Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Sep 2000 23:35:37 -0700
From:      "Crist J . Clark" <cjclark@reflexnet.net>
To:        Dan Busarow <dan@dpcsys.com>
Cc:        "Unice, Kyle" <kyle.unice@intel.com>, "'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Newbie net config question
Message-ID:  <20000915233536.X69158@149.211.6.64.reflexcom.com>
In-Reply-To: <Pine.BSF.3.96.1000915144511.26814B-100000@java.dpcsys.com>; from dan@dpcsys.com on Fri, Sep 15, 2000 at 02:55:33PM -0700
References:  <A7675204C322D411820600A0C96B7BF5783611@ORSMSX36> <Pine.BSF.3.96.1000915144511.26814B-100000@java.dpcsys.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Sep 15, 2000 at 02:55:33PM -0700, Dan Busarow wrote:
> On Fri, 15 Sep 2000, Unice, Kyle wrote:
> > Questions:
> > 1. Is there some kindoff document for FreeBSD 4.1 on how to do this?
> 
> Possibly, but it is extremely easy so a document isn't really necessary.
> 
> > 2. Should the IP Gateway for my local net (192.168.x.x) have a gateway
> > address of 192.168.x.y that is the IP address of my internal network nic on
> > the gateway or should the gateway for both nics be set to my ISPs gateway?
> 
> Let's use some real number to make it clear.
> 
> Internal network, 192.168.1.0/24
> External network, 206.16.184.0/24
> 
> All changes (other than rc.firewall) go in /etc/rc.conf
> 
> You don't need the firewall stuff to get the network up so you
> may want to set 
> 
> firewall_enable="NO" at first.

No, to get NAT working you need the firewall up. You need the divert
rule working. However, during testing,

  firewall_enable="YES"
  firewall_type="OPEN"

The NAT settings you'll need,

  natd_enable="YES"
  natd_interface="fxp0"

Make sure to get the open firewall working, then try adding rules.

> Change NIC types to suite and these are the lines required to
> setup a gateway machine.
> 
> network_interfaces="fxp0 fxp1 lo0"
> ifconfig_fxp0="inet 206.16.184.7  netmask 255.255.255.0"
> ifconfig_fxp1="inet 192.168.1.1 netmask 255.255.255.0"
> defaultrouter="206.16.184.1"
> gateway_enable="NO"
>
> That's it.  Reboot and you'll have a working gateway.

Well, I think it is pretty clear that last line needs to be,

  gateway_enable="YES"

> Hosts on the internal network should use 192.168.1.1 for
> their default gateway.

Yup.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000915233536.X69158>