[ale] Network "What do I need?" Question

[James P. Kinney III]

Hi John,

I would look at a Linux box running NAT with 2 NIC's. One side has a
"real" address and talks tot he router, the other side has a 192.168.
number and translates to the private side. Depending on the traffic
volume you can get by with 128M RAM running on an Intel PIII 500MHz or
higher. Minimal hard drive (1G is more than enough). Cheap graphics,
too. 

This can also double as web proxy to cut down some on the outbound
traffic.

On Sat, 2001-09-15 at 11:05, John Mills wrote:
> ALErs -
> 
> I am looking for a simple approach, preferably for an off-the-shelf product to help with a system integration problem.
> 
> Background:
> We have about 10 items comprising a LAN setup. Several are Win2K boxes, mass memory with automatic backup/capture cycles, time service, and a couple of others. They are tied throug a generic 10/100 switch and ulitimatel will live at fixed IP addresses behind a router to a T1 line, roughly speaking.
> 
> We have preassigned IP address blocks and we wish to configure, integrate, test, and ship the equipment using its ultimate IP addresses. (The Win2K items could naturally be loaded with */HOSTS files, but this is not convenient for some of the units.
> 
> The [Cisco] router will manage firewalling, etc. in the final installation.
> 
> Problem:
> Our development environment is not on a T1 line, but on 10/100 Enternet behind corporate firewalls, DHCP servers, etc. Our assigned IP addresses are not compatible with this setup (being the usual '168.192.xxx.yyy', though we can get known IPs in the local net. At least one of the hosts must work to our corporate net, and also to the other units.
> 
> I supposed we could drop an Ethernet interface card into the Cisco router in place of the T1, and let it translate from corporate to assigned address spaces, but I have yet to find the proper card.
> 
> I expect I could set up a Linux host to translate between one set of addresses and the other - I don't know if 'masquerading', 'bridging, or 'forwarding' is the more appropriate name - but I would be much better off if I could find a cheap, off-the-shelf unit which would remap my equipment's IP addresses between the LAN and the corporate net. Time is a priority here, so anything purchased has a big advantage over anything we cobble together.
> 
> Any suggestions?
> 
> Thanks.
> 
> Regards,
>  John Mills
> --
> To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.
-- 
James P. Kinney III   \Changing the mobile computing world/
President and COO      \          one Linux user         /
Local Net Solutions,LLC \           at a time.          /
770-493-8244             \.___________________________./

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org
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=ml1h
-----END PGP PUBLIC KEY BLOCK-----

 PGP signature