Hi. I have a Linux box with two network interfaces. The local interface has an
alias so it can listen to two (completely) different subnets. I need to
configure a Firewall and a DHCP server in the same machine. I have:
eth0 > net
eth1 > loc1
eth1:1 > loc2
If my DHCP server will use eth1 IP address (main IP address for that interface),
How do I specify the ''dhcp'' option on the interface to be
served by my server in the /etc/shorewall/interfaces file if that interface has
an alias? Is it possible at all?
Best regards!
Carlos
On Fri, 28 Mar 2003, Carlos Cajina wrote:> Hi. I have a Linux box with two network interfaces. The local interface has an alias so it can listen to two (completely) different subnets. I need to configure a Firewall and a DHCP server in the same machine. I have: > > eth0 > net > eth1 > loc1 > eth1:1 > loc2 > > If my DHCP server will use eth1 IP address (main IP address for that > interface), How do I specify the ''dhcp'' option on the interface to be > served by my server in the /etc/shorewall/interfaces file if that > interface has an alias? Is it possible at all?You specify ''dhcp'' on eth1 -- you DON''T include any entry for eth1:1 in /etc/shorewall/interfaces. See http://www.shorewall.net/Shorewall_and_Aliased_interfaces.html -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net
I''ll try it... thanks a lot Tom; have a good weekend! ''Til next week... ----- Original Message ----- From: "Tom Eastep" <teastep@shorewall.net> To: "Carlos Cajina" <cecajina@hotmail.com> Cc: "Shorewall User List" <shorewall-users@lists.shorewall.net> Sent: Friday, March 28, 2003 6:09 PM Subject: Re: [Shorewall-users] DHCP+Firewall configuration> On Fri, 28 Mar 2003, Carlos Cajina wrote: > > > Hi. I have a Linux box with two network interfaces. The local interfacehas an alias so it can listen to two (completely) different subnets. I need to configure a Firewall and a DHCP server in the same machine. I have:> > > > eth0 > net > > eth1 > loc1 > > eth1:1 > loc2 > > > > If my DHCP server will use eth1 IP address (main IP address for that > > interface), How do I specify the ''dhcp'' option on the interface to be > > served by my server in the /etc/shorewall/interfaces file if that > > interface has an alias? Is it possible at all? > > You specify ''dhcp'' on eth1 -- you DON''T include any entry for eth1:1 in > /etc/shorewall/interfaces. See > > > http://www.shorewall.net/Shorewall_and_Aliased_interfaces.html > > -Tom > -- > Tom Eastep \ Shorewall - iptables made easy > Shoreline, \ http://www.shorewall.net > Washington USA \ teastep@shorewall.net > >