[svlug] IPX protocol through TCP/IP

[Alvin Oga]

hi ya rafael

> > why not just do:
> > 	Novell Machines		- the other users in other bldg
> > 		|
> > 	IPX gateway		- act as a dialup gateway ( same server ? )
> > 		|
> > 	modem dialup lines	- phone line connection
> > 		|
> > 	Linux-IPX Server	- act as gateway ( add this puppy )
> >		|
> > 	real gateway		- goes off to the net
> > 		|
> > 	TCP/IP Machines		- linux, windows, etc

..pretty up my pic above... moved comments

given that I did not hookup a novell network to the internet yet
but have a proposal to a car repair place pending... my plans are
similar/identical to the above.. 

my scenario is have the tcp/ip real gateway machine to
handle the dialup instead of each windoze box doing modem dialups
	- since they have windoze co-existing with novell apps
	- on the same wire... I am not worried about the mixture

> How to make an IPX gateway?

its purpose is to separate corp novell machines from the "internet"
- you really don't want hackers from the net getting into the local
  corp lan of novell machines

in your case... ipx gateway can also be the dialup client to the linux-ipx server

the ipx gateway and linux-ipx server will look like:

(subnet needed? )             ( mask problem ? )
www.xxx.yyy.zzz *               255.255.255.0   U     1500   0     4107 ppp0 <<---
www.xxx.yyy.zzz *               255.255.255.0   U     1500   0     4107 eth0
127.0.0.0       *               255.0.0.0       U     3584   0     2583 lo
default         www.xxx.yyy.gw  *               UG    1500   0    27244 eth0

the trick is to broadcast all local traffic *.yyy.zzz on both eth0 and ppp0
than you are done... if not...you got a problem...
	- one trick is subnetting
	- another trick is bridging..

Another "easy" solution is to reassign ALL novell machines to have a
different IP# ( 10.* series ) and use dummy drivers or ip-aliasing and
masquerading..

10.0.1.*	*               255.255.255.0   U     1500   0     4107 ppp0 <<---
www.xxx.yyy.zzz *               255.255.255.0   U     1500   0     4107 eth0
127.0.0.0       *               255.0.0.0       U     3584   0     2583 lo
default         www.xxx.yyy.gw  *               UG    1500   0    27244 eth0

all done... ?? these routes defined on both ends of the ppp connection

> Corp guys are in Wisconsin, they barely heard about Linux much less plan
> to use it.

doesn't matter since they control the $$$

just need to show that novell can still be connected to the rest of the 
world even if they have their own proprietory network connectivity

> > might need to worry about subnetting and bridging...
> > 	( replace the normal(?) novell server with linux w/ ipx option )
> 
> Sounds too complicated here. Don't want to experiment with subneting at
> this point.

thats the fun part...but... time is an issue...and they need to realize
they will be down with no planning having been done...

> TCP/IP gateway is not as big a problem as carrying IPX over it. PPP will
> connect 2 TCP/IP nets. To carry IPX I have to tunel, no?

don't think it's an issue... not 100% certain...

you need to tunnel, when the firewall or default filtering/design
prevents you from getting thru to the other side...??

> I don't know how
> to make a dial-in for IPX only. Have not had time to do search. Too many

novell has that puppy already...

but I claim linux can support that function too....

and in either case...think you'd need a "gateway" since a regular novell
box on the internet will not be talking to nobody without a "translator"

> things going on in relation to the move. Runing backups on all PeeCees,
> geting wiring done in new office, etc.
> 
> VPN from the carrier (MCI I believe) would be one option that I need to
> explore. 

first get the novell machines "internet ready"..than worry about vpn/security
when more time is available to consider all options...

have fun linuxing...
alvin

--
echo "unsubscribe svlug" | mail majordomo at svlug.org
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ to unsubscribe
see http://www.svlug.org/mdstuff/lists.shtml for posting guidelines.