[LARTC] I need some advice.

[Arthur van Leeuwen arthurvl@sci.kun.nl]

<PRE>On Thu, 25 Jan 2001, billy wrote:

&gt;<i> Hi, take a look at this
</I>&gt;<i>
</I>&gt;<i>  TOPOLOGY:
</I>
[wow, that pic got screwed up badly... try to think of a linewidth of 78
 chars at the most]

&gt;<i>  The linux box should do:
</I>&gt;<i>     - act as Router
</I>&gt;<i>     - NAT 1,2,3,4. In NATs segment I may have public IP (202.1.1.15)
</I>&gt;<i>     - Traffic control from 32kb to 512kb based on IP address
</I>&gt;<i>
</I>&gt;<i>  Each NAT will have in the future about 100-200 hosts.
</I>
&gt;<i>  NOTE: this is for a wireless network so maybe the switch could be
</I>&gt;<i>  replaced for some wireless cards on the linux box.
</I>
&gt;<i> I DONT WANT YOU TO DO IT FORE ME !!! Just need to know:
</I>&gt;<i>
</I>&gt;<i> if it is possible to do it with iproute2?
</I>
No. Not with *only* iproute2. However, iproute2 in combination with
Linux 2.4 (the kernel...) and iptables *does* make it possible.

&gt;<i> if there are some problems or recomandations I must have to take.
</I>
NAT has a bit of a problem with certain protocols such as FTP. These are
mostly handled by the kernel, but there may be cases with new or custom
protocols that are not handled yet. You ought to be aware of that.
Furthermore, IPsec AH-mode does not work with NAT. IPsec ESP-mode does,
fortunately.

Doei, Arthur.

-- 
  /\    / |      <A HREF="mailto:arthurvl@sci.kun.nl">arthurvl@sci.kun.nl</A>      | Work like you don't need the money
 /__\  /  | A friend is someone with whom | Love like you have never been hurt
/    \/__ | you can dare to be yourself   | Dance like there's nobody watching



</PRE>