Networking Suggestion

H

hogstrom

Bit poster
I use Parallels and Windows primarily for my VPN client as my employer doesn't have one for Mac. I find myself in a frustrating situation periodically as Parallels uses its own MAC for accessing the network and then requires me to proxy from the Mac Book Pro to Windows and when at the airport this may necessitate two activations (and double the cost). This also appears to external network guys like two systems proxying through each other which also raises some eyebrows.

What would be nice would be to always have an internal network interface with a 10., 172. or some other address such that the proxy address would always remain the same from the Mac's perspective and would only require one external MAC to be activated (which would be through Parallels).

This would be a huge advantage for me and perhaps others as well.
 
It is possible to use Host-Only Network with Mac OS X Internet Sharing (NAT). Have you tried that?
 
Serv,

can you please help me on this?
I HAVE to use NAT, because bridging is prohibited at my workplace. Howewer, when I authenticate myself to log in my employees network (kinda VPN connection), it suddenly kills the MacOS X Internet Sharing. Therefore no connection is available for the guest.

I have bought this great software, but unfortunately this issue and your USB card reader handling system (or the lack of it) makes it impossible to use it, and I'm being pushed to install boot camp which I REALLY don't want to.

Thanks,
Peter.
 
Peter,

Internet Sharing is a part of OSX, I can't really comment on it conflicting with your [unnnamed] software. And I can't test it either. The authors of this kinda VPN are in a much better position. Be assured that we're thinking on a better NAT solution than using OSX IS. But no promises.
All you can do is to look into system.log and see if natd dropped a note.
 
Serv,

thanks, I already looked into system.log, pls find below what it says about starting NAT then authenticating via macOSX' built in 802.1X (using PEAP) .
May it be a DHCP conflict? It is host only networking, so I think it may not.

If you have time, please take a look at this system.log snippet. I appreciate ANY suggestion.
Jun 22 08:59:11 MACDULOC named[162]: starting BIND 9.2.2 -c /etc/com.apple.named.conf.proxy -f
Jun 22 08:59:11 MACDULOC bootpd[161]: interface en0: ip 169.254.61.89 mask 255.255.0.0
Jun 22 08:59:11 MACDULOC bootpd[161]: interface en2: ip 192.168.2.1 mask 255.255.255.0
Jun 22 08:59:11 MACDULOC named[162]: /etc/com.apple.named.conf.proxy:21: no forwarders seen; disabling forwarding
Jun 22 08:59:11 MACDULOC ntpdate[174]: can't find host time.euro.apple.com\n
Jun 22 08:59:11 MACDULOC ntpdate[174]: no servers can be used, exiting
Jun 22 08:59:13 MACDULOC mDNSResponder: Adding browse domain local.
Jun 22 08:59:13 MACDULOC configd[36]: target=enable-network: disabled
Jun 22 09:01:01 MACDULOC configd[36]: posting notification com.apple.system.config.network_change
Jun 22 09:01:01 MACDULOC named[162]: /etc/com.apple.named.conf.proxy:21: no forwarders seen; disabling forwarding
Jun 22 09:01:01 MACDULOC named[108]: could not listen on UDP socket: address in use
Jun 22 09:01:01 MACDULOC named[108]: creating IPv4 interface en2 failed; interface ignored
Jun 22 09:01:01 MACDULOC named[108]: not listening on any interfaces
Jun 22 09:01:01 MACDULOC named[108]: /etc/com.apple.named.conf.proxy:21: no forwarders seen; disabling forwarding
Jun 22 09:01:06 MACDULOC configd[36]: posting notification com.apple.system.config.network_change
Jun 22 09:01:07 MACDULOC named[162]: /etc/com.apple.named.conf.proxy:21: no forwarders seen; disabling forwarding
Jun 22 09:01:07 MACDULOC named[108]: could not listen on UDP socket: address in use
Jun 22 09:01:07 MACDULOC named[108]: creating IPv4 interface en2 failed; interface ignored
Jun 22 09:01:07 MACDULOC named[108]: not listening on any interfaces
Jun 22 09:01:07 MACDULOC named[108]: /etc/com.apple.named.conf.proxy:21: no forwarders seen; disabling forwarding
Jun 22 09:01:07 MACDULOC lookupd[219]: lookupd (version 369.5) starting - Thu Jun 22 09:01:07 2006
Jun 22 09:01:08 MACDULOC mDNSResponder: Repeated transitions for interface en0 (169.254.61.89); delaying packets by 5 seconds
Jun 22 09:01:18 MACDULOC eapolclient[222]: en0 START
Jun 22 09:01:18 MACDULOC eapolclient[222]: peap_verify_server: server certificate not trusted, status 11 0
Jun 22 09:01:21 MACDULOC eapolclient[222]: eapmschapv2_success_request: successfully authenticated
Jun 22 09:01:25 MACDULOC kernel[0]: in_delmulti - ignorning invalid inm (0x352a38)
Jun 22 09:01:25 MACDULOC configd[36]: posting notification com.apple.system.config.network_change
Jun 22 09:01:25 MACDULOC lookupd[225]: lookupd (version 369.5) starting - Thu Jun 22 09:01:25 2006
Jun 22 09:05:46 MACDULOC kernel[0]: (60: coreservicesd)tfp: failed on 0:

Thanks,
Peter
 
Serv,

I know it has little to do with Paralells, but you might have more experiences with Internet Sharing over VPN than anyone at Apple.
Anyway, thanks for any hints you might have.
 
Peter,

What I can see from the log is that your Mac is authenticating to the network via EAP. There's nothing VPN-like in such authentication. It's disappointing that this kills natd. But I think you should be able to restart Internet Sharing when authentication completes.
 
Serv,

Sorry to misleading you, it's EAP authentication, I should have written this earlier (writing VPN-like made sense at that time :))). Altough I'm able to restart internet sharing, it stops suddenly. Since it's completely Apple issue, I should contact those fruity-guys....
thanks again.
 
This is indeed the case. Internet Sharing stops immediately after you click "Start." While this is an Apple OS issue, it nonetheless affects Parallels Desktop for Mac very significantly (such that it's useless for us in a 802.1x wireless environment). I hope it's addressed somehow.
 
Hi csoto,

actually this problem has been solved by Parallels build 1970 with Shared networking. Before this build I used an ipforwarder shell script, if you find Shared Networking not working, pls tell and I send you this script in mail.
 
You must log in or register to reply here.
Back
Top