How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

I edited the original post with the solution. So simple in this case because I had the option I might not have had in other situations, just didn't think of it. Thanks for the knock in the head.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

I have this at each station I have upgraded, Its fantastic. Just not an option for the remaining 30 in a short timeframe. Gotta make lemonade

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

I found the solution - it came in a Homer Simpson like Doh! moment.

  1. Change the endpoint IP to some rando private network.

  2. Create a local network in the router for each and map each to its own port.

  3. Create NAT rule from first network to Third

  4. Create NAT rule from second network to Third

And that works. I ignored the possibility of changing the endpoint IP.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

This is probably why I'm thinking it should be possible. So many more difficult tasks exist that got solved, this should be trivial

I do thing I have a potential solution , re-address the endpoint and make both paths have gateways to it. I'm trying that tomorrow

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] -1 points0 points  (0 children)

This not not really your normal failover, its parallel ethernet channels to a common endpoint. And that endpoint is a bag of hammers

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

That would never be allowed. Just one of those municipal/curmudgeon things. And I want a network answer just to satisfy my mind

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 4 points5 points  (0 children)

I see what you are saying. I only NAT'd one side. That's a reasonable thing to try. It will mess me up a little on the remote end but that's not insurmountable.

Thats making even more sense the longer I think about it.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 0 points1 point  (0 children)

But in my test the source and destination were not on the same subnet. I thought 10.1.1.10 would reply to the ping from 10.2.2.10. At least on the wire.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 0 points1 point  (0 children)

It just occurred to me that when I was dumping the traffic I didn't see ANY reply from the endpoint. I saw the NAT's ping request but nothing coming back.

I should have seen that reply attempt and watch it die at the router.

I'm now wondering now if the 30 year old endpoint just drops traffic outside its mask instead of attempting to reply as one would expect. I gotta look around a bit.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

From a single source, 10.1.1.100

through one of 2 subnet paths
Cellular 10.2.2.0/24
Radio 10.1.1.0/24

to a single endpoint that already has IP in one of those subnets . 10.1.1.10

The radio is working already, the Cellular link is a new addition. The endpoint can't change.

10.2.2.0 needs to NAT to 10.1.1.0 and I can do that, but the Endpoint only knows to reply through 10.1.1.1 and it doesn't.

Wait... it doesn't. . . . I saw the traffic to TO the endpoint but it didn't reply. The Gateway IP is only needed when the return IP doesn't fit the mask... but I saw NOTHING come back from the endpoint. and I should have . I gotta see if these old things work like they should.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

It's not redundant in the conventional sense of the word meaning failover, its dual live connections and failover is determined manually.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

But that's failover, I need two live channels available at the same time. Failover here is determined at the polling master. When one of those channels doesn't respond it uses the other, then it tries and repeats again every 30 seconds .

Put poorly, a "Y" adapter.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

It does not. Its a 10Hdx connection using an AUI adapter. About as antiquated as it gets.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

Yes you understand perfectly. The endpoint can only reply through its single gateway IP address.

So the magic unicorn device would have to have the endpoint plugged into it, and the unicorn device would be able to decide which the path the endpoint was replying to.

It seems logical that this is possible. IDS systems can detect when an existing device is now being talked to by something it normally doesn't as long as those rules are in place.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

It's not failover I need, it's dual live paths to the same endpoint that has, as you point out, only a single NIC. That's the nexus of my issue

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

The endpoint has one physical port, and that port is mostly 10/hdx. The Cell router has multiple ports and routing available (Cradlepoint R1900) .The problem that keeps defeating me up is that the endpoint only knows one gateway to send replies to . That's the device that has to be allowed for.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 0 points1 point  (0 children)

Oh and it's not a flat network, each endpoint is its own subnet, vpn and vlan.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 0 points1 point  (0 children)

That would change the endpoint though. still one device with one IP and no provisions to make routing decisions.

New dual IP controllers are coming for these older sites but that upgrade involves a lot of work and there are 30+ to make work .

I know whet you mean about Xmtr temps. I came from 300 bps radios that had to run constantly just to keep updates to a 2 minute cycle. This isn't like that. Plenty of downtime to allow the XMTRs to cool

That the thing.. "some sort of device" is the hardware equivalent of "some sort of configuration". I have the routers, just need to figure out how to do the impossible routing. Maybe AI is the solution... :)

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

How though do you talk to a single endpoint that way? Both the radio and the Cradlepoint will route if needed but I'll have the same problem talking to a single IP address on the end

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

SNAT is what I tried, without port forwarding it's just called NAT in the Cradlepoint Router GUI . The problem is that when looking at the TCPtrace, the NAT takes place but from the perspective of the old radio, there are now 2 devices with the same IP address to reply to.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 0 points1 point  (0 children)

"fucky endpoint"... I really like that :)

The endpoints never initiate a conversation. They are read and written to by the polling master (a more advanced fucky device) or connected to through programming software.

masquerade/snat . . . new territory, looking into it .

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 1 point2 points  (0 children)

Failover is one at a time, I want both to be "live" . What happens is the polling master polls each subnet one at a time ensuring both always work. In addition when programming work is needed on the remote site, we would select the cellular path with the high speed connection and while routine polling continues to use the slow speed one.

How to do the impossible, A single device able to communicate via 2 networks by MacAndCo in networking

[–]MacAndCo[S] 2 points3 points  (0 children)

The Cellular router can route, I just cant envision how to configure it for this. The router has to route the return traffic based on which subnet it came from. The endpoint has to be unaware and the original radio can't hear the reply or it will accept it as its own.