I will try to explain with my bad english

On PC host, we have 2 interfaces, so we need 2 subnetwork

gw to www ---------- eth1| HOST|eth2 ----------------FR

on eth1 side, it is my LAN, with internet access through a gateway
192.168.0.1. I have not limited the IP range, it is not pure. I should
have limited from 192.168.1 to 191. eth1 is 192.168.0.2, it is OK

on eth2 side, only my FR is connected. The subnetwork start from
192.168.0.192 to 254. eth2 is 192.168.0.200 and FR is 202. The gw is
defined as eth2 on the FR (the FR needs to pass to gw to acces internet)
If you dont limit the ip range on this network, if the FR try to ping
192.168.0.1, it will consider that it is in its on subnet, and never use
its gw (eth2 on host).
It is very important, because the the nameserver defined in the FR is
192.168.0.1!
Defining a new nameserver as it is done now is a mistake. The FR must
use the official DNS server of you LAN in order to control what you do
(have you read about ARP cache poisoning ?)

I hope it is clear :)

Joachim Ott a écrit :
> 2009/7/14 piratebab <[email protected]>:
>   
>> I got it!
>> It is a subnetwork overlay.
>> The intefaces file must be modified like this (netmask)
>>
>> iface usb0 inet static
>>    address 192.168.0.202
>>    netmask 255.255.255.192
>>     
>
> Are you short on IP-adresses on local NATed networks or why do you
> introduce sub-networks?
>
>
>   

_______________________________________________
Shr-User mailing list
[email protected]
http://lists.shr-project.org/mailman/listinfo/shr-user

Reply via email to