--- In D-STAR_23cm@..., "John" <john@...> wrote:
It's really much simpler than this, just make sure you do not provide NAT service from 10.x.x.x to the Internet. NAT takes the 10.x.x.x address and replaces it with the WAN IP address in your router and keeps track of the ports and remote address used, it then uses that information to convert incoming traffic (from the Internet) back to a 10.x.x.x address. If NAT is turned off then the traffic neither leaves with the WAN IP address and returning traffic would simply be dropped.
A little correction, you do still need to configure NAT for 10.0.0.2/32 (or maybe /31), since the gateway (at 10.0.0.2) still needs to talk to the Internet, for D-STAR routing to other gateways.
If I understand how DD routing works, it uses the D-STAR callsign routing to get the encapsulated Ethernet packet to the remote gateway and ultimately to the remote ID-1 -- access to the Internet happens when the gateway itself is the destination and it drops the packet onto the local Ethernet directed towards the IP gateway at 10.0.0.1 and the NAT magic allows it to communicate to systems on the Internet (as opposed to other DD stations which are connected by D-STAR routing).
If someone has definitive information otherwise, please let us know - these suggestions are based on my observations.
John Hays - K7VE / WRJT-215