make sure any internet bound traffic is NATted (masquerade it)
Leon WA4ZLW
On 10/4/2016 5:29 PM, Christopher S. Munz-Michielin wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Hey all,
I've been trying to configure a Mikrotik router to allow devices
connectivity to the Amprnet and have been running into a bit of a
snag. First off here's what my architecture looks like:
Internet------------->Edge Router------------>AMPR
Mikrotik------------->Devices
I have a public IP on the edge router and a static /29 of public IPs
between the Edge router and the AMPRNet router. I have confirmed I
have external access to the AMPRNet router's public IP.
I followed the guide outlined by Marius here:
http://www.yo2loj.ro/hamprojects/ampr-gw-README.txt and have the
following WORKING as expected:
1) connectivity from the Internet to my router's 44 IP (44.135.193.129)
2) connectivity to/from the AMPRNet to my router's 44 IP
3) connectivity to/from the AMPRNet to devices behind my router
(44.135.193.18)
What is not working is connectivity from the Internet to devices
behind the router; i.e. I am unable to PING these devices from the
Internet and am unable to access any Internet resources from these
devices. If I add a layer of NAT at the AMPR router, the end devices
CAN access the Internet, as the source IP is concealed and appears to
UCSD to be that of the 44 IP of my router (44.135.193.129).
I have also tried to add an additional 44 IP to my ampr-gw IPIP
interface (44.135.219.130/8) but am also unable to PING that IP from
the Internet. When I look at a packet capture on the router I do not
see any packets destined for this second IP making it to the router at
all.
Is there something special that needs to be done in order to
facilitate routing to more then one 44 IP via the UCSD tunnel?
Cheers,
Chris
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net