On 16/08/2013 20:30, Terje Elde wrote:
On 16. aug. 2013, at 19:17, Frank Leonhardt <freebsd-...@fjl.co.uk> wrote:
Has anyone actually done this, and if so, how?
This is wrong on so many levels, and you'll have to work around all og them.
Yes, you can use nat, but what about adress-resolution? And so on.
If it's a specific thing you need to work - a spesific server for example - nat
can work, but if you need general bridging, best to avoid conflicts.
Note that there are alternatives, such as L2-bridging rather than L3.
If you explain a bit more of the setup, and what you need to work, it'd be
easier to suggest something.
Right now, we know bits of the setup, but not really what problem(s) you're
trying to solve.
The setup is basically as described and the desired outcome is to NAT
"the other end" so the addresses appear different. FWIW it only has to
be done one way, which I didn't mention. Address resolution is not a
problem - easily fixed at DNS. As I said, the only thing that cannot be
changed are the local IP addresses in use, so thanks for heeding my
warning. Lesser mortals might have change the ranges anyway. Yes, its
obviously best to avoid conflicts but if you're bigger than Fred-in-shed
you're going to get them.
What I'm asking (VPN NAT) is possible, and a recognised solution to the
problem I've described - the big boys do it all the time, apparently. My
local Cisco expert was able to talk me through doing it, but only on IOS
:-( Basically you put the VPN traffic through a NAT table on both ends,
so all the remote addresses get mapped to an alternative local range.
You pretty much have to do it both ways (source and destination) or you
won't get a reply.
I can think of dozens of workaround for specific situations (e.g. it it
was to access a limited number of hosts, dual-home the ones you need)
but this is specially a general solution.
I'm sure this is going to be a PITA to work out on FreeBSD, because I'm
not that familiar with the tools. I was hoping someone had done it, but
if I have to.... I may be gone for some time.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
