On Wed, 14 Oct 1998, Dan O'Neal wrote:

> Hello,
> 
>       I have a simple routing question. I have a firewall box with two
> interfaces in it. It is only routing a single class C. Here is how it's
> setup:
> 
> 
> [server1]----[server2]------[eth0][FW][eth1]------[server3]------[server4]
> 
> 
> Server 1 has an address of 192.168.0.50
> Server 2 has an address of 192.168.0.51
> 
> Firewall eth0 has an address of 192.168.0.10
> Firewall eth1 has an address of 192.168.0.11
> 
> Server 3 has an address of 192.168.0.90
> Server 4 has an address of 192.168.0.91
> 
> 
> Here is the problem, I can get on the firewall/proxy and ping the eth0
> interface and both server 1 and 2 BUT I can not ping server 3 or 4 OR the
> eth1 interface.
> 

When server1 and server2 are linux boxes, simlpy add routes with FW's eth0
like gateway, and for 3, 4 use eth1 as a gateway. 

Usually you can NOT connect to single subnet (netmask) through gateway.

Next possibility to cat this single class to two (or more) subnets....

Next, check the routing tables on the firewall.

1, 2:
route add -host 192.168.0.10 eth0
route add -net 192.168.0.0 gw 192.168.0.10 eth0
3,4:
route add -host 192.168.0.11 eth0
route add -net 192.168.0.0 gw 192.68.0.11 eth0

FW:
route add -host 192.168.0.50 eth0
route add -host 192.168.0.51 eth0
route add -host 192.168.0.90 eth1
route add -host 192.168.0.91 eth1
===================
This is usable, but many systems can make problems or do not allow you to
use gateway to address local subnet (subnet your interface is in)...

                                       +-----------------------------------+
                                       |                                   |
                                       |            Radim HABALA           |
                                       |                                   |
                                       |   e-mail:   [EMAIL PROTECTED]    |
                                       |                                   |
                                       |   Englisova 13, OPAVA,  746 01    |
                                       |      Czech Republic (Europe)      |
                                       |                                   |
                                       |   tel :  (0653)   21 46 34        |
                                       |                                   |
                                       +-----------------------------------+



-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to