a timed script running to force this change once a day in the early =
morning,
this script kills and restarts the tunnel at the same time.

By the Way, please, send your questions to the list,
there are some other opinions for sure.

ys
\B.

--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>