RE: Network configuration

root_at_mediamonks.net

To: <freebsd-questions@freebsd.org>
Date: Sun, 11 Jul 2004 17:37:52 +0200


-- 
Regards,
Terrence Koeman
 
MediaMonks B.V. (www.mediamonks.com)
Please quote all replies in correspondence.     
> -----Original Message-----
> From: Randy Grafton [mailto:rgrafton@indatacorp.com] 
> Sent: Thursday, July 08, 2004 21:04
> To: root@mediamonks.net
> Subject: RE: Network configuration
> 
> I setup a little home network using my FreeBSD box as the 
> 'router'. There
> are two boxes on my internal LAN that I wanted to have access 
> to from the
> internet as well as provide full internet access to all internal
> clients/servers.
> 
> Like I said, I recompiled my kernel with the nat options. 
> I'll list the
> steps here, if you've already performed them then at least I 
> got in some
> typing practice.
> 
> Install the kernel sources. Insert your install disk and from 
> the command
> line run /stand/sysinstall.
> Select the Configure option then the Distributions option then src and
> finally sys.
> Once the sources are installed you will go to 
> /usr/src/sys/i386/conf. Within
> this directory are two files, GENERIC and LINT. Make a copy 
> of GENERIC with
> a name of your choosing. Edit the GENERIC copy and add the 
> following lines:
> options  IPFIREWALL
> options  IPFIREWALL_VERBOSE
> options  IPFIREWALL_VERBOSE_LIMIT=10
> options  IPDIVERT
> 
> Save the modified file and compile your kernel. This is done by doing:
> config <GENERIC COPY NAME>
> cd ../../<GENERIC COPY NAME>
> make
> make install
> reboot
> 
> Now you'll edit your /etc/rc.conf file.
> Add these lines to it:
> gateway_enable="YES"
> ifconfig_xl0="inet 217.1.1.155 netmask <your netmask>"
> ifconfig_xl0_alias0="inet 217.1.1.155 netmask <your netmask>"
> ifconfig_xl0_alias1="inet 217.1.1.156 netmask <your netmask>"
> ifconfig_xl0_alias2="inet 217.1.1.157 netmask <your netmask>"
> ifconfig_xl0_alias3="inet 217.1.1.158 netmask <your netmask>"
> ifconfig_xl1="inet 192.168.1.1 netmask 255.255.255.0"
> firewall_type="OPEN"
> firewall_quiet="YES"
> firewall_logging="YES"
> natd_enable="YES"
> natd_interface="xl0"
> natd_flags="-f /etc/natd.conf" (explained below)
> 
> Now create the /etc/natd.conf file with these lines:
> same ports yes
> dynamic yes
> redirect_port tcp 192.168.1.2 217.1.1.156
> redirect_port udp 192.168.1.2 217.1.1.156
> redirect_port tcp 192.168.1.3 217.1.1.157
> redirect_port udp 192.168.1.3 217.1.1.157
> redirect_port tcp 192.168.1.4 217.1.1.158
> redirect_port udp 192.168.1.5 217.1.1.158
> 
> The redirect_port has this syntax:
> redirect_port tcp <dest_internal_address> <src_external_address>
> redirect_port udp <dest_internal_address> <src_external_address>
> 
>                      --------------
>                      | SDSL Modem |
>                      |  Bridged   |
>                      --------------
>                            |
>                  --------------------------
>                  |    xl0: 217.1.1.155    |
>                  |    xl0: 217.1.1.156    |
>                  |    xl0: 217.1.1.157    |
>                  |    xl0: 217.1.1.158    |
>                  |                        |
>                  |    Freebsd Box         |
>                  |                        |
>                  |    xl1: 192.168.1.1    |
>                  --------------------------
>                               |
>                           ----------
>           |---------------| SWITCH |---------------|
>           |               ----------               |
>           |                    |                   |
>  ------------------- ------------------- -------------------
>  | C1: 192.168.1.2 | | C2: 192.168.1.3 | | C3: 192.168.1.4 |
>  ------------------- ------------------- -------------------
> 
> Once these changes are made you can run /etc/netstart. This 
> little script is
> great, anytime that you make network config changes you can 
> run this instead
> of having to restart the whole system.
> 
> All of your internal clients will now need to have 
> 192.168.1.1 listed as
> their default router/gateway.
> 
> Whew! Did that help?
> 
> -Randy
> 
> 
> 
> -----Original Message-----
> From: Terrence Koeman [mailto:root@mediamonks.net] 
> Sent: Thursday, July 08, 2004 11:12 AM
> To: rgrafton@indatacorp.com
> Subject: RE: Network configuration
> 
> Well, I can do the firewall part. It's just the gateway thing 
> I can't figure
> out.
> 
> The three 'clients' have to have a public IP address because they are
> actually servers.
> 
> I need;
