Date: Sun, 6 Feb 2005 15:15:32 +0200 From: "Chris Knipe" <savage@savage.za.org> To: <freebsd-questions@freebsd.org> Subject: Re: Re[2]: ipfw / ppp NAT Message-ID: <005401c50c4d$f01573c0$0a01a8c0@ops.cenergynetworks.com> References: <001a01c50c48$a63ab0d0$0a01a8c0@ops.cenergynetworks.com> <003001c50c49$48261b50$0a01a8c0@ops.cenergynetworks.com> <797811732.20050206140152@hexren.net>
next in thread | previous in thread | raw e-mail | index | archive | help
> given that tun0 is the interface that connects x.x to the world (y.y) > then what you have now would be: > "ipfw add divert natd all from any to any via tun0" > > from what I understand what you want you should probably add somethin > like: > "ipfw add divert natd all from any to any via rl0" > rl0 being the interface connecting x.x to x.1 > > on related news, why would u want to do something like that ? > > Hexren Quite complex.... 1) I have a routed network on 198.18/15 going via NAT to the net. 2) I have two gateways, running VRRP for high redundancy. 3) Gateway 1 routes "local traffic" via tun0, the rest (ala international) is sent to gateway 2 4) Gateway 2 routes "the rest" via tun0, and "local traffic" to gateway 1 This all happens now via BGP, and so far this is working without a problem. The problem now, is that I only receive one "real" IP per PPPoE session. Multilink is out of the question (not supported), so is getting multiple IPs per session. A further problem, is that the gateway address of these PPPoE sessions, are 100% exactly the same. Thus, what I need to achieve now (and hence what is my problem): 1) I need to establish MULTIPLE PPPoE sessions on Gateway 1 (even if the gateway address of the PtP link are the same) - BIG problem. I have semi fixed this by forcing my gateway address of the secondary pppoe sesssions to be the rl0 interface (and this is working) (i.e. ifaddr 10.0.0.1/32 x.x.x.x 255.255.255.0 0.0.0.0) 2) I need to be able to forward the live ip address received from one of the secondary PPPoE Sessions on Gateway1 to any host inside my routed network (198.18/15). 3) The load balancing and routing between Gateway 1 and Gateway 2 should all still work, and basically just exclude what ever is happening on the secondary PPPoE Sessions. I know I'm not giving allot of information, but this is ALLOT of work / configurations. If it's not a problem, I will post what is required (config wise), but yeah... We're talking close to 300 statically managed routes between Gateway 1 & 2... What my problem is now, is basically what would seem, like a nat / routing issue. PPP1 -> GW1 -> 198.18/15 PPP2 -> GW1 -> CLIENT1 INSIDE 198.18/15 Incoming, the connectivity is working. I establish a connection to PPP2, GW1 forwards the data to CLIENT1, and a tcpdump shows that the data does arrive. The problem is that the replies from CLIENT one, goes to GW1 and GW1 transmit the data back to the Internet via PPP1, and not PPP2...... Thus, in a nutshell now, I need to "map" PPPx to CLIENTx without causing any problems for the rest of the network.... -- Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005401c50c4d$f01573c0$0a01a8c0>