All of lore.kernel.org
 help / color / mirror / Atom feed
From: Fisher Alex <Alex.Fisher@uk.thalesgroup.com>
To: netfilter@lists.netfilter.org
Subject: Is this possible?
Date: Thu, 22 Apr 2004 12:30:40 +0100	[thread overview]
Message-ID: <4087ACE0.1020006@uk.thalesgroup.com> (raw)

Hi.

I'll do my best to explain what I'm trying to acheive with a linux box 
and 3 NICS.

I have two sets of systems.  Each system has about 30 IP addresses 
spread across various bits of hardware.  The two systems are identical 
(ie have the same 30 IP addresses).  The addresses are all part of the 
class C subnet 192.168.0.*

The IP addresses for each system are now set in stone and can't be 
changed.  Furthermore, similar addresses are already in use on our network.

I've been given a set of IP addresses I CAN use (172.26.158.*)

A diagram might help here ...

   -----------        -----------------
   - System1 ---------|eth1            |
   -----------        |                |
                      |  Linux Router  |
                      |            eth0|------------Rest of the network
                      |                |
   -----------        |                |
   - System2 ---------|eth2            |
   -----------        ------------------

I also have an address I can use for eth0 which will make the router 
visible from machines on the rest of the network.  This can be set as 
the default gateway for connections to the 172.26.158.* subnet.

I would like PCs on the normal network to be able to connect with either 
system by addressing them with addresses off the 172.26.158 subnet. 
I'll assign 30 of these IPs to each system.

For example. 172.26.158.10 might be mapped onto 192.168.0.2 on eth1
whilst  172.26.158.50 might be mapped onto 192.168.0.2 on eth2

Is this at all possible?  I assume I'll need to use at least DNAT but 
also apply some other trickery to route to the correct interface.  As a 
newbie to IPTables, I'm not sure how I might even begin to set up rules 
for this.

Hopefully this is the sort of thing people want to do all the time and 
it will be easy :)

Any help would be very much appreciated.

Thanks,

Al




This email and any attachments are confidential to the intended recipient
and may also be privileged. If you are not the intended recipient please
delete it from your system and notify Thales Underwater Systems on +44 1963
370 551. You should not copy it or use it for any purpose nor disclose or
distribute its contents to any other person.


             reply	other threads:[~2004-04-22 11:30 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-04-22 11:30 Fisher Alex [this message]
2004-04-22 11:45 ` Is this possible? Kiran Kumar
2004-04-22 12:12 ` Antony Stone
2004-04-22 12:24   ` David Cannings
2004-04-22 12:44     ` Antony Stone
2004-04-23  8:49 ` T. Horsnell (tsh)
     [not found] <65aa6af90505021204715af788@mail.gmail.com>
2005-05-02 19:17 ` Edmundo Carmona
2005-05-02 19:34   ` Guy
  -- strict thread matches above, loose matches on Subject: below --
2005-02-11 16:06 Michael Thompson
2005-02-13 12:18 ` Jose Maria Lopez Hernandez
2005-02-14 16:54 ` Andrew Schulman
2005-02-15  4:25   ` Alex Samad
2005-02-15  6:20     ` Michael Thompson
2004-04-27  9:57 T. Horsnell (tsh)
2004-04-26 10:03 Fisher Alex
2004-04-22 13:08 Fisher Alex
2004-04-22 12:36 Fisher Alex
2004-04-22 13:03 ` Antony Stone
2004-04-10 20:27 is this possible ? Syed Faisal Gillani
2004-04-10 20:54 ` Frederic de Villamil
2004-04-10 20:14 Admin

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4087ACE0.1020006@uk.thalesgroup.com \
    --to=alex.fisher@uk.thalesgroup.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.