IPF and Routing
lukek at meibin.net
Tue Oct 7 03:33:56 PDT 2003
Yes I have read it several times. I have set up an ipnat.conf file that
looks a lot like this
bimap 192.168.1.10 -> 10.0.0.3
bimap 192.168.1.11 -> 10.0.0.4
and so on and so forth
I need to ensure that each internal address gets the same external
address each time.
I have aliased all of the external addresses to the external interface
so I was wondering if this would work or did there need to be additional
physical interfaces for this to work properly. I am thinking that there
would be no need to have multiple interfaces but I am wondering if it is
indeed all that simple. The reason for static NAT is that each internal
client needs to connect to a remote VPN server which requires one unique
IP for each address ( broken damned M$ VPN server ). Mapping static is
not a great problem given that each internal client will get it's
address via DHCP.
Does this make sense ?
On Tue, 7 Oct 2003 18:23:00 +0800
"Michael Lee" <kclee at tiny.ws> granted us these pearls of wisdom:
> Have you checked the How-to of ipf ?
> Mapping Many Addresses Into a Pool of Addresses.
> ----- Original Message -----
> From: "Luke Kearney" <lukek at meibin.net>
> To: "FreeBSD Questions" <freebsd-questions at freebsd.org>
> Sent: Tuesday, October 07, 2003 10:12 AM
> Subject: IPF and Routing
> > Hello,
> > I have question regarding IPNat and routing. The situation is that I
> > need to setup a network where each machine gets a unique global IP
> > address from behind a firewall which performs NAT. I have 16 addresses
> > so my question is can I alias 14 addresses to the primary nic and then
> > config each private address to map directly to one global address or
> > have I missed something fundamental about this ?
> > Any advice is appreciated.
> > TIA LukeK
> > _______________________________________________
> > freebsd-questions at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions