Linux routing newbie Help!!

Gerry Weaver
2004-03-11T20:22:44Z

Hi,

I need some help with a routing/shaping setup that is a bit beyond my
current linux routing knowledge. I''ve read the how-to and most of the
related mailing list topics, but I still need some help to solve this
problem. I''ve been asking questions on various lists, but it seems like
the
answers just add additional confusion. I decided to just describe what
I''m
trying to do with the hope that someone could point me in the right
direction. I''ve read a fair bit about the 2.4 kernel and it seems that
linux
is capable of doing these things. I just need some help to get started. I
think if I could get the actual problem translated into a working config, it
would go a long way to helping me understand linux routing etc.

Here is the needed config:

Private net #1: 10.10.1.0 (Higher bandwidth priority)

Private net #2: 10.10.2.0

Private net #3: 10.10.3.0

Private net #4: 10.10.4.0

Private net #5: 10.10.5.0

Public net: 67.65.229.0

Goal:

1. Route the five private networks to the T1.
2. Run dhcpd and hand out dynamic ip addresses to private nets #2-#5
3. Do bandwidth sharing giving net #1 a higher priority
4. Do the usual firewall stuff (ICMP limiting, DOS attacks, etc.)
5. Do traffic shaping for interactive traffic, www, etc.
6. Do NAT for the private nets with the ability to add a specific public to
private ip mappings for net #1.
7. Set up public address pools for NAT on net #2-#5?


 We initially looked at a Cisco solution for this, but the price was simply
to high. I have installed a RedHat 9 on a pc with a sufficient number of
nics to do the job.

I''m just trying to get the routing and NAT to work right now, but
I''m not
having much luck. Could anyone offer any advice on the best way to set this
up?

ip route
67.65.229.0/24 dev eth0  proto kernel  scope link  src 67.65.229.253
10.10.1.0/24 dev eth1  proto kernel  scope link  src 10.10.1.254
10.10.2.0/24 dev eth2  proto kernel  scope link  src 10.10.2.254
10.10.3.0/24 dev eth3  proto kernel  scope link  src 10.10.3.254
10.10.4.0/24 dev eth4  proto kernel  scope link  src 10.10.4.254
10.10.5.0/24 dev eth5  proto kernel  scope link  src 10.10.5.254
default via 67.65.229.254 dev eth0

I can ping addresses on all of the networks from the linux router machine,
but I can''t ping from one private network to another or the internet.



Thanks in advance,
Gerry
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.576 / Virus Database: 365 - Release Date: 1/30/2004

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/