netbsd-help: Re: ipnat question ...

Subject: Re: ipnat question ...
To: Juan RP <jrp@hispabsd.org>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: netbsd-help
Date: 05/25/2003 15:09:23

On Sun, May 25, 2003 at 12:57:30AM +0200, Juan RP wrote:
> 
> Hi, really I need help with that:
> 
> These are my networks:
> 
> 	 inet router
> 	( 192.168.0.1 )
> 	 10baseT	
> 	 | | 
> 	 | |_____________
> 	 Insomnio 	 Another box	
> 	 | |	 	 ( 192.168.0.5 )
> 	 |	 |			10baseT
> ___ |	|_________
> |	 |
> ex0 		 rtk0
> ( 192.168.0.2 ) ( 192.168.1.1 )
> 10baseT		100baseTX
> 			 | 
> 			 |
> 			 Nocturno
> 		 ( ex0 192.168.1.2 )	
> 			 100baseTX
> 
> These are the configurations of the devices of Insomnio:
> 
> ex0: flags=8b63<UP,BROADCAST,NOTRAILERS,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST> mtu 1500
> capabilities=7<IP4CSUM,TCP4CSUM,UDP4CSUM>
> enabled=7<IP4CSUM,TCP4CSUM,UDP4CSUM>
> address: 00:04:76:d4:87:f7
> media: Ethernet 10baseT
> status: active
> inet 192.168.0.2 netmask 0xffffff00 broadcast 192.168.0.255
> inet6 fe80::204:76ff:fed4:87f7%ex0 prefixlen 64 scopeid 0x1
> inet6 2001:618:4:1534:: prefixlen 64
> rtk0: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST> mtu 1500
> address: 00:e0:7d:a2:20:3a
> media: Ethernet autoselect (100baseTX full-duplex)
> status: active
> inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
> inet6 fe80::2e0:7dff:fea2:203a%rtk0 prefixlen 64 scopeid 0x2
> bridge0: flags=41<UP,RUNNING> mtu 1500
> 
> The output of brconfig -a:
> 
> bridge0: flags=41<UP,RUNNING>
> Configuration:
> priority 32768 hellotime 2 fwddelay 15 maxage 20
> ipfilter disabled flags 0x0
> Interfaces:
> rtk0 flags=7<LEARNING,DISCOVER,STP>
> port 2 priority 128 path cost 55 forwarding
> ex0 flags=7<LEARNING,DISCOVER,STP>
> port 1 priority 128 path cost 55 forwarding
> Address cache (max cache: 100, timeout: 1200):
> 00:e0:7d:a2:20:3f ex0 462 flags=0<>
> 00:04:76:a5:ae:f9 ex0 172 flags=0<>
> 
> The ipnat.conf file:
> 
> map bridge0 192.168.1.0/24 -> 192.168.0.0/24
You can't use bridge0 as an interface for ipnat/ipf. You have to
use one of the real interface (probably ex0 in your case)
Also I don't understand what you're trying to do. 
You're mixing bridging, routing and NATing which, while being technically
possible, is a very weird setup.
-- 
Manuel Bouyer <bouyer@antioche.eu.org>
 NetBSD: 24 ans d'experience feront toujours la difference
--