Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@vger.kernel.org>
Subject: Re: Connecting an host with a subnet to a LAN with different subnet
Date: Wed, 27 Aug 2008 14:36:15 -0500	[thread overview]
Message-ID: <48B5ACAF.7070303@riverviewtech.net> (raw)
In-Reply-To: <F1F6EC0C8B75034F9E3A79FC85122E8E01000E0D@aquib01a>

On 08/27/08 13:27, DI BACCO ANTONIO - technolabs wrote:
> I have a LAN with a given subnet, let us say: 192.168.0.0/24  with a 
> lot of hosts. Now I want to connect another host (PLUTO) with an 
> interface that has  address 10.10.10.1 and netmask 255.255.255.0. I 
> can't change this ip address but I want to insert some iptables rules 
> on PLUTO to translate both source and dest ip address of the packets 
> it receives to subnet 10.10.10.0/24 and viceversa. I think that 
> target NETMAP can help me, but I'm getting confused.

Silly question, why not add the 192.168.0.0/24 network to PLUTO?  I.e. 
make PLUTO be multihomed in both the 10.10.10.1 network and the 
192.168.0.0/24 network?

Also, unless you need to map multiple IPs across from one network to the 
other I think I'd recommend that you only NAT the one IP that PLUTO is 
using to avoid potential conflicts.

Even with NETMAP and / or NATing I think you are going to have PLUTO (or 
what ever system does the NETMAP / NATing) have an interface in both 
networks.



Grant. . . .

      parent reply	other threads:[~2008-08-27 19:36 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-08-27 18:27 Connecting an host with a subnet to a LAN with different subnet DI BACCO ANTONIO - technolabs
2008-08-27 19:04 ` bsilva
2008-08-28  7:10   ` DI BACCO ANTONIO - technolabs
2008-08-28 21:04     ` James King
2008-08-27 19:36 ` Grant Taylor [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=48B5ACAF.7070303@riverviewtech.net \
    --to=gtaylor@riverviewtech.net \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox