LRT224 OpenVPN Server Security Subnet Mask restriction

I would like to use a Security Subnet Mask of 255.255.252.0 with OpenVPN Server, but the LRT224 limits my choices to the masks shown in the snippet below. I don't understand this restriction. If Class B, 255.255.0.0, is allowed, why not allow sub Class B like 255.255.252.0, 255.255.248.0, etc? I know I could switch to 10.x.0.0/255.255.0.0, but I don't want to re-address my existing network.

This is a good thought. Now, this got me wondering as well. I would like to believe this is as designed. Maybe some sort of product limitation.

Similar Messages

OpenVPN problem, can't reach server's subnet

Hello all
I'm trying to get an OpenVPN configuration working and hope someone with experience in it can help me out. I have a PowerMac G4 running 10.4.11, with openvpn2 and Tunnelblick installed. I've set up CA certs and keys for a client Powerbook running 10.5.4. On the client I also have Tunnelblick.
The VPN server's subnet is 10.91.3.0/24; the gateway is 10.91.3.1 and the server is 10.91.3.201.
Its openvpn.conf is set to serve 10.8.0.0/24 to VPN traffic. I have a Netgear router running dd-wrt firmware at 10.91.3.1.
If I hook my Powerbook into a neighbour's open wireless network (subnet 192.168.1.0/24), I can successfully create a tunnel into my network and ping the server (and vice versa). I can reach file sharing on the server machine. However, I cannot figure out how to reach the
subnet. This is the real goal, since at my company, the whole point will be to try to use VNC, AFP and printing services on a variety of machines on the subnet. I only need the client to be able to reach the server subnet, not the other way around, and I have no need for logged-in clients to reach each other; it's more of a road-warrior setup I need.
As I understand it, I can either use a routed VPN network, or bridged. Bridged seems like the ideal situation, since I'd love to get the client machine on the same subnet and not have to worry about routing. But I'm trying both methods.
So, on the server I have this openvpn.conf:
*server 10.8.0.0 255.255.255.0*
*push "route 10.91.3.0 255.255.255.0"*
*ipconfig-pool-persist ipp.txt*
*port 1194*
*proto udp*
*dev tun0*
*ca /opt/local/etc/openvpn2/easy-rsa/keys/ca.crt*
*cert /opt/local/etc/openvpn2/easy-rsa/keys/server.crt*
*key /opt/local/etc/openvpn2/easy-rsa/keys/server.key*
*dh /opt/local/etc/openvpn2/easy-rsa/keys/dh1024.pem*
client-to-client
*keepalive 10 120*
comp-lzo
*user nobody*
*group nobody*
persist-key
persist-tun
*status openvpn-status.log*
*verb 3*
On the client, I have this:
client
*dev tun0*
*; up ./vpn-up.sh # doesn't seem to work, see note below*
*proto udp*
*remote MYDYNDNS.homeip.net 1194*
*resolv-retry infinite*
nobind
*user nobody*
*group nobody*
persist-key
persist-tun
*ca /opt/local/etc/openvpn2/ca.crt*
*cert /opt/local/etc/openvpn2/powerbook.crt*
*key /opt/local/etc/openvpn2/powerbook.key*
*ns-cert-type server*
comp-lzo
*verb 3*
On the server's router, I have set this static route:
*Destination LAN net: 10.8.0.0*
*Subnet mask: 255.255.255.0*
*Gateway: 10.91.3.201*
*Interface: LAN and WLAN*
And, finally, I've enabled IP forwarding on the VPN server using:
*sudo sysctl -w net.inet.ip.forwarding=1*
(Is this reset on reboot? Do I have to add a IPFORWARDING=-YES- to /etc/hostconfig for persistent forwarding, or do something else?)
Both client and the VPN server's OS X firewall and the gateway's SPI firewall are disabled for now.
So, what am I doing wrong? What step have I missed out? I'm sure it must be something obvious. I know that, with a routed network, I won't be able to receive broadcasts, so how do I reach other machines on the subnet - should I be able to ping their (I guess would have to be
static) IP addresses at the server subnet (10.91.3.0/24)?
Note that I've already tried using an "up" script in the client's openvpn.conf (setting "ipconfig set tun0 DHCP"), but it gives me an error "script failed: shell command exited with error status 1".
This post is long enough already, but to note briefly, I have tried bridging using "server-bridge 10.91.3.1 255.255.255.0 10.91.3.160 10.91.3.180", switching the device from tun0 to tap0, and removing the gateway's static routing command. But, again, no dice.
Please help if you can! Many thanks!
Matt

