From owner-freebsd-questions@FreeBSD.ORG Sat Dec 6 11:44:22 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E034A16A4CE for ; Sat, 6 Dec 2003 11:44:22 -0800 (PST) Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.45]) by mx1.FreeBSD.org (Postfix) with ESMTP id AC2BB43FE0 for ; Sat, 6 Dec 2003 11:44:21 -0800 (PST) (envelope-from cswiger@mac.com) Received: from mac.com (smtpin08-en2 [10.13.10.153]) by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id hB6JiNAD017529; Sat, 6 Dec 2003 11:44:23 -0800 (PST) Received: from [192.168.1.6] (pool-162-84-170-16.ny5030.east.verizon.net [162.84.170.16]) (authenticated bits=0)hB6JiIxO018800; Sat, 6 Dec 2003 11:44:19 -0800 (PST) In-Reply-To: <20031206080634.59D0717028@ns.istop.com> References: <20031206080634.59D0717028@ns.istop.com> Mime-Version: 1.0 (Apple Message framework v594) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <981F72FC-2824-11D8-8386-003065A20588@mac.com> Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Sat, 6 Dec 2003 14:44:24 -0500 To: liquid@istop.com X-Mailer: Apple Mail (2.594) cc: freebsd-questions@freebsd.org Subject: routing, was: Re: X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Dec 2003 19:44:23 -0000 Hi, Liquid-- On Dec 6, 2003, at 3:06 AM, liquid@istop.com wrote: > I'm going to have a static IP - say xx.xx.yy.zz - and a subnet as > follows: > xx.xx.xx.zz/28 Do you mean, "I am switching from a single static IP to a 16-address subnet", or are you going to have both a static IP on one connection AND a /28 subnet over a second connection? > 1. Do I need to inform the ISP of my intentions so that people can > actually > connect to an IP which is part of my subnet, but behind this router I > intend > to build? (I didn't think it was necessary until I read 19.2.5 in the > handbook - it doesn't seem like it's necessary based on that alone, > but it > has placed some doubt in my mind). No, your ISP will route IP traffic for the subnet to you. On the other hand, certainly you should talk to your ISP about your network topology if you have any specific issues or questions for them. > 2. I currently run my FreeBSD router on a cable connection while > waiting > for the new ISP to get setup. I use NAT to translate the EXT. IP to > the > internal ones of my lan. I don't need to run nat for the setup I plan > to > have do I? No, you don't need NAT for IPs on your new subnet: they are "directly Internet routable" if you want a buzzword. :-) However, you should spend some time considering security and setting up a firewall. Sometime later, you might want to consider how to have machines on your new network be able to fail-over to your single-IP connection; and one way of doing so would be to use a NAT gateway of your public IPs from the /28 subnet via your original connection. [The inverse of -unregistered_only.] > 3. Finally, I've read (briefly thus far) about routed on FreeBSD. > Would > this daemon be used in such a way that I don't even need to add static > routes for LAN? Yes, but routed is really intended for dynamic routing within an intranet, and is overkill for your situation. Specificly, you would accomplish more by configuring DHCP on your FreeBSD machine and broadcasting the correct default router IP than you would gain by using routed. Ping all of your machines (or use the subnet broadcast address), and do an "arp -a" to get MAC addrs, then set up host sections to allocate static IPs via DHCP, so your machines can all be network auto-configured even if you rebuild/reinstall the OS on a particular box. > Again, this address is not subscribed, so please answer by putting my > address in the cc: field. Done. -- -Chuck