Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Rich <rhdyes@gmail.com>
To: netfilter@vger.kernel.org
Subject: Trying to connect 172.31.0.0/21 on 2 different networks through iptables
Date: Tue, 4 Mar 2008 22:17:22 -0500	[thread overview]
Message-ID: <8fb205ea0803041917o50cf3cbl814eb5f011fc9c72@mail.gmail.com> (raw)

I have a challenge I am trying to solve. I work in a county and we
have been passing ip traffic over an iptables gateway for a few years.
Here is the setup

MY side gateway county side
172.31.0.0/21 eth0 172.31.5.240 main ip network is 10.0.0.0/128 with a
192.168.14.1 interface to my eth1
eth1 192.168.14.12

This has been working great with no problems. I have been linking to 2
servers on their side. A Novell and a Lotus Notes Server and they have
been link to our Novell and Lotus notes servers.

Now here is the dilemma.

The county has decided to consolidate our IT operations. We will be
consolidating our Notes and Novell servers and consolidating our
workstations onto their physical network. We decided in our planning
that we would keep our 172.31.0.0/21 ip scheme. So we have brought in
new switches and router running parallel to the old ones. They come
into our buildings and link back to the county network. The new
infrastructure in no way physically touches our existing network. All
the traffic goes to the county network. There are vlans setup with no
problem.
This is the issue.
How can I get the "new" 172.31.0.0 network to talk to the old
172.31.0.0 network till the conversion is done and the old 172.31.0.0
network is decommissioned. I tried to use the same iptables gateway to
go from the new network to the old to no avail. Can this be done? Can
I do it by building a seperate iptables router to handle the traffic
coming from the new network to the old?

             reply	other threads:[~2008-03-05  3:17 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-03-05  3:17 Rich [this message]
2008-03-05 22:42 ` Trying to connect 172.31.0.0/21 on 2 different networks through iptables Grant Taylor

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=8fb205ea0803041917o50cf3cbl814eb5f011fc9c72@mail.gmail.com \
    --to=rhdyes@gmail.com \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox