All of lore.kernel.org
 help / color / mirror / Atom feed
From: Jason Opperisano <opie@817west.com>
To: netfilter@lists.netfilter.org
Subject: Re: Multiple subnets of the same IP space, different VLANs, same box...
Date: Tue, 15 Feb 2005 17:03:56 -0500	[thread overview]
Message-ID: <20050215220356.GA20635@bender.817west.com> (raw)
In-Reply-To: <42122E91.2000707@joyner.ws>

On Tue, Feb 15, 2005 at 12:17:05PM -0500, Aaron S. Joyner wrote:
> Okay, first let me admit that what I'm trying to do is a bit on the 
> weird side,

nah--this request comes up weekly...

> and stems from some historical requirements that I can not 
> easily change.  Having said that, here's the scoop.
> 
> I have numerous subnets, which are all identical.  Each has devices in 
> the 10.1.1.0/24 range that need to talk to a server at 10.1.1.1.  All 
> subnets for the sake of argument will be Class C ranges.  (1)  They are 
> all connected through Cisco switches, via 802.1q VLANs, back to a single 
> Linux box.  Each subnet comes in on a virtual interface (courtesy of 
> vconfig), such as eth1.10, eth1.11, etc.  I need to be able to respond 
> to each of those interfaces as 10.1.1.1, with (so far) only ICMP and UDP 
> traffic.

i can't *believe* i'm actually going to link to this, but the last
time someone asked something similar (k--so it was over a week ago),
i posted this:

  http://marc.theaimsgroup.com/?l=netfilter&m=110737820716813&w=2

it doesn't exactly match your situation, but the concept is the same--as
long as the machine in question only has to respond to requests you can
MARK the connection as it comes in, and route the reply based on the
mark, which is restored using CONNMARK.

as the OP never responded as to whether this suggestion worked, or ate
his dog, i still have no idea as to whether it works or not; as i never
tried it myself...so YMMV.

as someone else already suggested, you can also do this using NETMAP to
nat entire subnets to something unique.

IIRC--there was someone that asked about this, and i came up with:

  http://marc.theaimsgroup.com/?l=netfilter&m=110027573811157&w=2

again--no idea if this works or not...  but you should be able to get
the general idea of what's involved in this sort of chicanery.

-j

--
"Me lose brain? Uh, oh! Ha ha ha! Why I laugh?"
        --The Simpsons


  parent reply	other threads:[~2005-02-15 22:03 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-02-15 17:17 Multiple subnets of the same IP space, different VLANs, same box Aaron S. Joyner
2005-02-15 18:13 ` [VLAN] " Kevin P. Fleming
2005-02-15 22:03 ` Jason Opperisano [this message]
2005-02-16 12:27   ` Tobias DiPasquale

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20050215220356.GA20635@bender.817west.com \
    --to=opie@817west.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.