[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Virtual Networks

Hello,
	I've got a customer using a Qube2 as a firewall/router on a DSL
connection. In addition to needing real routable addresses (supplied
with the DSL connection) for a few workstations, they also have a dozen
workstations that need internet access via the installed proxy (Unixpac
proxy module). I've been trying to enable a 192.168.x.x network via a
virtual interface (eth0:0) and ipfwadm but don't seem to be able to get
the combinations right, or I'm missing something.

	I have assumed up to this point that the IP Masq features are
built into the standard kernel based on the contents of
/proc/sys/net/ipv4, but have considered that I may need to recompile the
kernel, perhaps someone can confirm this? I've seen virtual networks setup
before under Solaris and it seems to me this config should be possible,
but before I jump in and start making changes I thought it would be best
to ask :-). My background is Solaris/*BSD and I haven't had to dabble much
in these waters (ipfw) in the past. Below is a brief list of commands used
in my latest attempt and a snippet of the active config (public IPs
stripped out), any help would be appreciated.

ifconfig eth0:0 inet 192.168.1.1 netmask 255.255.255.0 up
route add 192.168.1.1
/sbin/ipfwadm -F -a m -W eth0:0 -S 192.168.1.0/24 -D 0.0.0.0/0

Destination     Gateway         Genmask         Flags   MSS Window  irtt
Iface
255.255.255.255 0.0.0.0         255.255.255.255 U      1500 0          0
eth0
192.168.1.1     0.0.0.0         255.255.255.255 UH     1500 0          0
eth0:0
127.0.0.0       0.0.0.0         255.0.0.0       U      3584 0          0
lo
0.0.0.0         <public gateway>  0.0.0.0         UG     1500 0          0
eth1

eth0:0    Link encap:Ethernet  HWaddr 00:10:E0:00:E2:9A
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP RUNNING  MTU:1500  Metric:1
          RX packets:1 errors:0 dropped:0 overruns:0
          TX packets:1 errors:0 dropped:0 overruns:0

Regards,
        Chris