From owner-freebsd-isp@FreeBSD.ORG  Sat Jul 26 10:26:14 2003
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2563F37B401
	for <freebsd-isp@freebsd.org>; Sat, 26 Jul 2003 10:26:14 -0700 (PDT)
Received: from bessel.tekniikka.turkuamk.fi (bessel.tekniikka.turkuamk.fi
	[193.166.133.10])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CEAC243F85
	for <freebsd-isp@freebsd.org>; Sat, 26 Jul 2003 10:26:12 -0700 (PDT)
	(envelope-from eyurtese@bessel.tekniikka.turkuamk.fi)
Received: from localhost (eyurtese@localhost)
	by bessel.tekniikka.turkuamk.fi (8.9.2/8.9.2) with ESMTP id TAA19906;
	Sat, 26 Jul 2003 19:37:22 +0300
Date: Sat, 26 Jul 2003 19:37:21 +0300 (WET)
From: Evren Yurtesen <eyurtese@tekniikka.turkuamk.fi>
To: Tom Samplonius <tom@sdf.com>
In-Reply-To: <Pine.BSF.4.05.10307260820530.16986-100000@misery.sdf.com>
Message-ID: <Pine.A41.4.10.10307261935400.20186-100000@bessel.tekniikka.turkuamk.fi>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-isp@freebsd.org
Subject: Re: VLAN with/and NATD
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 26 Jul 2003 17:26:14 -0000

Yes but when I will have many vlans behind the machine and many clients,
the natd translation table might get full eventually if I only use 1
external IP address.

I want to use same IP address in different VLANs because I have customers
with same IP addresses which has seperate gateway machines. I will just
combine all the gateway machines in one machine. Thats my plan.

Evren

On Sat, 26 Jul 2003, Tom Samplonius wrote:

> 
> On Sat, 26 Jul 2003, Evren Yurtesen wrote:
> 
> > Hi,
> > I would like to have a machine with 2 ethernets 1 is for outside
> > connection(internet) the other one is for inside connections(VLANs)
> > 
> > Now the problem is that I want to use NAT inside VLANs that, lets say I
> > want to be able to use use 192.168.1.0/24 IP block in every VLAN and in
> > different VLAN's the same IPs should be able to be used.
> 
>   If you use the single 192.168.1.0/24 for all your VLANs, and you do not
> subnet it further, you don't really have multiple VLANs.  You just have
> one.
> 
> > Does anybody have any suggestion how to do this? I would guess that I need
> > multiple IP addresses in the outside interface but how do I map the VLAN
> > interfaces to use those IPs with NAT?
> 
>   No, you can multiple internal interfaces without problem.  natd only
> cares about traffic leaving and entering the external interface.  
> 
> > Evren
> 
> Tom
> 
>