Can I access a Router which is on private static ip addr from ISP using leased ethernet line?

Can I access a Router (actually need to access linux machine behind
router from work) which is on private static ip addr from ISP using
leased ethernet line?. I asked my ISP whether they can do port
forwarding to my router, they said no. is there any altrenate solution.
thanks.

On 29 Oct 2005 09:17:44 -0700, GS <(E-Mail Removed)> wrote:
> Can I access a Router (actually need to access linux machine behind
> router from work) which is on private static ip addr from ISP using
> leased ethernet line?. I asked my ISP whether they can do port
> forwarding to my router, they said no. is there any altrenate solution.
> thanks.

What is the actual connection to the ISP (DSL, ISDN, etc.)? If it is a
modem/router that actually gets a public IP on its WAN, and privates on
its LAN you would need to do port forwarding on that device. If the ISP
actually does NAT on their end giving your end a private IP, then your
only choice may be to initiate something (like an ssh tunnel) from the PC
you are trying to reach.

Some types of VPN initiated from the destination might work, but unless
the router that does the NAT from public to private IP is capable of that,
I know ipsec would not work (it requires "protocol" forwarding, not to be
confused with port forwarding). For example I have successfully connected
ipsec from dialup into my private home LAN on Linux pppoe/router, but not
from work PC behind NAT that I have no control over. I don't know if pptp
would work, because I have no success with that.

Well, the problem here in Asia, the ISP's are not giving public IP,
instead, they have NAT Router ouside somewhere in their office
premises, from there they are giving multiples of Ethernet connections
directly to each and every home (most of the people have one PC at home
for internet connection, ISP is hardcoding ip addr in their PC). Their
Router does NAT functinality, but whatever the ethrnet they are giving
to home is private static ip adress, but I can use one more router
inside my home and I can hardcode WAN ip addr as static ip addr into
router and I can use different subnet for my local LAN, where it
servers all internet and e-mail purposes (here my subnet is different
from their subnet on WAN). This way I have two Linux PC's on net. But
if I want to access anything from those PC's to different location
which is I have small office again with Router and multiple Linux PC's
(there I have cable modem and public IP addr on router's wan port and I
can do port forwarding to access any linux machine) , I can directly do
ssh from home to work machines which are on public IP addr and I
couldn't do anything viceversa since I don't have public ip addr at
home where I got this staic ip on wan port at home. (I don't have cable
modem service in res. area, which is available on work side)

Onething is, when I do ssh to work machines from home, it goes through
(this is my office at diff location with cable service with public ip
on my office router), there I can see incoming ssh session's ip address
as ISP's public ip address. also I did what is my ip addr at home, it
shows the same ip addr what I swa with ssh session to my work.

How can I connect these two sites together? or how can I access my home
machines from work?. Do I have to talk to my ISP at home to do port
forwarding. Thanks.

GS wrote:

> Can I access a Router (actually need to access linux machine behind
> router from work) which is on private static ip addr from ISP using
> leased ethernet line?. I asked my ISP whether they can do port
> forwarding to my router, they said no. is there any altrenate solution.
> thanks.

No, other than initiating the session from within the local network. It is
impossible to directly access a private IP address from the internet.

GS wrote:

> Well, the problem here in Asia, the ISP's are not giving public IP,
> instead, they have NAT Router ouside somewhere in their office
> premises, from there they are giving multiples of Ethernet connections
> directly to each and every home (most of the people have one PC at home
> for internet connection, ISP is hardcoding ip addr in their PC).

As I understand it, the problem is that there are not enough IPv4 addresses
to meet the needs of Asia and for that reason, IPv6 is becoming popular
there. Is it possible to use IPv6? If so, it would be a lot easier for
the ISP to provide a "real" address.

I can install on all my Linux PC's Fedora Core 4 which provides IPv6
address, buy I am not sure about my ISP whether they can change from
ipv4 to ipv6. Also if i have ipv4 pc and also ipv6 pc, can they both
talk?. Should I ask my ISP whether they can provide ipv6?. Please
advise me, which is right way. Thanks,

GS wrote:

> I can install on all my Linux PC's Fedora Core 4 which provides IPv6
> address, buy I am not sure about my ISP whether they can change from
> ipv4 to ipv6. Also if i have ipv4 pc and also ipv6 pc, can they both
> talk?. Should I ask my ISP whether they can provide ipv6?. Please
> advise me, which is right way. Thanks,

IPv6 is of use only if your ISP will support it. The reason I suggested it,
is that it will have addresses available, so that ISPs don't have to resort
to NAT, to provide addresses to customers. Once you have IPv6 running, you
can either use it directly or tunnel through it, to provide IPv4 access to
your local network. You can have both IPv4 & v6 running at the same time
in Linux. There are also a few methods for connecting from one to the
other. You will have to do some reading, as in many ways, IPv6 is
different from IPv4, beyond just the addresses.

GS wrote:
> Can I access a Router (actually need to access linux machine behind
> router from work) which is on private static ip addr from ISP using
> leased ethernet line?. I asked my ISP whether they can do port
> forwarding to my router, they said no. is there any altrenate solution.

If you can set up the server at work and your
home computer, OpenVPN might be a solution, when
set up so that the home computer connects the
server at the office.

--

Tauno Voipio
tauno voipio (at) iki fi