We have both an Outlook web client structure that works with our Exchange email setup. On some documentation things read like this:
[Exchange] Outlook Web App
That is, our server is identifed as 'outlook' but the client is Exchange. I am not knowledgeable of the nuances of the terminology or structure, just that this has baffled several levels of IT support at a large university. I ask about Google because there are multiple other threads that imply a problem with Google apps, Gmail accounts and other Google activity (sync) that seems to interfere with Exchange mail. I will return to the IT service yet again as you have suggested. This began as I was overseas--in France--and had a number of people trying to share Google docs with my account at teh same time as the mail "locked up". Just looking for advice as was suggested by the IT Help servce.

How can we get the prompt to enter IP Address, Subnet Mask , gateway and DNS Server during Task Sequence?

How can we get the prompt to enter IP Address, Subnet Mask , gateway and DNS Server during Task Sequence?

This is for 2007 but may still be relevant for 2012
http://hexdump.net/?p=391
Cheers
Paul | sccmentor.wordpress.com

Osx server 2.2.1 VPN subnet mask 255.255.255.255

Why is the subnet mask 255.255.255.255 and how can I change that?

Read http://en.wikipedia.org/wiki/Subnetwork
Allan

LRT as OpenVPN Server only

More VPN problems here lol. I have an LRT224 setup behind my gateway router/firewall to serve as an OpenVPN server only. I have the LRT WAN port connected to a DMZ port on my gateway router. The LRT WAN is assigned 192.168.30.26 by my gateway router. I then have one LAN port on the LRT connected to a LAN port on my gateway router. LRT LAN IP is 192.168.2.26. I have NAT setup on my gateway router to forward traffic with the OpenVPN port to the LRT.
I can successfully connect to the OpenVPN server; at least it shows both on the LRT and on my client. However, I cannot ping anything (OpenVPN server or LAN (.2.0/24)) from the client. When I go to Maintenance>Ping on the LRT, I cannot ping my client.
The LRT OpenVPN server is on 172.0.1.0/24 subnet with the server usually taking 172.0.1.5 and my client getting 172.0.1.6. Split Tunnel is turned on with the security IP address (LAN) being 192.168.2.0/24
The route table on my client looks correct
(172.0.1.0 255.255.255.0 172.0.1.5 172.0.1.6) and
(192.168.2.0 255.255.255.0 172.0.1.5 172.0.1.6).
I have the LRT in router mode (setup>advanced routing) and I've tried with the firewall on and off.

It doesn't seem right with the LAN to LAN connection between the gateway router and the LRT.
Normally you would have all LAN devices connected to the the LRT LAN exclusively. The LRT would also be the sole DHCP server.
The LRT would only be connected to the gateway router through WAN to DMZ.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

LRT224 Support for multiple subnets

I am considering purchasing an LRT224, but need help with one thing.
The network I manage has about 200 devices currently, with mixed brands and types of switches, access points, etc, scattered about. It is a small school that has had many different people running IT at it, some not so good, others better. Now I manage it.
We would like to add more devices, but currently we are limited to 254 devices. In the LRT224 manual, it -looks- like you can manually specify the subnet mask, and DHCP server range. For example, could I change the subnet mask to 255.255.252.0, or a /22 subnet, and then specify the DHCP range to be, for example only, 192.168.1.2 through 192.168.4.254, for 1024 total addresses? I want to do this without using VLANs, because I'm unsure if any of out switches support VLAN tagging, and I have zero experience with VLANs.
Please let me know, thanks!
Solved!
Go to Solution.

