Date: Thu, 13 Nov 2003 09:05:11 +0100 From: "Kristian Rask" <krask@isupport.dk> To: <freebsd-net@freebsd.org> Subject: multiple VLAN's public IP's and NATd's : HowTo ? Message-ID: <001501c3a9bc$e24abb00$0a01a8c0@esesecurity.lan>
next in thread | raw e-mail | index | archive | help
Hi all
How would one go about running several instances of natd with unique =
public IP's for several VLAN's terminated on the same interface ?
The idea being that multiple seperate RFC-1918 networks are
terminated as VLANS in the FreeBSD machine and that
each VLAN goes through a seperate NAT'd instance in order to
NAT on a particular public IP.
1. House full of businesses.. (here shown w. 5/8)
2. Each buisiness has it's own LAN
3. Each LAN goes into a switch where the port is configured as a =
particular LAN
4. The switch is connected to a FreeBSD machine w. a set of
VLAN's matching those in the seperate businesses
5. There should be 1 instance of NATd running for each VLAN
6. Each NATd uses seperate public IP's
7. WAN Staticly configured using a /30
8. /29 net for 5/8 seperate NATd's (a.b.c.0/29) routed to the wan.
9. possibly "ifconfig SomePhysIf0 a.b.c.1/29"
I think for 5 IP's it would be something like:
for i in 2 3 4 5 6; do
natd -port 100${i} \
-f /etc/natd_${i}.conf \
-n <phys-if or vlan ?> \
-a a.b.c.${i}
done
for i in 2 3 4 5 6; do
ipfw add divert 100${i} all ....=20
(from VLAN-if | VLAN-CIDR | ... ?)=20
to any ...(in via VLAN-if | out via WAN-if | .... ?)
done
i *assume* i need to configure the /29 somewhere ..
i *suspect* that i can do something "weird" and actually
use all 8 IP's ... perhaps configure the 8 IP's as aliases on lo ?
we will have more than a few addresses in order to be able to deliver
routeable addresses if anyone so requests..
like.. a /26 of wich we use a /28 for permanent IP's and can deliver
6 /29 for the few who actually needs a routable network.
anyone has any experiences or hints / pointers ?
TIA and regards
Kristian aka The eternal newbie
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001501c3a9bc$e24abb00$0a01a8c0>