From owner-freebsd-questions@FreeBSD.ORG  Wed May 12 23:12:01 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E293D16A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 12 May 2004 23:12:01 -0700 (PDT)
Received: from mx2.mail.ru (mx2.mail.ru [194.67.23.122])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 84DAD43D45
	for <freebsd-questions@freebsd.org>;
	Wed, 12 May 2004 23:12:01 -0700 (PDT)	(envelope-from schizik@mail.ru)
Received: from [195.96.167.130] (port=49173 helo=[192.168.2.104])
	by mx2.mail.ru with esmtp 
	id 1BO9Ro-000HfC-00
	for freebsd-questions@freebsd.org; Thu, 13 May 2004 10:12:00 +0400
From: Schizik <schizik@mail.ru>
Organization: Special Threatment Facility for Mentally Sick Perverts
To: freebsd-questions@freebsd.org
Date: Thu, 13 May 2004 10:10:59 +0000
User-Agent: KMail/1.6.1
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-Id: <200405131010.59326.schizik@mail.ru>
X-Spam: Not detected
Subject: Network setup question
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 13 May 2004 06:12:02 -0000

Hello, everyone!


I do need following setup, but I have no idea how it can be acomplished.

Internal Network  <--------------> Gateway  ----> Internet link 1
                                                       |______ Internet link 2


Internal network uses private IP space
All computers on internal network connect to gateway
with VPN (gateway has mpd running) assigned IPs are
also private space, gateway does NAT.

There are 2 classes of users on Internal network
They are assigned VPN IPs from two different private networks
(like 10.0.1.x and 10.0.2.x)

The problem is that traffic from 10.0.1.x should be NATed and send via
Internet link 1, while traffic from 10.0.2.x should be NATed and send via
Internet link 2.

Is this kind of setup possible?


Cheers,
         Alex.