NAT podla WAN IP

Tomas Randa lists at hosting50.cz
Wed May 19 04:18:40 CEST 2004


Overene reseni:

do rc.firewall:

${fwcmd} add 10030 divert 8664 ip from 10.15.77.96/28 to any out xmitrl1
${fwcmd} add 10040 divert 8664 ip from any to 217.11.240.214 in recv rl1
${fwcmd} add 10050 divert 8668 ip from 10.15.77.0/24 to any out xmit rl1
${fwcmd} add 10100 divert 8668 ip from any to 217.11.240.211 in recv rl1
${fwcmd} add 10200 divert 8667 ip from 10.15.13.0/24 to any out xmit rl1
${fwcmd} add 10300 divert 8667 ip from any to 217.11.240.212 in recv rl1
${fwcmd} add 10400 divert 8666 ip from 10.15.141.0/24 to any out xmitrl1
${fwcmd} add 10500 divert 8666 ip from any to 217.11.240.213 in recv rl1
${fwcmd} add 10600 divert 8665 ip from 10.15.0.13/32 to any out xmit rl1
${fwcmd} add 10610 divert 8665 ip from 10.15.64.53/32 to any out xmitrl1
${fwcmd} add 10700 divert 8665 ip from any to 217.11.240.210 in recv rl1

natd spustit takto:
/sbin/natd -a 217.11.240.211 -p 8668 -m -s
/sbin/natd -a 217.11.240.212 -p 8667 -m -s
/sbin/natd -a 217.11.240.213 -p 8666 -m -s
/sbin/natd -a 217.11.240.210 -p 8665 -m -s
/sbin/natd -a 217.11.240.214 -p 8664 -m -s

nekdo mi to tu kdysi poradil. Funguje to skvele.

Tomas Randa




On Tue, 2004-05-18 at 07:14, goose wrote:
> Zdravim,,,, 
> 
> chcem sa spytat ci je mozne spravit NAT tak, aby jednotlive subnety z
> LAN boli presmerovavane na presne dane WAN IP ,ktore by sa stretavali
> v dalsom routry a odtial by boli prelozene uz "normalne" a sli by do
> internetu. Ide mi o to,ze mam na sietovke viac aliasov a pripajaju sa
> na nu viacere subnety. AK by kazda z nich bola smerovana na inu WAN
> IP, tak na dalsom routry by som mohol shapovat jednotlive IP a tym by
> som shapoval jednotlive subnety.
> 
> potom by uz len stacilo pridelit novemu userovi IP podla toho do akej
> skupiny by patril a mal by zdielanu linku s ludmi na jeho subnete.
> 
> 
> 
> ____________________________________
> http://www.pobox.sk/ - spolahliva a bezpecna prevadzka
> 
> 
-- 
Tomas Randa <lists at hosting50.cz>




More information about the Users-l mailing list