IP Cop + Router? :)

BoB_BoT

Hey all,
just need some help if anyone can. I'm trying to get my binatone 2000 router to work with my ipcop box. I've set up a green + red network using 2 nics and now i'm stuck. the router can connect to the net no problem, but how do I get IPCop to use the router so it can connect to the net?
I've tried reading the Alcatel Speedtouch guide on ipcop.org, but the Binatone router doesn't have the same settings, so i'm stumped as to what to do.
(using ipcop v1.3)

Thanks for any help,
Rob

tomk

Let's check a few things:

1. Is the router connected to the IPCop RED interface using a crossover cable?
2. Are the GREEN and RED interfaces on different subnets?
3. How is the RED interface getting an IP address - DHCP or static?
4. Does the Binatone have a "bridge" mode?

That's enough for a start.

BoB_BoT

using a hub to connect to the binatone router.
the subnets are the same (255.255.255.0)

i'm not sure what to set the red interface to, the router has dhcp settings, but i had them disabled for testing purposes, wasn't sure what to set it to, that's what i'm asking

the router irrc had bridged mode although i think it was under the wan settings, don't have the router here with me, but i'm pretty sure it does.

thanks

tomk

OK, the best solution is this:

Configure the router in bridge mode, and connect it to your RED interface using a crossover cable. Set up IPCop to obtain the public IP address on RED by whatever method your ISP uses - PPPoE I'd imagine, if you're on DSL. Give your GREEN interface a static IP address in your chosen private subnet e.g. 192.168.10.1 or 10.0.0.1 etc. If you're using IPCop's DHCP. set the range in the same subnet as the GREEN interface.

If it turns out you don't have bridge mode, do this:

Leave the router as it is i.e. in router mode.Its ethernet port will have a factory-assigned private IP address, something like 192.168.1.1. Give your RED interface an IP address in the same subnet e.g. 192.168.1.10. I'd recommend you give it a static address, but if the Binatone does DHCP, you could use that either. Give your GREEN interface a static IP address in a DIFFERENT subnet e.g. 192.168.10.1 or 10.0.0.1 etc. If you're using IPCop's DHCP. set the range in the same subnet as the GREEN interface.

The bridge solution is better because there is a single NAT service between you and the internet - IPCop's. Double NAT generally works OK, but can cuase problems with some applications.

BoB_BoT

thanks for all the help,
I havn't had a chance to test this live yet, so I have one last question, do I have to setup anyting in IPCOP's dial-up settings? Or will it just directly work from by using the router for net access and act as the firewall itself?

Thanks again,
Rob

tomk

I don't use IPCop myself, I use Smoothwall, but the two are closely related - IPCop is a breakaway from the Smoothwall project. Based on my use of Smoothie, I would expect that IPCop handles PPPoE configuration in its Dial-Up settings area, so if you're using Bridge mode on the router, you'll put the username and password assigned by your ISP into IPCop. Use the IPCop documentation to verify this.

If you can't use bridge mode, the ISP authentication will remain on the router, so no dial-up settings will be required on IPCop.

BoB_BoT

will give that a try
if I can't get it working with IPcop, i'll give smoothwall a try.

Thanks,
Rob

Jaden

Bob,
This is the craic.
The Router does all the internet stuff, in that it dials up and connects, itr remembers passwords, etc ,etc.

Connect the router DIRECTLY to the IpCop red interface.
Enable DHCP on the red interface, so that the router gives it it's settings.

If the router LAN IP is 192.168.0.1, then the IpCop red interface should be set to:

IP: 192.168.0.2 (any IP will do in this range)
Netmask 255.255.255.0
Default Gateway: 192.168.0.1 (IP of router).

From the IpCop box, you should be able to ping the router, and then ping the internet.

If you can ping the router, and not anything on the net, then the router is not connecting. Set it up correctly by connecting it directly to a PC and using the Web interface.

If you can ping an external IP address (like 194.125.2.241, but not it's name (www.google.ie), then the DNS settings are screwed.

Once you get that far, gimme a shout.

Incidently Smoothwall and IpCop are almost the same thing, and the same procedure is used in setup on both.

tomk

Nothing wrong with that, Bob - it corresponds with my second-best suggestion earlier - but I'd still recommend bridge mode on the router as your best option, if possible. Avoids double-NATting etc.