> -the three servers to have full internet connectivity, in and out
> -the possibility to manipulate/block/prioritize the packets 
> to and from them
> -the freebsd box needs to have an external IP address for access
> 
> Currently I have no idea what to bind to xl1, what method to 
> use to get the
> packets out (routing, bridging?), and what gateway to use on the
> 'clients'...
> 
> Any help would be really appreciated.
> 
> -- 
> Regards,
> Terrence Koeman
>  
> MediaMonks B.V. (www.mediamonks.com)
> Please quote all replies in correspondence.     
> 
> > -----Original Message-----
> > From: Randy Grafton [mailto:rgrafton@indatacorp.com] 
> > Sent: Thursday, July 08, 2004 19:32
> > To: root@mediamonks.net
> > Subject: RE: Network configuration
> > 
> > I would recommend that your start out open and then start 
> > closing things up.
> > 
> > I'm not an ipfw expert but I can get you going with the 
> > gateway thing. Since you said that you have nat running, I 
> > assume that you recompiled your kernel?
> > If not then email me back and I'll provide a quick how to.
> > 
> > Why are you looking to make the clients available from the internet?
> > Your answer to this question could open some other 
> > possibilities for configuration.
> > 
> > -Randy
> > 
> > 
> > -----Original Message-----
> > From: owner-freebsd-questions@freebsd.org
> > [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of 
> > Terrence Koeman
> > Sent: Thursday, July 08, 2004 10:03 AM
> > To: Barbish3@adelphia.net; freebsd-questions@freebsd.org
> > Subject: RE: Network configuration
> > 
> > I haven't got any real config right now as I'm not sure about 
> > how to start with this.
> > 
> > --
> > Regards,
> > Terrence Koeman
> >  
> > MediaMonks B.V. (www.mediamonks.com)
> > Please quote all replies in correspondence.     
> > 
> > > -----Original Message-----
> > > From: JJB [mailto:Barbish3@adelphia.net]
> > > Sent: Thursday, July 08, 2004 17:58
> > > To: root@mediamonks.net
> > > Subject: RE: Network configuration
> > > 
> > > Post the full content of your rc.conf file and your ipfw rule set.
> > > 
> > > -----Original Message-----
> > > From: owner-freebsd-questions@freebsd.org
> > > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Terrence 
> > > Koeman
> > > Sent: Thursday, July 08, 2004 11:10 AM
> > > To: freebsd-questions@freebsd.org
> > > Subject: Network configuration
> > > 
> > > Hi,
> > > 
> > > I have been busy setting up a network the last 3 days, 
> but I cannot 
> > > get it working.
> > > 
> > > Basically I have no clue what has to be setup etc. and if I need 
> > > bridging or not.
> > > 
> > > The situation is as follows:
> > > 
> > >                     --------------
> > >                     | SDSL Modem |
> > >                     |  Bridged   |
> > >                     --------------
> > >                        |
> > >                 --------------------------
> > >                 |    xl0: 217.1.1.155    |
> > >                 |                        |
> > >                 |    Freebsd Box         |
> > >                 |                        |
> > >                 |           xl1          |
> > >                 --------------------------
> > >                              |
> > >                          ----------
> > >          |---------------| SWITCH |---------------|
> > >          |               ----------               |
> > >          |                    |                   |
> > > ------------------- ------------------- -------------------
> > > | C1: 217.1.1.156 | | C2: 217.1.1.157 | | C3: 217.1.1.158 |
> > > ------------------- ------------------- -------------------
> > > 
> > > 
> > > The FreeBSD box has full internet connectivity and I can 
> > also get NAT 
> > > working, but the thing is that I need those non-private 
> > IP's bound to 
> > > the clients and I need ipfw between the clients and the 
> > modem. Also I 
> > > need the FreeBSD machine to have a non-private IP address. 
> > I have no 
> > > clue as to getting the packets from those clients to the 
> > internet. I 
> > > tried bridging xl0 and xl1 and using 217.1.1.155 as 
> > gateway, but that 
> > > didn't work.
> > > 
> > > Maybe someone that knows how to do something like this can 
> > shed some 
> > > light on it for me?
> > > 
> > > Thanks in advance.
> > > 
> > > --
> > > Regards,
> > > Terrence Koeman
> > > 
> > > MediaMonks B.V. (www.mediamonks.com)
> > > Please quote all replies in correspondence.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

RE: Network configuration

Relevant Pages