Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

simple router config not working

Status
Not open for further replies.

pollux0

IS-IT--Management
Mar 20, 2002
262
US
Linux(rh) machine acting as router config with a t1 line, two NIC. The IP adress of our external router(cisco) is 202.202.202.1 . From the firewall I can ping anything internal and external,from the client i can ping 192.168.1.1 and 202.202.202.80 but nothing beyond that, here is the set up:
-------------------------------------
Linux machine:
----
NIC card 1 to external: eth0 202.202.202.80
NIC card 2 to internal: eth1 192.168.1.1
-------------------------------------
ifcfg-eth0 file:
----
DEVICE=eth0
IPADDR=202.202.202.80
NETMASK=255.255.255.0
NETWORK=202.202.202.0
BROADCAST=202.202.202.255
GATEWAY=202.202.202.1
ONBOOT=yes
-------------------------------------
ifcfg-eth1 file:
----
DEVICE=eth1
IPADDR=192.168.1.1
NETMASK=255.255.255.0
NETWORK=192.168.1.0
BROADCAST=192.168.1.255
GATEWAY=202.202.202.80
ONBOOT=yes
-------------------------------------
route table:
----
dest | gateway | mask | device
192.168.1.0 | 0.0.0.0 | 255.255.255.0 | eth1
202.202.202.0 | 0.0.0.0 | 255.255.255.0 | eth0
0.0.0.0 | 202.202.202.1 | 255.255.255.0 | eth0
-------------------------------------
Client(windows 2000):
----
ip=192.168.1.5
mask=255.255.255.0
gateway=192.168.1.1
-------------------------------------
 
iptables is installed, but i havent touched it yet. At some point i want to make this box firewall/NAT using iptables.
 
to be able to ping beyond your firewall from a client machine, u need to configure NAT in your IPTables.. so don't wait, do it now!!!!.... :)

good luck..
 
It looks like i finally got it to work using NAT like u said...thanks! But is it neccesary to have NAT for a firewall? what if i wanted to set up a firewall for webservers, DNS,email server, etc.? shouldnt this use external IP addresses?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top