From owner-freebsd-questions  Fri Sep 15 23:35:43 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id 6292E37B424
	for <freebsd-questions@freebsd.org>; Fri, 15 Sep 2000 23:35:41 -0700 (PDT)
Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Fri, 15 Sep 2000 23:34:31 -0700
Received: (from cjc@localhost)
	by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id e8G6Zba99513;
	Fri, 15 Sep 2000 23:35:37 -0700 (PDT)
	(envelope-from cjc)
Date: Fri, 15 Sep 2000 23:35:37 -0700
From: "Crist J . Clark" <cjclark@reflexnet.net>
To: Dan Busarow <dan@dpcsys.com>
Cc: "Unice, Kyle" <kyle.unice@intel.com>,
	"'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG>
Subject: Re: Newbie net config question
Message-ID: <20000915233536.X69158@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <A7675204C322D411820600A0C96B7BF5783611@ORSMSX36> <Pine.BSF.3.96.1000915144511.26814B-100000@java.dpcsys.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <Pine.BSF.3.96.1000915144511.26814B-100000@java.dpcsys.com>; from dan@dpcsys.com on Fri, Sep 15, 2000 at 02:55:33PM -0700
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Fri, Sep 15, 2000 at 02:55:33PM -0700, Dan Busarow wrote:
> On Fri, 15 Sep 2000, Unice, Kyle wrote:
> > Questions:
> > 1. Is there some kindoff document for FreeBSD 4.1 on how to do this?
> 
> Possibly, but it is extremely easy so a document isn't really necessary.
> 
> > 2. Should the IP Gateway for my local net (192.168.x.x) have a gateway
> > address of 192.168.x.y that is the IP address of my internal network nic on
> > the gateway or should the gateway for both nics be set to my ISPs gateway?
> 
> Let's use some real number to make it clear.
> 
> Internal network, 192.168.1.0/24
> External network, 206.16.184.0/24
> 
> All changes (other than rc.firewall) go in /etc/rc.conf
> 
> You don't need the firewall stuff to get the network up so you
> may want to set 
> 
> firewall_enable="NO" at first.

No, to get NAT working you need the firewall up. You need the divert
rule working. However, during testing,

  firewall_enable="YES"
  firewall_type="OPEN"

The NAT settings you'll need,

  natd_enable="YES"
  natd_interface="fxp0"

Make sure to get the open firewall working, then try adding rules.

> Change NIC types to suite and these are the lines required to
> setup a gateway machine.
> 
> network_interfaces="fxp0 fxp1 lo0"
> ifconfig_fxp0="inet 206.16.184.7  netmask 255.255.255.0"
> ifconfig_fxp1="inet 192.168.1.1 netmask 255.255.255.0"
> defaultrouter="206.16.184.1"
> gateway_enable="NO"
>
> That's it.  Reboot and you'll have a working gateway.

Well, I think it is pretty clear that last line needs to be,

  gateway_enable="YES"

> Hosts on the internal network should use 192.168.1.1 for
> their default gateway.

Yup.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message