DSL: PPP versus Bridging was Re: Getting DSL configured using Linux
James Lee Bell
jbell@eai-healthcare.com
Fri, 07 Apr 2000 16:51:18 -0700
This is a multi-part message in MIME format.
--------------B36A8B5297BA68A450F8E54D
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
As many of us appear to be, I'm checking into DSL, and I've seen
comments regarding running the Cisco 675's (model num correct?) in
either PPP or Bridging mode. I think I've got these definitions correct
in my head, but please correct me if I'm wrong.
PPP mode: Router gets the public IP address on it's external interface,
and it's internal interface (rj45) gets set to one of the privately
usable networks, i.e. 10.* The router can then do your port blocking,
can do NAT, and can even do DHCP serving if you want it to.
Bridging mode: Router acts as a bridge, passing any and all packets from
one interface to the other regardless of packet contents ("packets is
packets"), and doesn't exist as an entity in and of itself as far as IP
networking is concerned. So any assigned IP address goes to the external
NIC of the firewall (if present) or the first machine turned on if crazy
enough to plug router directly into a hub.
So it seems to me somewhat arbitrary and up to the ISP as to which mode
is used, except when thinking about having a firewall or not. If you're
not planning to run your own firewall, then PPP sounds good because you
can do some basic firewalling using the router. But if you're planning
to run your own firewall for whatever reason (granularity, logging, ...)
then you can work with either mode, i.e. if forced to run it in PPP mode
you run without any filters and probably without NAT at that level (just
for speed) and let your firewall do any filtering, forwarding, port
mapping, NAT, etc. And if you must use the router in bridging mode,
there's no difference to your firewall other than it's external nic gets
the public IP address.
--------------B36A8B5297BA68A450F8E54D
Content-Type: text/x-vcard; charset=us-ascii;
name="jbell.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for James Lee Bell
Content-Disposition: attachment;
filename="jbell.vcf"
begin:vcard
n:Bell;James
tel;fax:602-266-7020
tel;work:602-266-7400 x229
x-mozilla-html:FALSE
url:http://www.eai-healthcare.com
org:eai Healthcare Staffing Solutions, Inc.;Information Technology
version:2.1
email;internet:jbell@eai-healthcare.com
title:Network Engineer
note:Information Technology Rules!
adr;quoted-printable:;;3800 N. Central Ave.=0D=0ASuite 800;Phoenix;AZ;85012;USA
fn:James Lee Bell
end:vcard
--------------B36A8B5297BA68A450F8E54D--