Re: Wireless Access Point and proxy server setup problem

[qsrvbas@xxxxxxxxxxxx]

Peter Dow (ML) wrote:

First, I'm no networking expert either. I probably have no good 
answer. I've been watching to see if anyone else has an answer; but 
since none has arrived in my inbox, I'll kick off a discussion.

> DSL modem connects to Netgear router which has a static IP address of 
> 10.1.1.1.  Three of the NG router's 4 LAN ports are connected to a 1GB 
> switch,  a Netgear wireless access point (static IP address of 10.0.0.5) 
> , and a fiber optic transceiver that connects to another campus.  The 
> proxy server PC has two network interface cards (NICs), both connected 
> to the 1GB switch.  The proxy server NICs have static IP addresses of 
> 10.1.1.2 and 10.0.0.1.  PCs on the LAN specify the proxy server 
> (10.0.0.1) as their gateway, DNS server and proxy server.

Description _seems_ to match your diagram below.

> DSL modem --> Netgear router (10.1.1.1) --> switch --> (10.1.1.2) proxy 
> server
>                    |    |                    |   |____________________| 
> (10.0.0.1)
>                    |    |                    |
>                    |    |                    |_________ PCs (10.0.0.n)
>                    |    |
>                    |    |__________Netgear wireless access point (10.0.0.5)
>                    |
>                    |_________> FDDI -> FDDI -> hub -> PCs (10.0.0.n)
>                                                 |
>                                                 |
>                                                 |_____Airport wireless 
> repeater
>
>
>             Airport wireless repeater --> switch --> PCs (10.0.0.n)

The diagram _seems_ to have come through okay.

> I hope that comes through.  The intent is to isolate the initial Netgear 
> router on its own subnet (10.1.1.n) so all the PCs have to go through 
> the proxy server to get to it.

Here's where I get lost.

I don't exactly see how the parts that you say are working work. My 
first thought is that few of the parts should be able to connect 
with others.

I am confused by the subnetting.

I had started to get an understanding of how things work, but your 
assertion makes me want to toss what I thought I knew out.

Part of my understanding has been based in the supposed standard 
that 10.x.x.x addresses are /non-routable/. That's supposed to be 
fundamental and is supposed to be why such addresses can be reused 
by each of us in our own local networks.

But you're asserting that you have a router in a 10.1.x.x subnet 
that successfully routes addresses in 10.0.x.x subnets.

I'd rethink things if I were setting this up.

I'm waiting harder now for someone that clear it up -- why there are 
working subnets in this.

> Everything works fine except the Netgear wireless access point.  PCs 
> that connect via this device are unable to see anything on the LAN, 
> including the proxy server.
>
> If I attach the Netgear AP to the same 1GB switch the proxy server is 
> connected to, it works fine.

The switch I can /kind of/ accept. I don't really know what switches 
actually do as far as choosing what port a packet should go out. 
I've kind of assumed that they simply send all packets out the 
uplink port whenever they don't match the addresses that have made 
themselves known at initial connection time (or however things make 
their presence known to switches.)

But I would expect the router simply to discard such packets if 
they're from a non-routable address.

Wish I could give an authoritative answer instead of adding more 
questions. I like this kind of thread starting here. It's such a 
great area where we can learn stuff without broadcasting to the 
world how limited our (my) knowledge is.

Tom Liotta