integrate a ppp-connected PC to my LAN. arp problem?

I want to integrate a remote PC "ted" connectet by ppp to my LAN
(192.168.0.x). The interface is to the remote PC is:
192.168.0.52:192.168.0.220. The 220 is the remote PC. I can ping to. I
can ssh to. But trying to connect to my LAN by DSL by ssh tunnel from
somewhat else, I can't reach the PC that is connected by ppp.

rex3:~ # route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.0.220 0.0.0.0 255.255.255.255 UH 0 0 0 ippp2
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0

I already completed arp-table:
rex3:~ # arp -Ds 192.168.0.220 ippp2 netmask 255.255.255.255 pub
rex3:~ # arp -a
rex2 (192.168.0.51) at 00:06:7B:03:94:21 [ether] on eth0
easy (192.168.0.27) at 00:50:8D:6C:64:F1 [ether] on eth0
? (192.168.0.198) at * PERM PUP on eth0
ted (192.168.0.220) at * PERM PUP on ippp2

PC easy is accessible, its a PC in my LAN.

any hints?
tia
Ekkard

Ekkard Gerlach (me!) wrote: (some further information:)
> I want to integrate a remote PC "ted" connectet by ppp to my LAN
> (192.168.0.x). The interface is to the remote PC is:
> 192.168.0.52:192.168.0.220. The 220 is the remote PC. I can ping to. I
> can ssh to. But trying to connect to my LAN by DSL by ssh tunnel from
> somewhat else, I can't reach the PC that is connected by ppp.
my ssh-tunnel from somewhere in internet:
ssh -f -L 1122:192.168.0.52:22 fli4l@mydomain.dyndns.org sleep 20;ssh -p
1122 root@localhost
>
> rex3:~ # route -n
> Kernel IP routing table
> Destination Gateway Genmask Flags Metric Ref Use Iface
> 192.168.0.220 0.0.0.0 255.255.255.255 UH 0 0 0 ippp2
> 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
> 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
> 0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
>
> I already completed arp-table:
> rex3:~ # arp -Ds 192.168.0.220 ippp2 netmask 255.255.255.255 pub
> rex3:~ # arp -a
> rex2 (192.168.0.51) at 00:06:7B:03:94:21 [ether] on eth0
> easy (192.168.0.27) at 00:50:8D:6C:64:F1 [ether] on eth0
> ? (192.168.0.198) at * PERM PUP on eth0
> ted (192.168.0.220) at * PERM PUP on ippp2
>
> PC easy is accessible, its a PC in my LAN.
>
> any hints?
> tia
> Ekkard

Ekkard Gerlach (me!) wrote:
> Ekkard Gerlach (me!) wrote: (some further information:)
>
>> I want to integrate a remote PC "ted" connectet by ppp to my LAN
>> (192.168.0.x). The interface is to the remote PC is:
>> 192.168.0.52:192.168.0.220. The 220 is the remote PC. I can ping to.
>> I can ssh to. But trying to connect to my LAN by DSL by ssh tunnel
>> from somewhat else, I can't reach the PC that is connected by ppp.
>
> my ssh-tunnel from somewhere in internet:
> ssh -f -L 1122:192.168.0.52:22 fli4l@mydomain.dyndns.org sleep 20;ssh -p
> 1122 root@localhost

Its not the fault of the ssh-tunnel! I can't get a ping-connection from
other PC in my LAN to ted like easy (192.168.0.27) either!

>
>>
>> rex3:~ # route -n
>> Kernel IP routing table
>> Destination Gateway Genmask Flags Metric Ref Use Iface
>> 192.168.0.220 0.0.0.0 255.255.255.255 UH 0 0 0 ippp2
>> 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
>> 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
>> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
>> 0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
>>
>> I already completed arp-table:
>> rex3:~ # arp -Ds 192.168.0.220 ippp2 netmask 255.255.255.255 pub
>> rex3:~ # arp -a
>> rex2 (192.168.0.51) at 00:06:7B:03:94:21 [ether] on eth0
>> easy (192.168.0.27) at 00:50:8D:6C:64:F1 [ether] on eth0
>> ? (192.168.0.198) at * PERM PUP on eth0
>> ted (192.168.0.220) at * PERM PUP on ippp2
>>
>> PC easy is accessible, its a PC in my LAN.
>>
>> any hints?
>> tia
>> Ekkard
>
>

solution found on my own: iptables -t nat -A POSTROUTING -o ippp2 -j
MASQUERADE

Ekkard

Ekkard Gerlach <jack@aiai.de> wrote:
> I want to integrate a remote PC "ted" connectet by ppp to my LAN
> (192.168.0.x). The interface is to the remote PC is:
> 192.168.0.52:192.168.0.220. The 220 is the remote PC. I can ping to. I
> can ssh to. But trying to connect to my LAN by DSL by ssh tunnel from
> somewhat else, I can't reach the PC that is connected by ppp.

> rex3:~ # route -n
> Kernel IP routing table
> Destination Gateway Genmask Flags Metric Ref Use Iface
> 192.168.0.220 0.0.0.0 255.255.255.255 UH 0 0 0 ippp2
> 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
> 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
> 0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0

> I already completed arp-table:
> rex3:~ # arp -Ds 192.168.0.220 ippp2 netmask 255.255.255.255 pub

Pppd will automatically configure proxy arp on eth0 when the proxyarp
option is used. And it's eth0 on rex3 that must take care of arps from
the LAN for 192.168.0.220, not ippp2.

> rex3:~ # arp -a
> rex2 (192.168.0.51) at 00:06:7B:03:94:21 [ether] on eth0
> easy (192.168.0.27) at 00:50:8D:6C:64:F1 [ether] on eth0
> ? (192.168.0.198) at * PERM PUP on eth0
> ted (192.168.0.220) at * PERM PUP on ippp2

> PC easy is accessible, its a PC in my LAN.

> any hints?
> tia
> Ekkard

--
Clifford Kite