PDA

Click to See Complete Forum and Search --> : Shorewall and VLSM and how to .....Help :)

chipnuke
08-03-2006, 09:28 PM
Hola Everybody :)

Hi there Im try to use Linux Router
The software that i use it Shorewall
My Question is Do you guys know or already implement ur network using VLSM with shorewall?
I need Guide to setup my own network

So Here Is my network Diagram :


http://img211.imageshack.us/img211/5249/networkdiagramgp4.jpg[/
URL]

Rightnow im using VLSM 192.168.0.0/23 means i can use up to 500 host.

So Here is IP Table :

http://img234.imageshack.us/img234/1770/iptablesek0.jpg (http://imageshack.us)

Do u guys have any idea? how to implement it?like how to assign ip address,DHCP etc :) or other suggestion about it
wating for good reply

Thanks
dkeav
08-03-2006, 11:47 PM
umm just install a dhcp server on your router, if you want dns and dynamic dns updating with your dhcp i suggest installing dnsmasq, otherwise stick to isc-dhcpd
chipnuke
08-07-2006, 09:02 PM
hi dkeav ..have u use shorewall before?..hehe have question
can i assign unique DHCP at for eth0 ,eth1 eth2 example

eth0 = ip address start from 192.168.0.1 to 126
eth1 = ip address start from 192.168.0.129 to 190
eth2 = ip address start from 192.168.0.193 to 254


thanks..

any suggestion any1?
dkeav
08-07-2006, 10:58 PM
no i have not use shorewall, from what i know of it or atleast assume its just a set of scripts to configure iptables and possibly dhcpd

i use PF and dnsmasq
chipnuke
08-07-2006, 11:39 PM
no i have not use shorewall, from what i know of it or atleast assume its just a set of scripts to configure iptables and possibly dhcpd

i use PF and dnsmasq

what PF means?...dkeav when u look at my network diagram..do u have any suggestion which best software that i can use to implement it? thanks
dkeav
08-08-2006, 12:04 PM
pick a OS/firewall, shove two nics in the box enable NAT on the internal nic, setup firewall rules with iptables, PF, IPFW, IPF for your clients and to block all unrequested packets from the outside world, install a dhcp server (isc-dhcpd, or dnsmasq) and possibly a dns server for local name resolution, (bind or dnsmasq) if you want both of those features i suggest dnsmasq since it does it all automagically for you and is much simpiler to setup than bind9