From owner-freebsd-net@FreeBSD.ORG Mon Jul 24 09:09:13 2006 Return-Path: X-Original-To: net@freebsd.org Delivered-To: freebsd-net@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 26A4C16A4DA for ; Mon, 24 Jul 2006 09:09:13 +0000 (UTC) (envelope-from b.candler@pobox.com) Received: from proof.pobox.com (proof.pobox.com [207.106.133.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id C0D7843D45 for ; Mon, 24 Jul 2006 09:09:12 +0000 (GMT) (envelope-from b.candler@pobox.com) Received: from proof (localhost [127.0.0.1]) by proof.pobox.com (Postfix) with ESMTP id 25D6629A8C; Mon, 24 Jul 2006 05:09:12 -0400 (EDT) Received: from mappit.local.linnet.org (212-74-113-67.static.dsl.as9105.com [212.74.113.67]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by proof.sasl.smtp.pobox.com (Postfix) with ESMTP id E5ABB65457; Mon, 24 Jul 2006 05:09:10 -0400 (EDT) Received: from lists by mappit.local.linnet.org with local (Exim 4.61 (FreeBSD)) (envelope-from ) id 1G4wR3-0000ub-E6; Mon, 24 Jul 2006 10:09:09 +0100 Date: Mon, 24 Jul 2006 10:09:09 +0100 From: Brian Candler To: Brett Glass Message-ID: <20060724090909.GB3412@uk.tiscali.com> References: <7.0.1.0.2.20060721105813.0971ae90@lariat.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <7.0.1.0.2.20060721105813.0971ae90@lariat.net> User-Agent: Mutt/1.4.2.1i Cc: net@freebsd.org Subject: Re: Multiple NAT router X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jul 2006 09:09:13 -0000 On Fri, Jul 21, 2006 at 11:13:47AM -0600, Brett Glass wrote: > I have an application in which I'd like a FreeBSD router to have > multiple, isolated LANS attached to it, each with the same address > space. The FreeBSD box would take the place of multiple NAT routers. > > For example, I might want to have three internal Ethernet > interfaces on the FreeBSD box. Each would be connected to a LAN > whose internal addresses are 192.168.0.0/24. The FreeBSD box would > do NAT for all of them, and of course they could not "see" one another. FreeBSD won't support this 'out of the box' - because of the problem that you identified of having multiple NICs all with the same address range assigned to them. There's a project called 'vimage' which adds a separate virtual forwarding table per jail. This might work for you, although all the natd's "outside" interfaces would need to sit on the same interface, and I don't know if it can do that. Otherwise - you can run multiple instances of FreeBSD under a virtual machine environment like Xen or VMware, and bridge all the 'outside' interfaces together onto the same NIC. Also - you may still end up with a separate outside IP per vimage or VM, so maybe then you need another NAT instance to NAT all of those onto a single IP address :-) Regards, Brian.