Routing 4 network cards

[Lowell Gilbert]

"Sjaak Nabuurs" <sjaaknabuurs at citytower.com> writes:

> Wireless USERS                                          Wireless USERS
> 
>                        W   W   W   W   W   W           W   W   W   W   W   W
>                       |-| |-| |-| |-| |-| |-|         |-| |-| |-| |-| |-| |-|
>                       |-| |-| |-| |-| |-| |-|         |-| |-| |-| |-| |-| |-|
>                          192.168.3.2-254                192.168.4.2-254
>                                    ~                         ~
>                                    ~                         ~
>                                    ~                         ~
>                                    ~                         ~
>                                    ~                         ~
>                                    W 192.168.3.1             W 192.168.4.1
>                                  |---------|              |--------|
> 8Mbit      |------|   WIRELESS   |         |              |        |
> INTERNET ==|  A   |W~~~~~~~~~~~~W|FreeBSD1 |W~~~~~~~~~~~~W|FreeBSD2| 
>            |------|  192.168.0.1 |         |192.168.2.1   |        |
>               |192.168.0.138     |---------|   192.168.2.2|--------|
>               |                       |                      |
>               |                       |192.168.1.1           |192.168.5.1
>               |                       |                      |
>               |                       |                      |
>  192.168.0.150|                       |                      |
>            |------|               |------|               |------|
>            |HOME  |               |HOME 1|               |HOME 2|  
>            |------|               |------|               |------|
> 
> A = Router Acatel DSL
> 
>  W = Antene
> |-| 
> |-| = Wireless User (20 Wireless users)
> 
> 
> I hoop the drawing is readable !

Superb.  And it's a *big* help in this situation.

> The Facts :
> OS FreeBSD 5.2 (is it stable for this problem or better to use 4.x)

Try it and see.  If 5.2 installs and seems to run nicely on *your*
particular hardware, it's probably good for your purposes.

> With 4 nic's inside
> 
> RL0 =  192.168.0.1  
> RL1 =  192.168.1.1
> RL2 =  192.168.2.1
> RL4 =  192.168.3.1
> 
> 
> I like to connect RL1/2/3 to RL0 (internet)
> 
> HOME1 and HOME2 are the system administrators and need to manage the whole network include the users
> Everybody need access to the internet
> 
> I like to have a start how to setup FreeBSD 1
> 
> I like to use dummynet(compiled and works very nice) to manage traffic let's say 
> 192.168.3.1/26   100Kb/s 
> 192.168.3.64/26  200Kb/s 
> 192.168.3.128/26 300Kb/s
> 192.168.3.192/26 400Kb/s
> Count every user with ipfw count
> 
> ---------------------------
> #!/usr/local/bin/bash
> for ((a=2; a<=254; a++))
> do
> IPCOUNT = "10"$a"0 add count tcp from 192.168.3.$a to any"
> ipfw $IPCOUNT 
> done
> ----------------------------

Okay...

> And now the question about FreeBSD 1 (forget FreeBSD2).
> Give me a good hint how to set this up with ipfw and NAT
> I googled many but ther's not that much about information about 3 or more nic with freeBSD.

In this case, all of the interfaces on "FreeBSD1" are handled the same
way as the "inside" interface in the typical example where the FreeBSD
box is the router to the outside world.

> I think I have to use NAT, but can i use it in combination with ipfw to dummynet out/ingoing traffic over the nic RL1/2/3

No, in this case NAT has to be done by the Internet router, machine
"A".  FreeBSD1 doesn't need to worry about it.

> And how can i "HOME1" go accross the whole network RL0/2/3 

You need to give "FreeBSD1" routes for the networks off the other
routers.  For example "route add -net 192.168.5.1/24 192.168.2.2" to
access "HOME 2".

> Sorry for my English and I hope I give anough explanation about my plan.

I hope you got enough explanation in return...

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area: 
		resume/CV at http://be-well.ilk.org:8088/~lowell/resume/
		username/password "public"