
Hi, We are a medium sized ISP, and as such we have a publicly visible network using non-private IP space. I am looking to renumber our entire network to private IP space, and was wondering if any other members have done this. The only problem I can see is that traceroutes from outside our AS will fail at our border routers, which will make troubleshooting harder. Has anyone done this and would they recommend it? Robin

Hi, On Thu, Sep 27, 2001 at 08:43:24AM +0100, Robin Cragg wrote:
We are a medium sized ISP, and as such we have a publicly visible network using non-private IP space. I am looking to renumber our entire network to private IP space, and was wondering if any other members have done this. The only problem I can see is that traceroutes from outside our AS will fail at our border routers, which will make troubleshooting harder. Has anyone done this and would they recommend it?
Don't do this. If you use private addresses behind your firewall and use NAT, that's your decision, but DO NOT USE rfc1918 space for publically visible infrastructure (think ICMP packets like host unreachable, fragmentation required, etc.). You MUST NOT send packets with RFC1918 source addresses into the world, and simply denying those packets will break things. Gert Doering -- NetMaster -- SpaceNet AG Mail: netmaster@Space.Net Joseph-Dollinger-Bogen 14 Tel : +49-89-32356-0 80807 Muenchen Fax : +49-89-32356-299

We are a medium sized ISP, and as such we have a publicly visible network using non-private IP space.
that is specifically against rfc 1918. don't do it. randy

On Thu, Sep 27, 2001 at 04:23:07AM -0700, Randy Bush wrote:
We are a medium sized ISP, and as such we have a publicly visible network using non-private IP space.
that is specifically against rfc 1918. don't do it.
He said "non-private", what he intends seems to be against RFC1918; the current Structure seems however fine. Although, even when reading the mail a third time i dont really understand what he is intending to do, so basically i might be wrong. -rg
participants (4)
-
Gert Doering
-
Randy Bush
-
Rico Gloeckner
-
Robin Cragg