Hi Alexander!

This is no problem.
You can use either "1:1 NAT" to map WAN IP's directly to LAN hosts - or
you can use "Server NAT" combined with "Inbound NAT" for more advanced
mappings like:

WAN IP 1/Port 80 -> LAN IP 1/Port 80
WAN IP 1/Port 21 -> LAN IP 2/Port 21
WAN IP 2/Port 25 -> LAN IP 2/Port 25

...and so on. You probably get the point ;o)

/Martin

-----Original Message-----
From: Alexander Goldstone [mailto:m0n0wall dash list at zander dot net] 
Sent: 5. maj 2004 16:47
To: fisch
Cc: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] Multiple WAN IPs


> > Is it possible to assign multiple IPs to the WAN interface?
>
> if your IPs are one network, so just put the network into the
> static-wan-section - is working fine here

We wouldn't want it to listen on all IPs on a subnet (I think this is
what you
mean - appologies if I am wrong).

We are assigned 12 IPs from our ISP and need to make use of several of
these for
different purposes.

For example, if we want 2 webservers behind the firewall we would need
to
forward port 80 on one IP independently of port 80 on another IP.

Another example might be using an IP for a permanent VPN connection and
another
for our roaming VPN clients.

The second example might be fine over one IP but the first example
wouldn't.

Thanks for any help.

Alex.


---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch