From owner-freebsd-net@FreeBSD.ORG Sat May 1 00:30:52 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4509116A4CE; Sat, 1 May 2004 00:30:52 -0700 (PDT) Received: from flash.mipk.kharkiv.edu (flash.mipk.kharkiv.edu [194.44.157.113]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7078D43D2F; Sat, 1 May 2004 00:30:49 -0700 (PDT) (envelope-from artem@mipk.kharkiv.edu) Received: from mipk.kharkiv.edu (aws.aws-net.org.ua [192.168.32.1]) i417TLT1036266; Sat, 1 May 2004 10:29:23 +0300 (EEST) (envelope-from artem@mipk.kharkiv.edu) Message-ID: <409351D8.8060603@mipk.kharkiv.edu> Date: Sat, 01 May 2004 10:29:28 +0300 From: "Artyom V. Viklenko" Organization: IIAT NTU "KhPI" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: ru, uk, en MIME-Version: 1.0 To: "Mitch (bitblock)" References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-isp@freebsd.org cc: freebsd-net@freebsd.org Subject: Re: Routing and VPN troubles... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 May 2004 07:30:52 -0000 Mitch (bitblock) wrote: > The crux of my problem, is that I need to configure a VPN network in a > star - one central node, many outside nodes... easy right? First of all, is it really a VPN network? How you connect your ADSL links to FBSD 4? And second, if FBSD4 is only point which handle ALL traffic between FBSD1-3 and their clients, you can use ipfw to block unwanted traffic. For example, if your ADSL links connected to VLAN-avare switch, and each ADSL link paired to FBSD4 in the separate VLAN, you can set up different interfaces vlan0-vlanx for each one and use these interfaces in ipfw rules. -- Sincerely yours, Artyom V. Viklenko. ====================================================== System Administrator artem@mipk.kharkiv.edu ------------------------------------------------------ IIAT NTU "KhPI" 21, Frunze Str., Kharkov Ukraine 61002 Phone: +38 (0572) 400026 Fax: +38 (057) 7062749 ======================================================