Gentoo Archives: gentoo-user

From: David Talkington <dtalk@××××××××××.org>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Re: Router 3rd and 4th net interface problem
Date: Fri, 06 Oct 2006 21:01:57
Message-Id: Pine.LNX.4.64.0610061339100.2872@atlantis.flyingjoke.org
In Reply to: Re: [gentoo-user] Router 3rd and 4th net interface problem by Grant
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Grant wrote:
5
6 > I think it would be smarter for me to buy a $15 switch from NewEgg
7 > instead of trying to configure my Gentoo router to use its extra NICs
8 > this way. Is there any reason I wouldn't want to do that?
9
10 Academic exercises aside, the only reasons I can think of to use a
11 general-purpose computing device for this purpose instead of a simple
12 switch would be a) cost, or b) to do something that the switch can't do,
13 such as firewall. If you really just want a switch, and the money isn't
14 a big deal, go with the switch.
15
16 That said ... strictly speaking, what you're asking for is a bridge,
17 which may not be the easiest way to accomplish your ends, nor the most
18 flexible configuration. Maybe consider this easy approach:
19
20 - - create a separate network for each NIC (maybe 192.168.2.0 and
21 192.168.1.0), and give each an appropriate IP address (maybe 2.1 and
22 1.1 respectively).
23
24 - - enable IP forwarding, and NAT if appropriate for outbound traffic
25 (sounds like you already know how to do that).
26
27 - - Make sure your DHCP server listens on each of those networks and has
28 an address pool for each. I run mine right on the gateway, and ensure
29 that it doesn't listen to the public address.
30
31 That's basically it. A big advantage of this is that if you want, now
32 you can easily isolate one of those segments to create a DMZ for a web
33 server or a playstation or something else fun.
34
35 Cheers -d
36
37 - --
38 David Talkington
39
40 PGP key: http://www.prairienet.org/~dtalk/004B8F8B.asc
41 -----BEGIN PGP SIGNATURE-----
42 Version: GnuPG v1.4.5 (GNU/Linux)
43
44 iD8DBQFFJsJ95FKhdwBLj4sRAsW7AKCgfMIGU/wuOSR2dWGfnBJuWiROEwCcDzhN
45 bQ75d9ixEQCCFemWRkAQcX4=
46 =GRZ8
47 -----END PGP SIGNATURE-----
48 --
49 gentoo-user@g.o mailing list