Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 May 1999 09:47:52 +0930
From:      Greg Lehey <grog@lemis.com>
To:        Lanny Baron <lnb@freedom.cybertouch.org>, Benjamin Gavin <gavinb@supranet.net>, cjclark@home.com
Cc:        questions@freebsd.org
Subject:   Re: trying to have 2 nics in one box for firewall setup ...no luck
Message-ID:  <19990519094752.N89091@freebie.lemis.com>
In-Reply-To: <Pine.BSF.4.05.9905181510570.864-100000@freedom.cybertouch.org>; from Lanny Baron on Tue, May 18, 1999 at 03:30:56PM -0400
References:  <Pine.BSF.4.05.9905181510570.864-100000@freedom.cybertouch.org> <199905190005.UAA03487@cc942873-a.ewndsr1.nj.home.com> <Pine.BSF.4.05.9905181510570.864-100000@freedom.cybertouch. org> <4.1.19990518150745.00b7c750@mail.supranet.net> <Pine.BSF.4.05.9905181510570.864-100000@freedom.cybertouch.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday, 18 May 1999 at 15:30:56 -0400, Lanny Baron wrote:
> Hello,
> I have been trying for quite some time, with no headway to get my lan to
> function properly. My setup (physical) is as follows
>
> 4 pc's       /de0 (1st nic in freedom.cybertouch.org)
>
>                                                                   heretic
> cable modem/----(xl0 2nd nic in freedom.cybertouch.org)--->hub-->3 mrsmith
>
> gateway = 216.183.4.1
> de0 = 216.183.4.2
> xl0 = 192.168.0.1

It's not really clear what this is for.  This seems to be the only
address in the 192.168.0 network.

> heretic.cybertouch.org (off hub) = 216.183.4.9
> wired.cybertouch.org (off hub) = 216.183.4.3
> mrsmith.cybertouch.org (off hub) = 216.183.4.6

These are the configuration entries, sort of.  You should show the
output of ifconfig -a and netstat -r.  You should also describe the
network topography.  As I told you in private mail, I don't think you
even need a second Ethernet board.

> from /var/log/messages:
>
> May 18 14:39:03 freedom /kernel: arp: 216.183.4.9 is on de0 but got reply from 00:80:c8:e3:fa:05 on xl0

This suggests that your routing is mixed up.  I'd guess that your
route to freedom goes via xl0.  Yes, I know that's not what your
config entries show, but that's why I want to see the output I
requested.

> freedom# ps auxw | grep natd
> root      825  0.0  0.3   428  148  ??  Ss    3:00PM   0:00.00 /sbin/natd
> -dynamic -unregistered_only -interface de0
>
> from /etc/rc.conf:
> gateway_enable="YES"
> ifconfig_de0="inet 216.183.4.2  netmask 255.255.255.0"
> ifconfig_xl0="inet 192.168.0.1  netmask 255.255.255.0"
> defaultrouter="216.183.4.1"
> hostname="freedom.cybertouch.org"

On Tuesday, 18 May 1999 at 15:09:56 -0500, Benjamin Gavin wrote:
> Hi,
>   Are both of your NICs plugged into the same hub??  If so, this probably
> isn't a good idea, you'll mix the two networks' traffic together and
> confuse the OS.

No, this can work fine.  You just need to get your configuration
right.  It's a bit of a waste of an Ethernet board, though.

On Tuesday, 18 May 1999 at 20:05:30 -0400, Crist J. Clark wrote:
> [Did your diagram get mangled by your MUA? If not, I don't get it.]

Join the club :-)

> Lanny Baron wrote,
>> from /var/log/messages:
>>
>> May 18 14:39:03 freedom /kernel: arp: 216.183.4.9 is on de0 but got reply
>> from 00:80:c8:e3:fa:05 on xl0
>
> Makes sense to me. de0 is supposed to have the 216.183.4 network as
> you show below, but 216.183.4.9 is actually talking to xl0 who is on
> the 192.168.0 network.

It doesn't make any sense to me.  If xl0 is on 192.168.0/24, and
Lanny's description is complete, it shouldn't be responding to
anything.

I still don't think Lanny needs this second Ethernet board.

Greg
--
See complete headers for address, home page and phone numbers
finger grog@lemis.com for PGP public key


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990519094752.N89091>