Results 1 to 6 of 6
Hello. I have a router (debian installed) with 3 network cards and 2 broadband internet connections. I also have a VLAN capable switch. On eth1 and eth2 are the the ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
- 12-01-2007 #1
NAT - 2 internet connections
I have a router (debian installed) with 3 network cards and 2 broadband internet connections. I also have a VLAN capable switch. On eth1 and eth2 are the the internet connections (since i can't tag a port on my switch) and on eth4 i have vlans 21 and 23. I want to separate two lans and every lan with it's own connection. I managed to make a iptables script and the internet works on both lans, but the problem is that all the computers (from both connections) are accessing the internet via one internet connection.
Here is my iptables script:
#!/bin/bash IP_EXTERN_CLIENTI="88.xxx.219.0" IP_EXTERN_HORAJOS="88.xxx.219.3" CLASA_INTERN_CLIENTI="192.168.1.0/24" CLASA_INTERN_CLIENTI2="192.168.4.0/24" IFACE_EXTERN_CLIENTI="eth1" IFACE_INTERN_CLIENTI="eth4.21" IFACE_EXTERN_CLINEIT2="eth2" IFACE_INTERN_CLIENTI2="eth4.23" IPTABLES="iptables" # MISC iptables -t nat -F iptables -F # SNAT iptables -t nat -A POSTROUTING -o $IFACE_EXTERN_CLIENTI -j SNAT --to $IP_EXTERN_CLIENTI # R1 iptables -t nat -A POSTROUTING -o $IFACE_EXTERN_CLIENTI2 -j SNAT --to $IP_EXTERN_CLIENTI2 # R2 # DNAT iptables -t nat -A PREROUTING -i $IFACE_EXTERN_CLIENTI -j DNAT --to $IP_EXTERN_CLIENTI #R1 iptables -t nat -A PREROUTING -i $IFACE_EXTERN_CLIENTI2 -j DNAT --to $IP_EXTERN_CLIENTI2 #R2
Thanks and please excuse my english.
- 12-01-2007 #2
Heh, i made it (actualy someone helped me). I'll post the solution if someone needs it sometime.
create 2 iproute tables
echo 1 conex1 >> /etc/iproute2/rt_tables echo 2 conex2 >> /etc/iproute2/rt_tables
ip route add default 88.xxx.216.1 dev eth1 table conex1 ip rule add from 192.168.1.0/24 table conex1
ip route add default via 88.xxx.216.1 dev eth2 table conex2 ip rule add from 192.168.4.0/24 table conex2
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j SNAT --to-source 88.xxx.219.0 iptables -t nat -A POSTROUTING -s 192.168.4.0/24 -j SNAT --to-source 88.xxx.219.3
- 12-01-2007 #3
- Join Date
- May 2004
- arch linux
Welcome to the forums!
Glad you are up and running, and thanks for posting back with the solution.oz
- 12-01-2007 #4
There is still, actualy, a problem. I can't access the router. None of the services (any > layer 3) are not working. The routing is ok and i can see some arp. This means that i cannot run a bind on the router or any other service for the network... but still DHCP is working.. kinda wierd
- 12-03-2007 #5
- 12-08-2007 #6
So, can anyone help me on this one?