<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.12.3">
</HEAD>
<BODY>
On Mon, 2007-04-16 at 21:02 -0400, Barry Siegfried wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">["(Skip) K8RRA" <<A HREF="mailto:k8rra@ameritech.net">k8rra@ameritech.net</A>> wrote]:</FONT>
<FONT COLOR="#000000">> OK Barry - I believe I better understand / here is a little</FONT>
<FONT COLOR="#000000">> clarification for you...</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> On Mon, 2007-04-16 at 09:15 -0500, Barry Siegfried wrote:</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> > ["(Skip) K8RRA" <<A HREF="mailto:k8rra@ameritech.net">k8rra@ameritech.net</A>> wrote]:</FONT>
<FONT COLOR="#000000">> ></FONT>
<FONT COLOR="#000000">> > > It is exactly what happened on my site.</FONT>
<FONT COLOR="#000000">> > ></FONT>
<FONT COLOR="#000000">> > > The http query arrived on asy from the radio and the server response</FONT>
<FONT COLOR="#000000">> > > departed tun on it's way into cyberspace.</FONT>
<FONT COLOR="#000000">> ></FONT>
<FONT COLOR="#000000">> > Why is that? Why could not the return path from the web server</FONT>
<FONT COLOR="#000000">> > to the browsing client be via the radio?</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> Routing...</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> The request came from 66... (not 44...)</FONT>
<FONT COLOR="#000000">So you're saying the client request came in over the internet?</FONT>
<FONT COLOR="#000000">I'm confused here.</FONT>
<FONT COLOR="#000000">> The remote browser [and mine is similar] is serviced by the host</FONT>
<FONT COLOR="#000000">> stack (66...), not the jnos stack (44...).</FONT>
<FONT COLOR="#000000">What is a "host" stack? By "host" do you mean Linux... with a TUN</FONT>
<FONT COLOR="#000000">device to a JNOS program? And whose JNOS stack? Again I am quite</FONT>
<FONT COLOR="#000000">confused.</FONT>
</PRE>
</BLOCKQUOTE>
Try this model:<BR>
Site A (me):<BR>
Host A1 / Linux: static 192.168.1.32 IP + jnos 44.102.132.20 <BR>
LAN to Internet bridge appliance: LAN IP 192.168.1.254 + WAN IP 24... dynamic<BR>
Host A2 / any O/S: dynamic LAN IP 192...<BR>
Site B (him):<BR>
Host B1 / Linux: resident Internet bridge 66... dynamic IP eth0, + static 192...? ip eth1, + jnos 44.102.132.42<BR>
Host B2 / any O/S; ...<BR>
<BR>
Both hosts A1 and B1 have two network stacks resident on them - a host stack and a jnos stack (total: four stacks in the model).<BR>
Both jnos A and jnos B have httpd server "on".<BR>
The path A to B is restricted to radio - no path is developed via Internet.<BR>
<BR>
A browser client on host A1 seeking the jnos http server on B1 creates a packet with FROM IP 192.168.1.32.<BR>
A browser client on host B1 seeking the jnos http server on A1 creates a packet with FROM IP 66...<BR>
It is my presumption that the B1 packet gets FROM IP 66... by virtue of interface assignment order during boot. The B1 packet FROM IP 192...? could also be valid but has not been seen.<BR>
<BR>
HOWEVER:!<BR>
Remember that the choice of IP 66... or 192... for the FROM IP is a secondary issue - the primary issue is that the FROM IP is NOT 44....<BR>
When I attempt to access the jnos http server B from host A1 or A2, I become dead meat because my private C IP does not propagate over the 44... network. That's the "rule" about privacy - right?
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">> So the FROM IP is a 66... address. My jnos can't legit route IP 66...</FONT>
<FONT COLOR="#000000">> out the radio.</FONT>
<FONT COLOR="#000000">Why not? Where in the rules does it say you can't do that</FONT>?
</PRE>
</BLOCKQUOTE>
OK - strictly speaking with the above model I CAN [and I DID only to prove a point].<BR>
The solution is rejected because the model is only a (happy?) accident - the Site A portion of the model is my "norm",<BR>
AND the rule about *private subnet* prevents success at routing site A client requests over network 44... to remote servers.<BR>
<BR>
So far - only NAT seems to offer a solution - and NAT is not in use yet in the amateur context?<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">Ok. Then is what you need dynamic IP *routing* in JNOS so that it</FONT>
<FONT COLOR="#000000">can detect a downed RF path and switch to the internet automagically?</FONT>
<FONT COLOR="#000000">To the best of my knowledge nobody has yet ported BGP to any NOS.</FONT>
</PRE>
</BLOCKQUOTE>
You bring up a related subject for me in that question.<BR>
In the future I would like to believe I could define two paths from my LAN to remote locations for redundancy.<BR>
I agree with you that parallel paths seem not readily available to us yet.<BR>
<BR>
As a parting thought Barry;<BR>
Remember this conversation is pointed at defining a *representative* set of configuration examples for documentation on the wiki. It is my desire that the wiki example might be used like a cut-and-paste to create new config files while changing a site.<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<BR>
73<BR>
de [George (Skip) VerDuin] K8RRA k
</TD>
</TR>
</TABLE>
</BODY>
</HTML>