--On Dienstag, 14. Oktober 2003 09:08 -0400 Scott Friedman
<[EMAIL PROTECTED]> wrote:

That is for static NAT, where you have to route an external IP to a single
host.. this is HIDE nat...

I ended up creating a virtual interface eth2:1 with the hide nat
IP, and it worked :)

It is also true for Hide-NAT.


On SPLAT AI with sysconfig it looks like this (first entry is static,
second hide):
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
aaa.bbb.ccc.ddd 192.168.xxx.yyy 255.255.255.255 UGH   0      0        0 eth0
aaa.bbb.ccc.eee 127.0.0.1       255.255.255.255 UGH   0      0        0 lo

To set the ARPs you then need a separate script or you modify S99local to
contain lines like the following:
echo 1 > /proc/sys/net/ipv4/conf/eth1/proxy_arp
arp -sD         aaa.bbb.ccc.ddd eth1 pub
arp -sD         aaa.bbb.ccc.eee eth1 pub

regards

Joachim Bassmann, Germany
------------------------------------------------------------
Erst wenn das letzte Counterstrike indiziert, der letzte Videofilm verboten,
und das Internet geschlossen ist, werdet Ihr merken, da� Ihr Eure Kinder
doch erziehen m�sst. - [EMAIL PROTECTED]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to