Am Dienstag, den 18.01.2005, 08:52 +0100 schrieb binderda at gmx dot at:
> I have two routers in different locations, each location has an uplink to
> the main network, each router should make one subnet and should use static
> IPs on the external interface.
> All must run without NAT!

                        MAIN
                  +---------------+
                  | MAIN Router   |
                  +---------------+      
         _________________|_WAN____________
        R                                  R
       /                                    \
      WAN                                  WAN
+---------------+                    +---------------+
| LAN1 m0n0wall | OPT -R------R- OPT | LAN2 m0n0wall |
+---------------+                    +---------------+
      LAN1                                 LAN2

Something like this?

> I think I will need static routing to do the following:
LAN1:	172.16.1.0/24
LAN2:	172.16.2.0/24
MAIN:	172.17.0.0./16

OPT1:	192.168.1.1
OPT2:	192.168.1.2

WAN1:	192.168.0.1
WAN2:	192.168.0.2
WANM:	192.168.0.3

Static Route LAN1 m0n0wall:
Destination     Gateway         Genmask         Flags    Iface
172.16.2.0      192.168.1.2     255.255.255.0   UG       OPT

Static Route LAN2 m0n0wall:
Destination     Gateway         Genmask         Flags    Iface
172.16.1.0      192.168.1.1     255.255.255.0   UG       OPT

Default Route for LAN1/LAN2 m0n0wall:
Destination     Gateway         Genmask         Flags    Iface
0.0.0.0         192.168.0.3     0.0.0.0	        UG       WAN

Gateway might be the Internet Router (R) and not the OPT Interface,
depends on your WAN connection.

Wouldn't it be much better to build an IPSEC Tunnel between LAN1 and
LAN2 (and MAIN)?

Ciao ...
	... PIT ...


---------------------------------------------------------------------------
 copyleft(c) by |   _-_     MS-DOS, you can't live with it, you can live
 Peter Allgeyer | 0(o_o)0   without it.  -- from Lars Wirzenius' .sig
---------------oOO--(_)--OOo-----------------------------------------------