[LARTC] Help with gre tunneling

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a multi-part message in MIME format.

------=_NextPart_000_009D_01C1A9AD.3ADD42E0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Do i really need to setup wins server in both sides? and if i configure =
one of my windows 98 pc how do make it as a push and pull replication? =
and how about nbt node type 8? do you think if i set up dns server it =
will work? what should be the best and easy way to have a name =
resolution on both ends of the tunnel?


Best Regards,
Glynn

----- Original Message -----=20
  From: Greg Scott=20
  To: 'glynn' ; lartc@mailman.ds9a.nl=20
  Sent: Friday, January 25, 2002 8:10 PM
  Subject: RE: [LARTC] Help with gre tunneling


  The short answer would be yes, but there are lots and lots of details. =
=20

  Now that your GRE tunnel is up and running, switch your thinking to
  look at it from Windows' point of view.  From Windows' point of view,
  the GRE tunnel is really a router.  So you have LAN A connected to
  a router, across a WAN, to LAN B.  Your Windows PCs have no
  clue that there is a GRE tunnel in-between.  All they know is, their
  default gateway is the internal IP address of the firewall/router you
  set up.  Well, maybe not their default gateway, but at least they=20
  have a route to the LAN on the other side of the tunnel.

  So what do we need with Windows so that PCs in LAN A can
  browse (Network Neighborhood) shares offered by computers in
  LAN B?  Assuming Windows 9x, we need a way for NetBIOS name=20
  resolution that doesn't depend on broadcasts, so that means you'll=20
  need a WINS server in both LAN A and LAN B.  You'll want to set=20
  up the WINS servers as push/pull replication partners so they both=20
  have up to date copies of which systems are where.  And you'll need
  to set up your PCs as NBT node type 8 (I think).  This is the hybrid,
  where PCs first try to resolve names by asking a WINs server and then
  try a broadcast if that doesn't work. =20

  You could also use local lmhosts files for NetBIOS name resolution,
  but let's not even go there.

  If you have a Win2000 domain and all Win2000 clients, then the rules
  are different.  In this case, you'll need DNS servers instead of WINS
  servers. =20

  Conceptually, the point is, you need some way to do name resolution
  on both ends of your tunnel to make this work. =20

  You will want to set up some kind of Win NT or Win 2000 domain=20
  structure that makes sense, or you will want some kind of=20
  workgroup structure that makes sense.  So let's say the PCs in
  LAN A are all members of a workgroup named LANAWG.  If you
  make a PC in LAN B a member of the LANAWG workgroup, and
  you have name resolution that works, then that LAN B PC should
  be able to browse its Network Neighborhood and see the shares
  offered by PCs in the LANAWG workgroup, no matter which side
  of the tunnel they are on.

  This all assumes that the Windows PCs do their jobs properly.

  - Greg Scott


    -----Original Message-----
    From: glynn [mailto:glynn@itextron.com]
    Sent: Friday, January 25, 2002 4:07 AM
    To: lartc@mailman.ds9a.nl
    Subject: [LARTC] Help with gre tunneling


    Hello everyone. is it possible to browse the network neigborhood if =
i tunnel to a remote site ? if its possible how?=20



    Best regards,
    Glynn

------=_NextPart_000_009D_01C1A9AD.3ADD42E0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4134.100" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>
<DIV><FONT face=3DArial size=3D2>Do i really need to setup wins server =
in both=20
sides? and if i configure one of my windows 98 pc how do make it as a =
push and=20
pull replication? and how about nbt node type 8? do you think if i set =
up dns=20
server it will work? what should be the best and easy way to have a name =