For site-to-site IPsec VPN tunnels, LRT224 supports subnet masks larger than 255.255.255.0. However the local subnets on the LAN side of LRT224 are limited to a class C subnet per VLAN.

Subnet mask 255.255.255.255 assigned to VPN client - can't ping LAN

Hi,
I configured PIX 501 with PPTP VPN to connect to the small office (PIX FW, Win 2000 Server, several Win clients, LAN IP 10.0.0.X/24):
ip local pool mypool 10.0.0.101-10.0.0.105
vpdn group mygroup accept dialin pptp
vpdn group mygroup ppp authentication mschap
vpdn group mygroup ppp encryption mppe 128 required
vpdn group mygroup client configuration address local mypool
vpdn group mygroup client configuration dns 10.0.0.15
vpdn group mygroup pptp echo 60
vpdn group mygroup client authentication local
vpdn username xxxx password *********
vpdn enable outside
I can connect to the office using Win VPN client, but I can't ping any hosts in the office network. I suspect that the reason for that is subnet mask assigned to the VPN client: 255.255.255.255. ipconfig of the VPN client:
PPP adapter Office:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 10.0.0.101
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
Default GW is missing too, but I think this is not the main problem.
Any way, what is wrong with my config? How to fix subnet mask assigned to clients? Or may be my assumption is wrong and this mask is ok? What is wrong then?
Any input will be greatly appreciated!
George

Thanks for the prompt reply.
Here it does:
PIX Version 6.3(4)
interface ethernet0 auto
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xxxxxxxxxxxxxx encrypted
passwd xxxxxxxxxxxxxx encrypted
hostname OSTBERG-PIX
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
access-list 80 permit ip 10.0.0.0 255.255.255.0 10.0.20.0 255.255.255.0
access-list inbound permit icmp any any
access-list inbound permit tcp any any eq pptp
access-list inbound permit gre any any
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside 66.189.xxx.xxx 255.255.252.0
ip address inside 10.0.0.23 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool mypool 10.0.0.101-10.0.0.105
pdm location 10.0.0.0 255.255.255.0 inside
pdm location 10.0.0.15 255.255.255.255 inside
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group inbound in interface outside
route outside 0.0.0.0 0.0.0.0 66.189.yyy.yyy 1
timeout xlate 0:05:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
sysopt connection permit-pptp
telnet 10.0.0.23 255.255.255.255 inside
telnet 10.0.0.0 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
vpdn group mygroup accept dialin pptp
vpdn group mygroup ppp authentication mschap
vpdn group mygroup ppp encryption mppe 128 required
vpdn group mygroup client configuration address local mypool
vpdn group mygroup client configuration dns 10.0.0.15
vpdn group mygroup pptp echo 60
vpdn group mygroup client authentication local
vpdn username ********* password *********
vpdn enable outside
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd auto_config outside
terminal width 80
Cryptochecksum:xxx
: end
There are remnants of old config, I just recently took over this network, some lines look odd to me, but I did not touch what works. VPN config is all mine.
PIX internal 10.0.0.23 - is a gateway for the network. DNS server in LAN - 10.0.0.15.
I've been reading about the problem and came across several posts that this subnet mask is normal, but it puzzles me - how can this host communicate with anyone else if there is no room for other hosts in this network (according to the mask)?!
Thanks again!
George

My wifi network connection is not working, will read "unable to join". Am able to access as a guest. When I hit the blue arrow on the right hand side of my network there is no information e.g ip address, subnet mask, etc. This info is in my guest area.

