On 1/5/06, Aaron with Morad <aaronc at morad dot ab dot ca> wrote:
>
> Thanks Chris.  If I understand right I could take my OPT interface, use one
> of the /27 as it's address.  Then use that as the gateway for the public
> addressed machines.

correct.


> How, then, can I use the 1:1 NAT for the privates on
> the same interface?

Go to the 1:1 tab on the NAT screen and set them up one by one.


> Wouldn't I need another IP in the interface for the
> private gateway?

No, not since those IP's are being routed to your WAN's IP.  Even if
they weren't, it would work with proxy ARP.


> Also, won't the public machines still be NATed back to the
> WAN address of m0n0?
>

No, 1:1 NAT always maps the one private IP to the one public IP,
inbound and outbound.

-Chris