Craig Caughlin wrote:
Hey...thank you Charles & Tom for the expeditious response! Let me see if I
can address you both...


O.K., so I gather that I need to do 2 things:


1.) Take Charles suggestion and "add entries for eth0:0, eth0:1, etc., along
with the entry for eth0", and 2.) Tom's suggestion "ADD_SNAT_ALIASES=Yes in
shorewall.conf". Is that right?

No, you want to do one or the other. And you want to consider whether round-robining your SNAT is what you really want.



Charles, how do I "add entries" as you suggest (I don't know how to do that :-( )? Here's what I have:

This is a LEAF FAQ. You add one line to the eth0 interface description for each address. Example (folded to fit my mailer's default line width):


up /sbin/ip addr add 66.60.172.202/24 brd 66.60.172.255 \
        dev eth0 label eth0:0

The "label eth0:N" part is strictly window-dressing for compatibility with ifconfig; IIRC, Bering doesn't even have ifconfig so you can leave that off.


Tom: If I "ADD_SNAT_ALIASES=Yes in shorewall.conf", do I need to change ADD_IP_ALIASES to "No" or should I leave it to it's default "Yes"?

If you add your IP addresses to your /etc/network/interfaces file then there is no point to set ADD_SNAT_ALIASES=Yes. You want to do one or the other.


ADD_IP_ALIASES is completely independent of ADD_SNAT_ALIASES. You really should read http://shorewall.net/Shorewall_and_Aliased_Interfaces.html.


Once I have made the "correct" modifications, ip addr should show all of the addresses, and I "should" be able to ping them all, shouldn't I???


Yes.


-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]




------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to