CS> Comments inline, preceeded by CS>

Now I'm wondering if LEAF can do the following:

-a PC with more than 3 Ethernet cards (min. 3, expected 5-6)

CS> Not a problem...I've got several routers with 5 10/100 ports.  There are
reports of 11+ port systems...

-one ETH-port is the external port
 (ethernet-to-ethernet routing, no modems connectet to a serial port)
-the other ports are internal ports

CS> This is easy to do, and is supported by the setup scripts of Dachstein.
Simply add multiple networks to the INTERN_NET= variable in network.conf.
By default, they will all be masqueraded to the internet (or upstream port),
and therefore connected to the "outside world", but traffic will not be
forwarded between the various internal ports unless you explicitly create
forwarding rules allowing it.

-each internal port
 -has his own private IP-network
 -can access anything outside the ext. port.
 -can access a ftp-service on the LEAF-machine
 -cannot access another internal network

CS> All of this is easy as well, with the exception of FTP services.
Typically, you don't run an FTP service on your router/firewall, but you
should be able to get this going if you really want to.  I'd suggest using a
seperate FTP server, however.

Optional (in descendig order):
-the LEAF-Machine makes DHCP for each int. Port
 (note: each int. port should have his own subnet)

CS> Just create an appropriate dhcpd.conf file...

-traffic stats like MRTG for each int. and the external port

CS> Not a problem if you load the SNMP package (and know how to configure
MRTG :)

-speed limiting for an individual int. port (ex: ETH1 > max 128kb)
-or traffic priority (ex: ETH1 > P1  /  ETH2 > P2  /  ETH3 > P2 ...)

CS> There is built-in support for some aspects of QoS (Quality of Service)
and traffic shaping.  You can do about anything you want if you're willing
to create custom rules.  Note the floppy version of Dachstein does not come
with a QoS enabled kernel by default (due to size), but a kernel with full
QoS and advanced routing support is available.

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)


_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to