Hello
Please see my current configuration atached,
I have about 100 cients and 5 antennas on whic they are connected, 5 of them are bridge, There are two server one for radius and one for ppp, dhcp, hotspot an routing. all clients are authenticating on sever. Also masqureiding is dneon server Now ISP hase gave me Range of ip address andi want to change configuration.
I want to use server as bridge, i want to use server only for authenticating and for traffic limit, but not for routng, I want to give client direct access to ISP, Is it posible?
Thank you for repla.
I have 100 clients. all of them have routers wich connects to genereal server, this routers are pppoe clients and server i have pppoe server, i want to do next.
i want to give clients public ip-s, i want to use pppoe server only for authenticateing not for masqureiding.
I think you didnot understand my question.
I have ether1 and ether2.
on ether1 I have pppoe server.
in ip>firewall i have masqureiding
ether1-192.168.0.1
ether2-192.168.1.2 (192.168.1.1 is gateway. other router Cisco)
now i want to turn off cisco, because i have got many public ips,
example,
if (pppoe client 1)=(pppoe client 1) then redirect to ether2, in other case drop.
(pppoe client 1)=(pppoe client 1) is authentication with radius
but if i will disable masqureiding, how packets from ether1 will go to ether2.
can yu tell me the configuration wich i can use in this scenario, i want to use public ip-s, and i dont want to masqureid network, i want to bridge all packets from authenticated users.
I have to more pictures look at picture 1 tat i atached earlier, there is my scheme, no look at picture 2,
user with ip address 94.43.127.100 wants to communicate to the intenet,
step 1. it cnnects to access point,
step 2. access point bridgs it to server (I have p2p link bitvin clints and server)
step 3. server asks radius, information about client.
step 4. authentication succesed,
step 5. client connects to the internet with its default ip, all packets are passing pppoe server, no routing.
now look at pitur 3.
step 1. it cnnects to access point,
step 2. access point bridgs it to server (I have p2p link bitvin clints and server)
step 3. server asks radius, information about client.
step 4. Authentication Failed.
step 5. all pckets from 94.43.127.100 are rejected.
I want to do this thing,
because now i have masqureiding on pppoe server.
all steps are the same except 5, because, if authenticaton successed, pppoe server douing routing on one pubic ip, so all cients have same public ip. (before routing they have private IPs)
I want to give all of them public ips,
so all you need to do now is giving out public ips to pppoe clients, either from dynamic pool or from RADIUS. and then disable masquerading for your public subnet (by adding ‘accept’ rule on top of NAT)