My network has not been working today. When I click on it it says "unable to access nhe network". My guest network will work. When I hit the blue arrow on the right hand side of my network there is no information in the IP address, subnet mask, router, etc. There is information in my guest section when I checked. I have unplugged and replugged my router and turned my Wifi button of and off, started and restarted my Ipod as per internet suggestions. Would anyone know how to get my network reactivated. I am nervous to hit reset network settings in case I lose all my music and icons, etc. added since I got my Ipod. Thank you for any assistance

Do other devices now connect?
Did the iPod connect before?
What encryption/security is the router using?
Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on the router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- iOS: Recommended settings for Wi-Fi routers and access points
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
- Make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

Assigning non-standard subnet mask to local IP address on WRT54GX

I need to configure my WRT54GX V1 as an access point. I know how to accomplish this, but our corporate network uses a subnet mask of 255.255.252.0 How can I assign this net mask? The only options are contained in a drop-down menu and what I need is not there. Is there a different way to assign the subnet mask rather than using the menues?

It is a known limitation of Linksys wireless routers that they only support LAN subnets up to 255.255.255.0. I guess the assumption was that the router only runs LANs for up to 253 LAN devices. The plain access point setup (i.e. uplink through LAN-LAN connection) was never properly considered an option although it is documented in the Linksys easy answers.
Anyway, to set up the WRT as access point the LAN IP address of the WRT and the subnet mask is not important for the wireless connectivity into the LAN. The LAN IP address and subnet mask is only relevant to access the web interface of the WRT to make configuration changes. You have to make sure that the DHCP server on the WRT is turned off and that a LAN port of the WRT is wired to your existing LAN.
For the LAN IP address setup you have three options:
1. Use an available IP address inside your LAN and use subnet mask 255.255.255.0, e.g. if your LAN uses 10.0.0.0/255.255.252.0, assign the WRT an IP address of 10.0.3.200 with subnet mask 255.255.255.0. Of course, in that case you are only able to access the web interface of the WRT http://10.0.3.200/ from a computer in 10.0.3.* because that's the IP subnet which the WRT thinks is connected to its LAN ports. You cannot use a computer with IP address 10.0.{0,1,2}.* because the WRT does not know how to route these IP addresses. If your computer has an IP address outside the configured WRT LAN subnet you must temporarily change the IP address of the computer.
2. If you assign a LAN IP address and subnet mask to your WRT which includes a network router you may be able to get full connectivity by setting up static routes in the WRT. For instance, if you assign 10.0.3.200/255.255.255.0 to your WRT and your main LAN router sits at 10.0.3.254/255.255.252.0 you may be able to set up static routes for destinations 10.0.0.0/255.255.254.0 and 10.0.2.0/255.255.255.0 (or if it works even simply destination 10.0.0.0/255.255.252.0) to gateway IP address 10.0.3.254 on the LAN interface. Traffic from the computer to the router should go directly while the responses from the router to the computer go through the main router. I think this should work although I am not 100% sure.
3. Use any IP address outside your LAN, e.g. the default 192.168.1.1/255.255.255.0. Again, you must temporarily set up a static IP address on your computer to gain access to the web interface. But even with a LAN IP address outside your LAN the WRT will still bridge wireless clients into the LAN as it is supposed to do.

Defining VPN Subnet Mask?

Howdy,
Ok this problem occurs on Windows Vista, and is, to my knowledge classed as a bug, as it never occured on XP. So when I migrated over to OS X I assumed it would not be there... I was wrong, cos it is!
I connect to several VPNs to access MySQL DB's, and I use these everyday and are very important. Now a few of the VPN's use a subnet mask of 255.255.255.0, like most connections. Now the other VPNs use a subnet mask of 255.255.240.0, and when connecting to these VPN's OS X just assumes the subnet is 255.255.255.0 and therefore, even though it connects fine, I cannot access anything on this server cos of this problem!
Now the only way, to my knowledge, around this is to run the ifconfig command to get my assigned IP Address, then run the command:
sudo route add -net 192.168.16.0 192.168.16.* 255.255.240.0
Where * represents the last 1/2 digits of my assigned IP address. This does work, but is quite frustrating, just as it was running the "route" command on Vista.
Does anyone know of a way around this? So I can tell OS X to add me a subnet mask of 255.255.240.0? Or even a way in OS X to automatically run the above command via terminal when I connect?
Any help will be appreciated!
ta
Steve M

Do you know how I can join my office domain via the PPTP connection? I've triend both the QuickVPN client as well as, Windows built-in VPN connection. I've only been able to successfully connect using Windows VPN connection. I could not get QuickVPN client to work.

