Hello, My server is on Mandrake 10.1 off. eth0 is WAN with static IP connected 512 DSL eth1 is LAN. I have NAT working on 192.168.0.0. I want to feed a second subnet 192.168.21.0. What is the best way to implement it ? Thanks Varun
varun_saa@vsnl.net a écrit :> Hello, > > My server is on Mandrake 10.1 off. > eth0 is WAN with static IP connected 512 DSL > eth1 is LAN. > > I have NAT working on 192.168.0.0. > > I want to feed a second subnet 192.168.21.0. > > What is the best way to implement it ?Hey, in /etc/shorewall/masq eth0 192.168.0.0/24 eth0 192.168.21.0/24 this is the solution I guess best fit your case -- Alexandre ARNOUD MIRANE SAS 16, rue du 8 mai 1945 33150 CENON Email : aarnoud@mirane.com Tél : 05 57 77 12 15 Fax : 05 57 77 34 90 http://www.mirane.com
varun_saa@vsnl.net wrote:> > Hello, > > My server is on Mandrake 10.1 off. > eth0 is WAN with static IP connected 512 DSL > eth1 is LAN. > > I have NAT working on 192.168.0.0. > > I want to feed a second subnet 192.168.21.0. > > What is the best way to implement it ?Insert a new network card into your server, which would be eth2, and assign the 192.168.21.0 subnet to it. Make appropiate changes in your Shorewall configuration files.. -- Patrick Benson Stockholm, Sweden -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.6.10 - Release Date: 2005-01-10
Hi On Wed, 2005-01-12 at 05:57, Patrick Benson wrote:> varun_saa@vsnl.net wrote: > > > > Hello, > > > > My server is on Mandrake 10.1 off. > > eth0 is WAN with static IP connected 512 DSL > > eth1 is LAN. > > > > I have NAT working on 192.168.0.0. > > > > I want to feed a second subnet 192.168.21.0. > > > > What is the best way to implement it ? > > Insert a new network card into your server, which would be eth2, and > assign the 192.168.21.0 subnet to it. Make appropiate changes in your > Shorewall configuration files.. > > > -- > Patrick Benson > Stockholm, SwedenI agree with Patrick, unless you want to share the same network if you want to do that you need to read up on aliased interfaces (http://www.shorewall.net/Shorewall_and_Aliased_Interfaces.html) Another network card would be the easiest way to go for sure if it works for you situation.