Hi David,
Thanks for your prompt response.
Option two looks hopeful. The DMZ`ed computer is an always-on server that is serving content to the internet. Would it be possible to only route the IPIP packets while leaving everything else for the server? How could that be done?
73!, Augustine, W8AWT On 3/23/2017 4:03 PM, David Ranch wrote:
(Please trim inclusions from previous messages) _______________________________________________
Most consumer grade "routers" and their DMZ feature will only support a single IP address. As such, only ONE computer will be able to receive the IPIP packets. As such, I see that you have a few options:
- Use a VPN to tunnel IPIP traffic into your system (no DMZ access
needed; possibly no port forwards required either). Can be an SSL-VPN, IPSEC VPN, etc. Search the archives here in this list to see who's offering such services for free or options with commercial providers
- You don't mention what kind of computer your brother is running
but if it can enable routing on it, you should able to configure his machine to accept and FORWARD the IPIP packets to your machine. This obviously will mean that his machine will need to be turned on and working when you want to use the AMPR network
- Replace your router with a device that supports more advanced
routing. This could be anything from a home brewed Linux/Free/OpenBSD computer with a few network ports, a Microtik router, RouterBoard computer, a Cisco/Juniper/etc commercial router, etc. You'll find lots of users on this AMPR list doing things this way with a variety of devices.
4 .don't use IPIP for your connection to the AMPR system. Instead use AXUDP to develop communications to remote stations. This will require port forwards on your router to work. It should be noted that not all stations support AXUDP as a forwarding mechanism so you will be limiting your access to the AMPR system
There might be other options out there that people can comment on here too!
--David KI6ZHD