How to configure the eth1 port of NIcRIO 9024 to another IP address and subnet mask

Hi ,
I am using cRIO 9024 and am planning to configure it to be an MMS server that interacts with a client which is in another network with different IP and subnetmask. I want to run the server VIs from the host computer via the eth0 port and want to communicate the MMS messages through the eth1 port. the eth0 port is configured as a static IP as shown in the screenshot attached and would like to assign a separate IP and subnet mask to the other port . But when I try to save the configuration I get the error "Could not save your changes tot he target.The subnet mask for eth1 is invalid" .
I have already directly cross connected the Crio and have disabled the firewalls and still am not able to configure it.
1) is it possible to configure the ethernet ports to have separate IPs corresponding to different networks and thus the subnet masks?
2) If its possible then what is the mistake i am doing while configuring it ?
I would be extremaly grateful to have a reply on this as its pretty desperate to spend a lot of time just to set up the IP configurations..!!!!!
Regards
Abhinav

Dear Abhinav,
I'm sorry but what you are tryining to do is not suported by the Second Ethrnet Port on any cRIO and so you getting this error meeage.
Here a abstract out ouf the KnowledgeBase How do I Configure the Dual Ethernet Ports on Real-Time Controllers?:
Ethernet port 2 is currently not supported to communicate outside its own subnet. There is no capability of configuring the Default Gateway for Ethernet port 2 and therefore cannot connect to a large isolated intranet. However, there appears to be a common misconception that this port can only be used for communication between NI products: this is not the case, though any communication through the secondary port must be within the same subnet.
Kind Regards,
SG3 | Applications Engineering | National Instruments | NIG |

Presentationser won't start after subnet-mask change

After changing the subnet mask (in order to be able to connect to the server remotely), the 'Oracle BI Presentation Server' service (sawsvc) will not start anymore.
Eventlog shows: The Oracle BI Presentation Server service terminated with service-specific error 4294967295 (0xFFFFFFFF).
Can anyone help me out, what I have to alter, in order to make things work again?
After updating the host file I am able to connect to the database, so sqlplus and OBIEE administrator work. It is analytics that will not run anymore because of the service that will not start.
thank you for any help you can give,
Jeroen
Edited by: user10633241 on Jan 27, 2009 4:14 PM

Thanks for letting the community know.
The behavior described is usually related to issues with the startup files used to boot Windows. However, this could be one of the outliers.
HP units are usually pretty good about detecting incompatible memory and won't get as far as it is getting.
In the mean time, it certainly wouldn't hurt to try the steps listed while waiting for them to arrive.
↙-----------How do I give Kudos?| How do I mark a post as Solved? ----------------↓

[Solved] iptables rules for machine running as openvpn server

I set up an older laptop as an OpenVPN server for my home network (and a dwarffortress server, but that's beside the point). This is the first time I've set something like this up - I wanted a secure way of being able to ssh into my home network from outside.
In any case, I got it working (finally figured out I needed to port forward 1194 on my router), but I wanted to make sure that my iptables-rules look reasonable:
# Generated by iptables-save v1.4.21 on Sun Dec 28 02:16:10 2014
*nat
:PREROUTING ACCEPT [3:517]
:INPUT ACCEPT [3:517]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.168.88.0/24 -o wlp3s0 -j MASQUERADE
COMMIT
# Completed on Sun Dec 28 02:16:10 2014
# Generated by iptables-save v1.4.21 on Sun Dec 28 02:16:10 2014
*filter
:INPUT ACCEPT [323:24107]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [152:13348]
-A INPUT -i tun+ -j ACCEPT
-A FORWARD -i tun+ -j ACCEPT
-A FORWARD -s 192.168.88.0/24 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Sun Dec 28 02:16:10 2014
Last edited by emacsomancer (2014-12-29 21:32:25)

