Add a network to either eth1 or eth2 that is on the same subnet as your dialup users. I believe then it will route from one subnet to the other. Here's an example of what's running on my rack, basically the reverse of what you're trying to do, but it works: ARC eth1: 216.81.189.29 user ip pool: 96 addresses starting at 216.81.189.30 ARC eth2: 90.0.0.2 When a user dials in and gets a 216.81.189.x address, they have full access to any 90.0.0.x address without any problem at all. Hope that helps - joel -----Original Message----- From: Pavlov Pavel [mailto:ppavlovbg@yahoo.com] Sent: Thursday, March 27, 2003 9:41 AM To: usr-tc@mailman.xmission.com Subject: [USR-TC] Nat on Total Control 1000 Hello I have Total Control 1000 with HiperArc version V5.0.9/Non-Encr my external eth1 is from the public network - 212.5.134.30 for the dial up pool I have 10.3.2.128 network mask 255.255.255.128 when dial I connect but the Ip I get is Ip: 10.3.2.129 netmask :255.255.255.255 gateway:10.3.2.129 Is it possible and how can I make NAT to this control so the dialup pool is in the private network and the external interface is in the public network Any sugestions will be helpful. Thanks in advance ===== __________________________________________________ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com _______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc