Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




3872 posts

Uber Geek
+1 received by user: 159


Topic # 89352 31-Aug-2011 18:25
Send private message

Any tricks to getting the ATA working with double nat?

publicIP <> 192.168.1.0/24 <> 192.168.2.0/24

Everything else seems to be working just fine, but the ATA won't register.

 




Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


Create new topic
25379 posts

Uber Geek
+1 received by user: 5207

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 514661 31-Aug-2011 19:46
Send private message

Simple solution is to get rid of the double NAT. SIP doesn't like NAT traversals.

Failing that there are plenty of NAT settings in the SPA's incl the ability to insert VIA headers which may resolve the issue but they are a kludge - the ultimate solution is to get rid of the double NAT.





3872 posts

Uber Geek
+1 received by user: 159


  Reply # 514662 31-Aug-2011 19:51
Send private message

thanks steve,

double nat isn't going away sadly... I don't know what via headers are or where to find the right settings for 2talk. Can you provide any pointers?





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


 
 
 
 


25379 posts

Uber Geek
+1 received by user: 5207

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 514694 31-Aug-2011 20:45
Send private message

DonGould: thanks steve,

double nat isn't going away sadly... I don't know what via headers are or where to find the right settings for 2talk. Can you provide any pointers?



There isn't really a simple one answer fits all solution other than to get rid of the double NAT. This is the fix.

If you want to attempt to get around it with the use of remapped VIA headers you'll need to read up about them and then play with them in the SIP settings in your ATA. You will probably need to set up multiple port forwards as well.



3872 posts

Uber Geek
+1 received by user: 159


  Reply # 514721 31-Aug-2011 21:23
Send private message

sbiddle:

... you'll need to read up about them



sure...  I was looking for a hint on what to read?  I tried a google, but my googlefu didn't turn up anything useful when I googled 'via sip header' and a 200 page rfc - 3261, which seemed a little ott.

Is there a guild you can recommend?






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


4998 posts

Uber Geek
+1 received by user: 2030

Trusted
Subscriber

  Reply # 514740 31-Aug-2011 21:53
Send private message

Why do you have double NAT? What prevents you from removing this?




Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com




3872 posts

Uber Geek
+1 received by user: 159


  Reply # 514743 31-Aug-2011 21:59
Send private message

coffeebaron: Why do you have double NAT? What prevents you from removing this?


I'm testing out the pppoe server on my mikrotik 750 router with the pppoe client on my ECB 1221R ap, with my TC HFC connection. 

I've got all the pppoe working, but as I only have 1 public IP here, I end up with double nat.  I threw the ata back on a different port on the RB for now, but I wanted everything behind the ecb.






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


25379 posts

Uber Geek
+1 received by user: 5207

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 514747 31-Aug-2011 22:04
Send private message

DonGould:
coffeebaron: Why do you have double NAT? What prevents you from removing this?


I'm testing out the pppoe server on my mikrotik 750 router with the pppoe client on my ECB 1221R ap, with my TC HFC connection. 

I've got all the pppoe working, but as I only have 1 public IP here, I end up with double nat.  I threw the ata back on a different port on the RB for now, but I wanted everything behind the ecb.




Whyt are you simply not handing out PPPoE addresses on the 192.168.1.0/24 subnet?




3872 posts

Uber Geek
+1 received by user: 159


  Reply # 514751 31-Aug-2011 22:11
Send private message

sbiddle:
Whyt are you simply not handing out PPPoE addresses on the 192.168.1.0/24 subnet?



Sorry I don't follow...  are you saying that I should be able to get the pppoe server to provide the dhcp and only have a single nat?

At present

TCModem/pubIP <>(port1)RB750-NAT192.168.1.0/24(so PPPoE interface on 750 = 1.1)(port2) <--> ECB Wan port (192.168.1.2)NAT-->192.168.2.0/24 --> MyATA(192.168.2.2)

Are you saying that my ECB should be able to terminate a subnect from the RB750 without doing NAT?

So I can then just dishout a subnet without natting it, but routing it?






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


25379 posts

Uber Geek
+1 received by user: 5207

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 514754 31-Aug-2011 22:16
Send private message

I don't fully understand your setup from that but you use proxy-arp on the PPPoE interface there is no need to route traffic or use a different IP range.




3872 posts

Uber Geek
+1 received by user: 159


  Reply # 514758 31-Aug-2011 22:23
Send private message

sbiddle: I don't fully understand your setup from that but you use proxy-arp on the PPPoE interface there is no need to route traffic or use a different IP range.



I have proxy-arp on the interface, but I don't follow what you're talking about with the ip range.

The ECB just assumes the IP it's getting on the PPPoE interface is a 'public' ip and/or that it can only get the 1 ip so it has to set up NAT so it can service the clients hanging off that.

the ECB is just a basic wifi/ap/router.

Am I meant to be able to pass a whole /24 over the pppoe so that I don't need to NAT on the ECB?






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


4998 posts

Uber Geek
+1 received by user: 2030

Trusted
Subscriber

  Reply # 514759 31-Aug-2011 22:25
Send private message

Can you not turn off DHCP on the ECB and just use as basic AP?




Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com




3872 posts

Uber Geek
+1 received by user: 159


  Reply # 514760 31-Aug-2011 22:30
Send private message

coffeebaron: Can you not turn off DHCP on the ECB and just use as basic AP?


I don't know it if will let me use the pppoe client in the ap mode on the wan port.  I also don't know how to configure the pppoe session to pass the subnet... I will look at the ECB a bit closer.  There's a number of modes in the thing.

I'm wanting the pppoe because I'm setting up the user manager in the 750 so I can count the traffic going to the ecb.






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel unveils the 8th Gen Intel Core Processor family for desktop
Posted 25-Sep-2017 19:45


Chow brothers plan to invest NZ$100 million in technology
Posted 24-Sep-2017 16:24


Symantec protects data everywhere with Information Centric Security
Posted 21-Sep-2017 15:33


FUJIFILM introduces X-E3 mirrorless camera with wireless connectivity
Posted 18-Sep-2017 13:53


Vodafone announces new plans with bigger data bundles
Posted 15-Sep-2017 10:51


Skinny launches phone with support for te reo Maori
Posted 14-Sep-2017 08:39


If Vodafone dropping mail worries you, you’re doing online wrong
Posted 11-Sep-2017 13:54


Vodafone New Zealand deploy live 400 gigabit system
Posted 11-Sep-2017 11:07


OPPO camera phones now available at PB Tech
Posted 11-Sep-2017 09:56


Norton Wi-Fi Privacy — Easy, flawed VPN
Posted 11-Sep-2017 09:48


Lenovo reveals new ThinkPad A Series
Posted 8-Sep-2017 14:37


Huawei passes Apple for the first time to capture the second spot globally
Posted 8-Sep-2017 10:45


Vodafone initiative enhances te reo Maori pronunciation on Google Maps
Posted 8-Sep-2017 10:40


Voyager Internet expand local internet phone services company with Conversant acquisition
Posted 6-Sep-2017 18:27


NOW Expands in to Tauranga
Posted 5-Sep-2017 18:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.