bleach wrote:
look at your filters you accept everything
:INPUT ACCEPT [323:24107]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [152:13348]
a better way would be to block everything but outgoing and then open ports and such.
:INPUT DROP
:FORWORWOD DROP
:OUTPUT ACCEPT
then your current(92.168.88.0/24 -j ACCEPT) forwarding will go through but not other things.
some good articles on iptables; iptables,simple stateful firewall
Ok, this is my modified setup:
# Generated by iptables-save v1.4.21 on Mon Dec 29 03:36:02 2014
*filter
:INPUT DROP
:FORWARD DROP
:OUTPUT ACCEPT
-A INPUT -i tun+ -j ACCEPT
-A INPUT -i wlp3s0 -p udp -m udp --dport 1194 -m state --state NEW -j ACCEPT
-A INPUT -s 192.168.1.0/24 -i wlp3s0 -p tcp -m tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
-A FORWARD -i tun+ -j ACCEPT
-A FORWARD -s 192.168.88.0/24 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o wlp3s0 -p tcp -m tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
COMMIT
# Completed on Mon Dec 29 03:36:02 2014
# Generated by iptables-save v1.4.21 on Mon Dec 29 03:36:02 2014
*nat
:PREROUTING ACCEPT [389:94808]
:INPUT ACCEPT [1:60]
:OUTPUT ACCEPT [1:72]
:POSTROUTING ACCEPT [1:72]
-A POSTROUTING -s 192.168.88.0/24 -o wlp3s0 -j MASQUERADE
COMMIT
# Completed on Mon Dec 29 03:36:02 2014
I added in lines to allow for SSH within my internal network. But now I am unable to make a OpenVPN connection from outside...what could be wrong?

How to change IP address and subnet mask without using the sys-unconfig ?

I have Solaris 10 x86. I've ran into problems using the sys-unconfig command
to change hostname and IP address.
How to I manually change the IP address and subnet mask values on Solaris 10 manually?
Thanks.

We just switched over a DNS server by using ifconfig, (same subnet), and killing named. seems to be working fine, anything I should look out for ?
steps:
Prep -
- change name in /etc/hostname.e1000g0
- change name and IP in /etc/hosts and /etc/nodename
- # uname -S dnsint02
Activate
- unplug old dnsint02
# ifconfig e1000g0 192.168.2.80
# kill -9 [PID of named]
Cleanup
- Remove old key on clients I SSH from.
- reconfigure backup software for new name/server combo.
Edited by: HarryC on Jun 25, 2009 9:29 AM

The subnet mask on the Extreme isn't the same as on the Express.

Dear Group,
I have my Extreme configured to do PPPoE and DHCP and my DSL modem is setup as bridged. Everything is finally working well. I have an Express extending the Extreme in a WDS.
When I look at the PPPoE tab in the Internet tab of the Extreme in AirPort Utility it shows a subnet mask of 255.255.255.255, but the Internet tab of the Express shows 255.255.255.0.
I don't have any problems at all and wireless clients are connected to the Extreme and the Express.
Is the Extreme's subnet mask part of my DSL connection and therefore a different subnet mask?
Not sure, but I'd like to make sure that I don't have something setup incorrectly.
Thanks,
Frank

This really isn't an issue as long as the AirPort Extreme base station (AEBS) is providing a working Internet connection. Since the AEBS is using PPPoE to connect to your ISP I'm not sure that the subnet mask is even used.
The subnet value of 255.255.255.0 used by the AirPort Express (AX) is typical.

LRT224 OpenVPN Server Security Subnet Mask restriction

Similar Messages

Maybe you are looking for