Re: Static route via address, not interface
From: Jason Dixon (jason_at_dixongroup.net)
Date: 11/14/03
- Previous message: Helge Oldach: "Re: IPSec VPN & NATD (problem with alias_address vs redirect_addr ess)"
- In reply to: Vladimir B. Grebenschikov: "Re: Static route via address, not interface"
- Next in thread: Jason Dixon: "Re: Static route via address, not interface"
- Reply: Jason Dixon: "Re: Static route via address, not interface"
- Reply: Vladimir B. Grebenschikov: "Re: Static route via address, not interface"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
To: freebsd-net@freebsd.org Date: 14 Nov 2003 12:41:05 -0500
On Fri, 2003-11-14 at 07:38, Vladimir B. Grebenschikov wrote:
> I guess - you already have 192.168.0.0/24 route entry, added by command:
> ifconfig fxp0 192.168.0.53/24
>
> so now you need:
> remove network route via interface:
> route delete 192.168.0.0/24
> add interface route (kernel should know how to reach router)
> route add 192.168.0.1/32 -iface fxp0 -cloning
> and then add network route via router
> route add 192.168.0.0/24 192.168.0.1
I guess I didn't make it clear enough, let me try again.
I'm attempting to create a static route for my FreeBSD host so that
*all* local traffic is routed across the gateway firewall, rather than
being delivered on the local network segment, as is the default with
LANs. If you view the routing table (below) again, you'll notice that
traffic from the FreeBSD box (192.168.0.53) to another box on the same
subnet (192.168.0.42) is still being delivered locally, rather than
being routed through the gateway (192.168.0.1). This is *after* I've
added a static route for 192.168.0.0/24 to use 192.168.0.1.
Destination Gateway Flags Refs Use Netif Expire
default 192.168.0.1 UGSc 2 0 fxp0
127.0.0.1 127.0.0.1 UH 1 0 lo0
192.168.0 link#1 UC 3 0 fxp0
192.168.0.1 00:a0:cc:e2:7e:f4 UHLW 3 808 fxp0 596
192.168.0.42 00:05:5d:a6:df:e3 UHLW 1 63 fxp0 992
192.168.0.53 127.0.0.1 UGHS 0 0 lo0
There are no routers inbetween. Just a host on a LAN behind a firewall
(which routes between the LAN and the internet, of course).
-- Jason Dixon, RHCE DixonGroup Consulting http://www.dixongroup.net _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
- Previous message: Helge Oldach: "Re: IPSec VPN & NATD (problem with alias_address vs redirect_addr ess)"
- In reply to: Vladimir B. Grebenschikov: "Re: Static route via address, not interface"
- Next in thread: Jason Dixon: "Re: Static route via address, not interface"
- Reply: Jason Dixon: "Re: Static route via address, not interface"
- Reply: Vladimir B. Grebenschikov: "Re: Static route via address, not interface"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|