[ previous ] [ next ] [ threads ]
 
 From:  "Kasper Pedersen" <m0n0list dash kkp2 at kasperkp dot dk>
 To:  <email2 at delphinus dot co dot nz>, <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall] routing a /29
 Date:  Sun, 13 Aug 2006 21:40:50 +0200
----- Original Message ----- 
From: <email2 at delphinus dot co dot nz>
To: <m0n0wall at lists dot m0n0 dot ch>
Sent: Sunday, August 13, 2006 1:45 PM
Subject: [m0n0wall] routing a /29


> Hi All,
>
> Our ISP has given us to following information:
>
> You'll need to change the ipconfig on your router to:
>
> IP: x.x.102.131
> SN: 255.255.255.240
> GW: x.x.102.129
>
> Your subnet is x.x.102.144 /29

I have a configuration running that looks something like this (standard 
routed subnet); The only difference is that my subnet is a /27.
If I transcribe my setup to match your addresses, your external interface 
would be configured as given:
 ip=x.x.102.131, mask=255.255.255.240(/28), gw=x.x.102.129
and your LAN interface as
 ip=x.x.102.145 mask=255.255.255.248(/29)

you then assign your servers addresses 146, 147, 148, 149, 150 and don't use 
NAT at all.

As far as I can calculate, ...144/29 does not overlap the ...128/28 net, so 
it should be sound.

/Kasper











>
>
> Now we have about 3 servers we would like to run behind a monowall box.
> And we need the monowall box to limit total traffic to 1mbit each way.
>
> But we would like these 3 boxes to each have a real world IP configured on
> them, not a 192.168 address, so we dont want to use 1:1
>
> So am I correct in assuming I want to use Enable advanced outbound NAT and
> then configure for example first machine with:
>
> IP: x.x.102.145
> SN: 255.255.255.240
> GW: x.x.102.131
>
> and that in theory should be able to access the internet?
>
> What am I doing wrong please?
>
> And whats required for outside people to be able to access those servers?
>
> Cheers,
> Jack
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
>
>