ISP LAB scenario

[fanhanes]

Hi everyone,

I am new on this forum and i would like to ask if somebody have experience with ISP network architecture. I want to simulate real network situation as you can see in screenshot but I have some problems with routing or NAT configuration.

Now the network shown in screenchot works fine and I can do ping from 192.168.8.166 to external network 90.183.241.53. Also i can ping from 192.168.1.1 to 90.183.231.53, so basically network works fine but there is on problem with NAT. I have decided to assign some specific external IP (NAT)for inside host 192.168.8.166. This IP is from another range than between PIX(FW0) and ISP router(R0).

So ISP assigned me 88.103.247.209/27 network range for my inside servers to be NATed to outside internet.

On PIX(FW0) I created new static nat 192.168.8.166-->88.103.247.216 and now I want to make this IP available from another network (like from internet) for example from network 90.183.241.53.
But when I try to ping result is timeout.

How should I configure R0 to be able to route NAT pool (88.103.247.209/27) to another networks ???

Thi IP addresses are really real and it is range what I got from ISP provider and I would like to know how it is configured on ISP side.


Could someone help with it or tell me how does it works ?
I hope that description is clear.

Thank you very much
Fanhanes

 

[unclerico]

typically you'll have a /30 from a router to your ISP and then from your router to your firewall will have a different range like a /27 as you say.

isp router -> 90.183.241.53/30 <- edge router -> 88.103.247.209/27 <- firewall -> 192.168.8/24

in your scenario, add another router between fw0 and r0 and add a static route into r0 for the 88.103.247.209/27 subnet.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[fanhanes]

Thank you for quick reply. Maybe I don not understand so let me explain situation more detailed.

On My side I have One Ethernet cable which is connected to my PIX. I do not have any other router and so on in my Rack.
So there is just one single Ethernet cable from ISP. And via this cable I can commmunicate with both networks.

So something like this:

Internet <-ISP router-> 90.183.234.53/30 and 88.103.247.209/27 <-firewall-> 192.168.8.0/24

It is why I am asking, because I do not understand how it is made from ISP side that I am able to communicate with two different network without router between.

Because physical IP of my firewall is 90.183.231.53/30

So to be clear for me, next router what is default GW for my firewall has configured static route for network 88.103.24.209/27 ??

Thank you agian.
Regards Fanhanes.