resolution on both ends of the tunnel?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Best Regards,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Glynn</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV>----- Original Message ----- </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A title=3DGregScott@InfraSupportEtc.com=20
  href=3D"mailto:GregScott@InfraSupportEtc.com";>Greg Scott</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dglynn@itextron.com=20
  href=3D"mailto:glynn@itextron.com";>'glynn'</A> ; <A =
title=3Dlartc@mailman.ds9a.nl=20
  href=3D"mailto:lartc@mailman.ds9a.nl";>lartc@mailman.ds9a.nl</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Friday, January 25, 2002 =
8:10=20
  PM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> RE: [LARTC] Help with =
gre=20
  tunneling</DIV>
  <DIV><BR></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>The=20
  short answer would be yes, but there are lots and lots of =
details.&nbsp;=20
  </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>Now=20
  that your GRE tunnel is up and running, switch your thinking=20
  to</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>look=20
  at it from Windows' point of view.&nbsp; From Windows' point of=20
  view,</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>the=20
  GRE tunnel is really a router.&nbsp; So you have LAN A connected=20
  to</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>a=20
  router, across a WAN, to LAN B.&nbsp; Your Windows PCs have=20
  no</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>clue=20
  that there is a GRE tunnel in-between.&nbsp; All they know is,=20
  their</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>default gateway is the internal IP address of the =
firewall/router=20
  you</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>set=20
  up.&nbsp; Well, maybe not their default gateway, but at least they=20
  </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>have=20
  a route to the LAN on the other side of the =
tunnel.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>So=20
  what do we need with Windows so that PCs in LAN A =
can</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>browse (Network Neighborhood) shares offered by computers=20
  in</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>LAN=20
  B?&nbsp; Assuming Windows 9x,&nbsp;</FONT></SPAN><SPAN=20
  class=3D140165011-25012002><FONT face=3DArial color=3D#0000ff =
size=3D2>we need a way=20
  for NetBIOS name </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>resolution that </FONT></SPAN><SPAN =
class=3D140165011-25012002><FONT=20
  face=3DArial color=3D#0000ff size=3D2>doesn't depend on broadcasts, so =
that means=20
  you'll </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>need=20
  a WINS </FONT></SPAN><SPAN class=3D140165011-25012002><FONT =
face=3DArial=20
  color=3D#0000ff size=3D2>server in both LAN A and LAN B.&nbsp; You'll =
want to set=20
  </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>up=20
  the WINS </FONT></SPAN><SPAN class=3D140165011-25012002><FONT =
face=3DArial=20
  color=3D#0000ff size=3D2>servers as push/pull&nbsp;replication =
partners so they=20
  both </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>have=20
  up </FONT></SPAN><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>to date copies of which systems are where.&nbsp; And you'll=20
  need</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>to=20
  set up your PCs as NBT node type 8 (I think).&nbsp; This is the=20
  hybrid,</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>where PCs first try to resolve names by asking a WINs server =
and=20
  then</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>try=20
  a broadcast if that doesn't work.&nbsp; </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>You=20
  could also use local lmhosts files for NetBIOS name=20
  resolution,</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>but=20
  let's not even go there.</FONT></SPAN></DIV>
  <DIV><SPAN =
class=3D140165011-25012002></SPAN>&nbsp;</DIV></FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>If=20
  you have a Win2000 domain and all Win2000 clients, then the=20
  rules</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>are=20
  different.&nbsp; In this case, you'll need DNS servers instead of=20
  WINS</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>servers.&nbsp; </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>Conceptually, the point is, you need some way to do name=20
  resolution</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>on=20
  both ends of your tunnel to make this work.&nbsp; </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>You=20
  will want to set up some kind of Win NT or Win 2000 domain=20
</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>structure that makes sense, or you will want some kind of=20
  </FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>workgroup structure that makes sense.&nbsp; So let's say the =
PCs=20
  in</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>LAN=20
  A are all members of a workgroup named LANAWG.&nbsp; If=20
you</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>make=20
  a PC in LAN B a member of the LANAWG workgroup, =
and</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>you=20
  have name resolution that works, then that LAN B PC =
should</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>be=20
  able to browse its Network Neighborhood and see the =
shares</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2>offered by PCs in the LANAWG workgroup, no matter which=20
  side</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>of=20
  the tunnel they are on.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>This=20
  all assumes that the Windows PCs do their jobs =
properly.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff size=3D2>-=20
  Greg Scott</FONT></SPAN></DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D140165011-25012002><FONT face=3DArial =
color=3D#0000ff=20
  size=3D2></FONT></SPAN>&nbsp;</DIV>
  <BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
    <DIV class=3DOutlookMessageHeader dir=3Dltr align=3Dleft><FONT =
face=3DTahoma=20
    size=3D2>-----Original Message-----<BR><B>From:</B> glynn=20
    [mailto:glynn@itextron.com]<BR><B>Sent:</B> Friday, January 25, 2002 =
4:07=20
    AM<BR><B>To:</B> lartc@mailman.ds9a.nl<BR><B>Subject:</B> [LARTC] =
Help with=20
    gre tunneling<BR><BR></FONT></DIV>
    <DIV><FONT face=3DArial size=3D2>Hello everyone. is it possible to =
browse the=20
    network neigborhood if i tunnel to a remote site ? if its possible =
how?=20
    </FONT></DIV>
    <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
    <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
    <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
    <DIV><FONT face=3DArial size=3D2>Best regards,</FONT></DIV>
    <DIV><FONT face=3DArial=20
size=3D2>Glynn</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></DIV></BODY></HTML>=


------=_NextPart_000_009D_01C1A9AD.3ADD42E0--



[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux