Article View: de.comm.internet
Article #393Re: Unique internet IP adr. without changing local IPs ?
From: Marcus J. "will do TCP/IP for fo...
Date: Fri, 17 Jul 1992 18:42
Date: Fri, 17 Jul 1992 18:42
36 lines
3090 bytes
3090 bytes
>In our company we have decided to connect to the world wide internet. >Therefore I think we have to apply for a world wide unique IP >address. My problem is, if we get this IP address we don't want to >change all our local IP addresses we are using now. But if we don't >act this way then we have local IP addresses which are matching IP >addresses on the internet. I've set a few of our customers up like this for exactly the reason you describe. We do it as part of our internet firewall offering, which includes a routing configuration that isolates all routes between the internal network and the internet. As a result, internal nodes with addresses that are "illegal" are hidden and don't cause any problems. Of course, when someone tries to do mail or file transfer through the firewall, they run into problems and are politely encouraged to "get an address". At least the private network gets to make a slow transition and cut-over to a real addressing scheme rather than having to change everything all at once. Basically, what you do is set up an isolating subnet and show a route to it to the internet. (like 192.5.214, which is one of my isolated subnets) The host(s) on that net act as nameservers and mail exchangers, and run FTP and telnet gateways that allow internal systems access out. Routes to the isolated subnet are also given to internal hosts, so they can mail out and whatnot. Internal systems never get a route to the internet, just to the isolating subnet - there is no direct exchange of data between the two networks - all data has to go through the "gatekeeper" on the isolated subnet. I have a paper on how we do this that I'm presenting at FEDunix. I can put a copy of the file up for FTP, I guess. mjr. -- There are only ~17,000 possible three-letter acronyms left for possible products. When the current supply runs out, in 1994, the computer industry will transition to a ten-letter product acronym scheme that can support naming of products and vaporware well into the year 2,000. -notebooks of a heretic
Technical Details
Message-ID:
<1992Jul17.184214.26395@decuac.dec.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!think.com!ames!haven.umd.edu!decuac!hussar.dco.dec.com!mjrReferences:
<1992Jul16.145850.1980@edfd.uucp>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f9325,1728c11e377be3d8 X-Google-Attributes: gidf9325,public X-Google-Thread: 1048b3,1728c11e377be3d8 X-Google-Attributes: gid1048b3,public X-Google-Thread: 10b574,1728c11e377be3d8 X-Google-Attributes: gid10b574,public X-Google-ArrivalTime: 1992-07-17 08:14:34 PST Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!think.com!ames!haven.umd.edu!decuac!hussar.dco.dec.com!mjr From: mjr@hussar.dco.dec.com (Marcus J. "will do TCP/IP for food" Ranum) Newsgroups: de.comm.internet,comp.protocols.tcp-ip,eunet.misc Subject: Re: Unique internet IP adr. without changing local IPs ? Keywords: internet IP Message-ID: <1992Jul17.184214.26395@decuac.dec.com> Date: 17 Jul 92 18:42:14 GMT Article-I.D.: decuac.1992Jul17.184214.26395 References: <1992Jul16.145850.1980@edfd.uucp> Sender: news@decuac.dec.com (USENET News System) Organization: Digital Equipment Corporation, Washington ULTRIX Resource Center Lines: 36 Nntp-Posting-Host: hussar.dco.dec.com