Kirti:

Dial-In users: Your customers (dial-in clients) won't be "happy" with their private address (Joel noticed that too).
Some services will not be working correctly on users site: like some download p2p clients (maybe KaZaa, eDonkey,
possibly ftp too, etc.).

About ARC: once more I have to write this: your ARC will not connect to any site outside your network,
but it will send icmp replies like "ip address in not used now" (destination-host-unreachable).
I dont think that setting private address to ARC will make a problem.

About NMC: it depends on from where you will be managing your chassis. If you manage your chassis
from local network - you are free to set it private address (without further translating it tu public).

If you have only 4 T1s, you need ONLY 96 (maybe half of C-class, 128) IP addresses for dial-in users (dinamically assigned).

Kirti S. Bajwa wrote:
Alex:

Thanks for your reply. I think the following information further clarify my
earlier question:

(a) My network is for Dial-In customers only. In that case, is there any
problem if I use private addresses for ARC & NMC?

(b) I do have sufficient IP (255) addresses to use for Dial-In customers.
But using private IP addresses make it easy to program 3Com Chassis. I can
assign a private IP address to all modems whereas right now I have to assign
IP addresses to only 4-T1 (96 modems). I want to design the setup whereas
3Com Chassis might be located behind a firewall. The firewall server can
translate the private IP addresses to public IP addresses via masquerading.
This way if tomorrow, I switch the carrier providing the T1 & block of
public IP addresses, I have no changes to 3Com Chassis.

Do you get the picture? I will be more than happy to send a diagram
(Powerpoint) if somebody wants to further criticize my design.

Thanks again.

-----Original Message-----
From: alex [mailto:alex@wanex.ge] 
Sent: Tuesday, September 09, 2003 5:50 PM
To: Discussion relating to the 3Com/US Robotics Total Control modemsystems.
Subject: Re: [USR-TC] 3Com TC IP Numbering??

Hello Kirti.

1: You can assign private address for your arc, but for example
it wont be able to send icmp-destination-host-unreachable if
ip from dial-in pool is not used (this icmp packet with private
source address wont reach its destination). You can always limit
access to your arc with access-lists (better to do it on border routers
in your network).

You can freely set private address to NMC. Only you use it.

P.S. Don't forget to limit telnet access to your arc by
"add telnet client <ip/netmask>" and "enable telnet client_access".

2: Dial-in clients: if you have lack of public ip addresses you must
assign them private addresses and then translate to public. In other
cases I dont think that it's good idea to assign private addresses to
dial-in clients. You can protect your public ip pool for dial-in users
from outside internet with access-lists, both on arc and on border
router, closing some ports (netbios over tcp, proxy, telnet, ports used
by some worms/viruses, etc).


----- Original Message ----- 
From: "Kirti S. Bajwa" <kbajwa@tib.com>
To: <usr-tc@mailman.xmission.com>
Sent: Wednesday, September 10, 2003 2:12 AM
Subject: [USR-TC] 3Com TC IP Numbering??


  
Hello List:

I am trying to setup a 3Com TC Chassis. Since this is my first try & I am
the type of person who read, plan & design every thing to death, a million
thoughts are going through my mind. So before I go koo-koo, I thought I
    
post
  
the following questions to the list:

1. Public vs Private IP Address (3Com Chassis)
   -------------------------------------------

Should I assign public or private IP address to the 3Com. I am trying to
figure out pro and cons. If I assign public IP address (in my case
12.21.237.X), then it is open to the whole world. Someone may try to HACK
    
it
  
(tell me if it happens). But then if there is a question to 3Com list,
    
then
  
people trying to help can PING the Chassis (it has happened before)and
    
post
  
their responses.

1. Public vs Private IP Address (Dial-In)
   -------------------------------------------

Is it possible to assign private IP addresses (192.168.1.X) to Dial-In
    
users
  
in a 3Com Chassis or they have to be private IP addresses?

Thanks.

Kirt Bajwa
TIB Computer Systems
Mountain City, TN 37683
Tel: (423) 727-3001
eMail: kbajwa@tib.com


_______________________________________________
USR-TC mailing list
USR-TC@mailman.xmission.com
http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

    





_______________________________________________
USR-TC mailing list
USR-TC@mailman.xmission.com
http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

_______________________________________________
USR-TC mailing list
USR-TC@mailman.xmission.com
http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

  

--
alex,
ICQ# 219089461,
Current status