Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

DHCP, NAT and VPN

V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
Ok here is the deal, I have a Apple TV and some other devices that I would like to run through a vpn.

My Current setup desktop --LAN-- AirPortExtreme --WAN-- MODEM
The rest is running on wifi, and my desktop does not have a wifi card, otherwise i would just use internet sharing.

Is it possible to setup DHCP and NAT to the desktop (192.168.0.201-254 for example) and leave .2-200 for the router. For the rerouted dhcp stuff, it would then use the VPN my desktop is connected to. If this is not possible I will stop, if it is how do i set this up? I tried a few setups but have not been able to get it working yet. :cool:
 
Altemose

Altemose

macrumors G3
Mar 26, 2013
9,189
488
Elkton, Maryland
varsis said:
Ok here is the deal, I have a Apple TV and some other devices that I would like to run through a vpn.



My Current setup desktop --LAN-- AirPortExtreme --WAN-- MODEM

The rest is running on wifi, and my desktop does not have a wifi card, otherwise i would just use internet sharing.



Is it possible to setup DHCP and NAT to the desktop (192.168.0.201-254 for example) and leave .2-200 for the router. For the rerouted dhcp stuff, it would then use the VPN my desktop is connected to. If this is not possible I will stop, if it is how do i set this up? I tried a few setups but have not been able to get it working yet. :cool:
Click to expand...


You can change the range of IP addresses in AirPort Utility.
 
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
Altemose said:
You can change the range of IP addresses in AirPort Utility.
Click to expand...

I tried that, I was able to sometimes connect to the DHCP server. I think I may of had the setting incorrect.

I followed this guide: http://support.apple.com/kb/HT200188?viewlocale=en_US

The DHCP server was setup using 192.168.0.2 as the router (The desktop), and using range 201-254. However I was unable to turn the NAT network on.

I assume these rules should be 192.168.0.0?
Code: 
nat on en0 from 10.0.0.0/24 to any -> (en0)
    pass from {lo0, 10.0.0.0/24} to any keep state

Do I also need to run a DNS server to use the local connection the desktop has? I did manage to connect, but I could only access the local network.
 
Altemose

Altemose

macrumors G3
Mar 26, 2013
9,189
488
Elkton, Maryland
varsis said:
I tried that, I was able to sometimes connect to the DHCP server. I think I may of had the setting incorrect.



I followed this guide: http://support.apple.com/kb/HT200188?viewlocale=en_US



The DHCP server was setup using 192.168.0.2 as the router (The desktop), and using range 201-254. However I was unable to turn the NAT network on.



I assume these rules should be 192.168.0.0?

Code: 
nat on en0 from 10.0.0.0/24 to any -> (en0)

    pass from {lo0, 10.0.0.0/24} to any keep state



Do I also need to run a DNS server to use the local connection the desktop has? I did manage to connect, but I could only access the local network.
Click to expand...


So were you having an issue getting an IP to your desktop?
 
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
Altemose said:
So you have it going modem --> AirPort --> Server (out of IP range)?
Click to expand...

I think so. To clarify the server is behind the router and so are the other clients, trying to route local through the connection the server has which is a vpn.
 
Altemose

Altemose

macrumors G3
Mar 26, 2013
9,189
488
Elkton, Maryland
varsis said:
I think so. To clarify the server is behind the router and so are the other clients, trying to route local through the connection the server has which is a vpn.
Click to expand...


Does the server maintain a static connection to the web by setting it up at like 192.168.1.201?
 
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
I would assume no since the router is providing the server access to the web. Do I need multiple Ethernet connections to do this?
 
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
This is my nat setup I'm not sure this is correct.
Code: 
nat on en0 from 192.168.0.0/24 to any -> (en0)
    pass from {lo0, 192.168.0.0/24} to any keep state

attached is the DHCP settings.
 

Attachments

  • Screen Shot 2014-08-27 at 10.06.30 PM.png
    Screen Shot 2014-08-27 at 10.06.30 PM.png
    25.2 KB · Views: 187
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
varsis said:
This is my nat setup I'm not sure this is correct.
Code: 
nat on en0 from 192.168.0.0/24 to any -> (en0)
    pass from {lo0, 192.168.0.0/24} to any keep state

attached is the DHCP settings.
Click to expand...

Seems this stuff above is giving a syntax error...
 
Altemose

Altemose

macrumors G3
Mar 26, 2013
9,189
488
Elkton, Maryland
varsis said:
fixed the syntax error, retyped it out in vim and all is well there. but I still have no access to the internet.
Click to expand...
Have you tried putting the server in the AirPort's DHCP range and reserving the IP for it? You could put it at 192.168.1.199 and have the range go 192.168.1.200-240.
 
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
Altemose said:
So clients on the network in the AirPort's DHCP range can access the internet. When you connect them through the server they lose access?
Click to expand...

that is correct. But they still can access local ips.
 
V

varsis

macrumors regular
Original poster
Nov 30, 2005
209
1
Altemose said:
It sounds like you some how have a firewall or NAT blocking it since I don't see an obvious issue with the configuration.
Click to expand...

So found the problem as soon as a vpn connection is on it's no longer able to route correctly so I need to do a redirect Through the vpn, I will try again tomorrow.
 
Altemose

Altemose

macrumors G3
Mar 26, 2013
9,189
488
Elkton, Maryland
varsis said:
well tried changing the through to tun0 (interface used by tunnelblick) and It is a no go. I am unable to get this working correctly.

Any ideas?
Click to expand...
This has me scratching my head too. I don't know what I don't know! It is kind of hard to offer help since I am not right there working on your server. Perhaps someone else has some ideas?
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom