Hello,
I am unable to get ipnat working in a multi homed FreeBSD system. Is there some special method that works? because I've yet to find it. What I am attempting to do is:
I have 2 Internet Connections (one is DSL and the other is cable), they are dc0 and dc1 respectively. I also have an interface facing my local LAN.
I have two segments on my LAN, one is 192.168.1.0/24, and the other is 192.168.2.0/24 - What I am attempting to do is have the DSL line (dc0) to be used for one segment, and the cable (dc1) for the other segment. I am *not* attempting to load balance.
My current ifconfig produces the following:
dc0: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=8<VLAN_MTU>
inet6 fe80::250:bfff:fead:886%dc0 prefixlen 64 scopeid 0x1
inet 64.180.103.x netmask 0xfffffc00 broadcast 64.180.103.255
ether 00:50:bf:ad:08:86
media: Ethernet autoselect (10baseT/UTP)
status: active
dc1: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=8<VLAN_MTU>
inet6 fe80::250:bfff:fead:884%dc1 prefixlen 64 scopeid 0x2
inet 70.68.27.x netmask 0xfffffc00 broadcast 255.255.255.255
ether 00:50:bf:ad:08:84
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::211:d8ff:fe3d:564a%vr0 prefixlen 64 scopeid 0x3
ether 00:11:d8:3d:56:4a
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4The gateway for dc1 is 70.68.24.1, the gateway for dc0 is 64.180.100.254, I have managed to get both IP addresses working on the machine by adding the following ipf rule:
pass out quick on dc0 to dc1:70.68.24.1 from 70.68.27.x to any pass out quick on dc1 to dc0:64.180.100.254 from 64.180.103.x to any
This makes sure that the packet is forwarded to the correct interface based on the source IP address, however when I enabled these rules my NAT *fails* forward packets to the internet, my ipnat configuration is as follows:
map dc0 192.168.1.0/24 -> 0/32 map dc1 192.168.2.0/24 -> 0/32
Am I missing something here?
--Peter
_______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
