?

Well done!!

?

There are many low power routers around that can be pressed into service as you describe. I'm partial to the Alix and Soekris devices myself. A useful side effect of the router is that you can service a good many PC's from the LAN side of it. This is ideal for somewhere like a Red Cross shelter or a race control tent as it doesn't require much in the way of special skills on the users part. Indeed, you could offer WiFi to the locals from it.

?

With careful selection of one's firewall software (I like pFsense and m0n0Wall) one can write rules for the LAN port such that the firewall will drop all traffic _not_ going to a particular destination. This means that all your local LAN traffic remains on the LAN without added messing with PC's and never escapes to the ID-1 side. Features such as remote access can also be added so that your "network administrator" can connect to all of the routers in the field to make dynamic changes - a PPTP session over the ID-1 network would work gangbusters.

?

Mark

?

?

On Tue, Jan 20, 2015 at 2:41 PM, Dean Gibson AE7Q yahu.stuff@... [D-STAR_23cm] <D-STAR_23cm@...> wrote:

The configuration I use allows only wanted traffic between two ID-1 radios:

You need a router with each ID-1 that can do NAT (network address translation) AND simple port forwarding (or a "DMZ computer" function).? I use an old Netgear WGT624v2 (which does both), and is spec'd to take 12vDC but runs just fine (as do my other Netgear switches and routers) from a RigRunner supplying 14.2vDC.

Say computer #1 is on the network with address :

I configure router #1 to have a LAN (local) address of? 192.168.1.11 (these are examples, pick your own IP addresses in the same network), and a WAN (remote) address of 10.0.0.21 (netmask 255.0.0.0).? The router then becomes a gateway to all 10.x.x.x addresses.

?I configure computer #1 to route only 10.x.x.x/8 traffic to 192.168.1.11 (the router's LAN address)? There are a couple ways to do this:

1. Use the ROUTE command at the Windows command line to add 192.168.1.11 as a gateway to the 10.x.x.x/8 network.? Type just "route" at the Windows command line to learn the settings (in Windows 7, this even displays an example).? I think the correct command in this case is "ROUTE ADD 10.0.0.0 MASK 255.0.0.0 192.168.1.11"
2. Go into your Windows settings and accomplish the same thing (this varies by version of Windows).

Connect computer #1 to a LAN port of router #1, and connect ID-1 #1 to the WAN port of router #1.

Now do exactly the same thing with computer/router/ID-1 #2, EXCEPT give router #2 a WAN address of 10.0.0.22.
If you have computer/router/ID-1 #3, #4, etc on the RF network, configure them similarly, giving each router a unique WAN address on the 10.x.x.x network.

With the radios on and enabled for data transfer, from computer #1, try to ping 10.0.0.22 (or from computer #2, try to ping 10.0.0.21).? This needs to work before you go any further.? You may have to enable WAN pings on the routers.

If the above works, you now have the basics of your network functional, but you can't (yet) pass traffic between the two computers.? To do that, you have to use the router's port forwarding or "DMZ computer" capability.

Let's say that computer #2 has a web server (typically using port 80) that computer #1 needs to access.? You configure router #2 to "port-forward" all WAN requests for port 80, to the address of computer #2.? If your router has a "DMZ" function, it's even easier:? you configure router #2 to set the "DMZ computer" to the address of computer #2.? Now computer #1 should be able to access the web server on computer #2, using IP address 10.0.0.22.

Using the "DMZ computer" function has both advantages as disadvantages:? It makes ALL of computer #2 TCP/IP ports visible on the radio network.? This helps if you want to do file sharing.

Note that all computers should address other computers on the RF network by the remote computer's router address of 10.x.x.x.

Note also that this is not the only way to do this, but it works for me.? and it keeps the local network traffic at each site, off the air.

-- Dean

On 2015-01-20 10:25, 'Woodrick, Ed' ewoodrick@... [D-STAR_23cm] wrote:

A switch can help out a little, but a router is suggested. But even with the router, you still have the issues of other applications hogging the channel.

From: D-STAR_23cm@... [mailto:D-STAR_23cm@...]
Sent: Tuesday, January 20, 2015 12:49 PM
To: D-STAR_23cm@...
Subject: Re: [D-STAR_23cm] ID-1 to ID-1 and internet connection

I've heard it suggested that simply hooking the ID-1 to a network switch helps prevent a lot of network traffic from hitting the airwaves. A hub that sends everything everywhere would be a bad idea.

Bill