Re: Multiple NAT router



On Fri, Jul 21, 2006 at 11:13:47AM -0600, Brett Glass wrote:
I have an application in which I'd like a FreeBSD router to have
multiple, isolated LANS attached to it, each with the same address
space. The FreeBSD box would take the place of multiple NAT routers.

For example, I might want to have three internal Ethernet
interfaces on the FreeBSD box. Each would be connected to a LAN
whose internal addresses are 192.168.0.0/24. The FreeBSD box would
do NAT for all of them, and of course they could not "see" one another.

FreeBSD won't support this 'out of the box' - because of the problem that
you identified of having multiple NICs all with the same address range
assigned to them.

There's a project called 'vimage' which adds a separate virtual forwarding
table per jail. This might work for you, although all the natd's "outside"
interfaces would need to sit on the same interface, and I don't know if it
can do that.

Otherwise - you can run multiple instances of FreeBSD under a virtual
machine environment like Xen or VMware, and bridge all the 'outside'
interfaces together onto the same NIC.

Also - you may still end up with a separate outside IP per vimage or VM, so
maybe then you need another NAT instance to NAT all of those onto a single
IP address :-)

Regards,

Brian.
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Multiple NAT router
    ... The FreeBSD box would take the place of multiple NAT routers. ... interfaces on the FreeBSD box. ... Of course a significant problem might be that the stack virtualization patches ...
    (freebsd-net)
  • Re: ntpd fails to synchronize on FreeBSD 6.3-STABLE
    ... But please note that I shall install FreeBSD 7.0-RELEASE this weekend. ... Secondly I'm sorry for confusing you (NAT: I mean the machine ``behind NAT.'') ... to address is why your ntpd is failing to generate any IPv6 packets. ... configuration which works correctly with NTP on IPv4. ...
    (freebsd-stable)
  • NATD crash in 7.0-stable
    ... Any time I use either of my two NICs for my internal net my FreeBSD box hangs and requires power cycling to reboot. ... Initially I figured it might be NAT in PPP which was causing the problem, so I backed it out and used NATD but the same thing happens to me. ... 2 ports with 2 removable, ... da0: Attempt to query device size failed: NOT READY, ...
    (freebsd-questions)
  • NAT crashing FreeBSD 7.x
    ... Any time I use either of my two NICs for my internal net my FreeBSD box hangs and requires power cycling to reboot. ... Initially I figured it might be NAT in PPP which was causing the problem, so I backed it out and used NATD but the same thing happens to me. ... pci0: ... 2 ports with 2 removable, ...
    (freebsd-net)
  • Re: [Going nuts] Cant share the connection to the Internet
    ... Have you configured and re-compiled your FreeBSD kernel to support NAT? ... Kernel configuration is covered in chapter 8 of the FreeBSD Handbook ...
    (comp.unix.bsd.freebsd.misc)