Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Apr 2001 18:49:30 +0200
From:      "Daniel Mester" <DanielM@EverAd.com>
To:        <freebsd-questions@freebsd.org>
Subject:   FW: natd question
Message-ID:  <ED917D1F7E5D96439A2822CE966C2CB9074581@ilexc01.everad.com>

next in thread | raw e-mail | index | archive | help


> -----Original Message-----
> From: Daniel Mester=20
> Sent: Monday, April 23, 2001 6:44 PM
> To: 'questions-freebsd@freebsd.org'
> Subject: RE: natd question
>=20
>=20
>=20
>=20
> > -----Original Message-----
> > From: Nick Rogness [mailto:nick@rogness.net]
> > Sent: Monday, April 23, 2001 5:57 PM
> > To: Daniel Mester
> > Cc: freebsd-questions@FreeBSD.ORG
> > Subject: Re: natd question
> >=20
> >=20
> > On Mon, 23 Apr 2001, Daniel Mester wrote:
> >=20
> > > Hello all,
> > > i am trying to set up the nat between two networks.=20
> >=20
> > >=20
> > > What i have:
> > > 10.72.6.0/24 ------- 10.72.7.0/24
> >=20
> > 	Are these 2 networks directly connected via a cross-connect or ?
> > 	Where does the BSD machine reside...in the middle,=20
> > connecting the
> > 	2 network together?
> >=20
> > > But in my specific situation i need the nat-addresses to be=20
> > different
> > > from interface address of my machine (there's two net cards -
> > > 10.72.6.1 & 10.72.7.1). I actually would like to know how i=20
> > can set up
> > > pool of addresses used by natd for translations (as in=20
> cisco "ip nat
> > > pool dynapool 10.72.8.1 10.72.8.64" etc).
> >=20
> > 	There is no "pool" option with natd.  You have static nat or
> > 	"overloaded" natd.  ALthough, I would hope that future=20
> > versions of
> > 	nat implement a pool style technique.
> >=20
> > > Because machines on 10.72.7.0 network have to get packets=20
> > as it comes
> > > from 10.72.8.0 (for example) and not from 10.72.6.0 network=20
> > because of
> > > asymmetric routing in the lab.
> >=20
> > 	Why do they have to get packets from 10.72.8.0?  WHy do you need
> > 	nat, if there is 1 BSD machine tied to both networks,=20
> > this is just
> > 	basic routing across the interfaces.
> >=20
> > 	Let me see if I understand you correctly:
> >=20
> > 	10.72.6.0/24-- BSD --10.72.7.0/24
> >=20
> > 	Correct? =20
> >=20
> > 	What is the default gateway entry on the machines in=20
> > the 10.72.7.0
> > 	network? How about 10.72.6.0?
=20
 That's the problem. Because of the machines on 10.72.7.0 have=20
 different default gateway - they are connected to loadbalancer.
 So my problem is that for checking loadbalancer traffic comes=20
 from my internal net - 10.72.6.0 - and for management of this=20
 machines i need to come from different network (!10.72.6.0) -=20
 because this way this machines will try to answer thru load=20
 balanacer - and nothing will come out. So that's why i need=20
 to manage this machines with different source ip. And it will=20
 work if i could tell to natd use different ipaddress (not use=20
 my "external interface ip" - 10.72.7.1 but rewrite it with=20
 some other one 10.72.8.1 for example)...=20
> >=20
> > > I've seen 'alias_address' option but i don't really=20
> > understand how it
> >=20
> > 	It is similar to Cisco's overload.  All outbound ip's will be
> > 	overloaded to having a source address of alias_address.
> >=20
> >=20
>=20
In cisco nat i can tell to use ip addresses different of=20
interfaces IPs - that's the difference.
And that's actually what i'm trying to find out. :-)
Thanks,
   Daniel.
> =20
> > Nick Rogness <nick@rogness.net>
> >  - Keep on Routing in a Free World...
> >  "FreeBSD: The Power to Serve!"
> >=20
> >=20
> >=20
>=20

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ED917D1F7E5D96439A2822CE966C2CB9074581>