SUMMARY: HElp on Connecting Isolated Network

From: Thang Victor Dinh (tdinh@mail.irvine-sensors.com)
Date: Mon Apr 22 1996 - 10:22:25 CDT


Thanks to the following for their inputs :
Daniel.Blander@ACSacs.com
jvillaci@sungye.comwarer2.com.ec (Julio Villacis - Ing. de Sistemas)

ORIGINAL POST:

I posted this question a few weeks ago and I didn't explain myself quite clearly. Let me start this time with a diagram of my network setup.

-------------- ---------- ----------- -------------
| Internet |_______| Linux |__________| My |___??____ | Sun |
| Provider | | Box | | PC | | SPARC |
-------------- ---------- ---------- -------------
                                                                      |
                                                           ---------------
                                                           | Novell |
                                                           | Netware |
                                                            --------------

My PC: Windows 95 running Novell Netware client (IPX/SPX), TCP/IP stack. From my PC, I have access to both the Novell network and the Linux box, but not the Sun cluster.
Sun SPARC: My Sun cluster is isolated from both the Novell and the Linux box. Itself is on a diiferent IP subnet from the Linux box and is local to us here only.

Problem: Are there ways for me to access all three networks form my PC ? I can easily put the Sun SPARC network on the same IP subnet as the LINUX box but I still want to isolate my Suns from the outside. Building a firewall is not feasible for us right now. Any recommendation/suggestion to a freeware/shareware/commercial software will be appreciated.

SOLUTION:

1) firewall solutions
   Freeware - TIS Toolkit and Socks
   Commercial - Firewall-1 (x86, SunOS and Solaris)

2) A router that will handle translation as it were
    from the real IP (outside to internet and Linux) to inside
    (Sun and Novell). The Sun's can do it but it breaks Internet access from
    internal machines. Routing won't work so hot - you need a proxy.
    The best bet is Firewall-1. It does the address translation (illegal addresses to
     legal ones) and gives some very rock solid protection with *very* easy
    to use administration.



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:10:58 CDT