[lug] routing

[Hugh Brown]

My problem is I'm not sure what I set as the static route.  I tried to
do

route add -net 172.16.0.0 gw 192.168.0.4 

and it told me that it wasn't feasible.  My thought was that I want all
traffic destined for the net 172.16.0.0/24 to use 192.168.0.4 as the
router.  So what static route can I add (I do only have 3 workstations
so that will be easiest until I get more savvy about network things).

Hugh

John Hernandez wrote:
> 
> The setup for your second masquerading box will be essentially the same
> as the box that masquerades your Internet traffic.  Define the internal
> network, the external interface, and run ipchains ... -j MASQ or
> iptables...
> 
> http://www.linuxdoc.org has lots of HOWTO's regarding ipchains,
> masquerading, etc.
> 
> The tricky part is probably the routing on your 192.* nets.  Optimally,
> individual nodes should have enough information to decide where to send
> an IP datagram destined for 172.16.*, in addition to the default route.
> This would involve either running an IGRP such as RIP or OSPF, or adding
> static routes to nodes (easy to do for three workstations).
> Alternatively, you can stick with default routing and have your Internet
> router/masquerader could issue ICMP redirects, assuming it knows about
> the 172.16.* route.
> 
> Hugh Brown wrote:
> >
> > I have an interesting routing dilemma (I'm a networking newbie, hence
> > the dilemma)
> >
> > Here's what I have setup right now
> >
> > I have three networks interconnected.  I have a firewall that does
> > masquerading for three workstations (on a 192.168.*.* subnet) to the
> > Internet. The firewall has two NICs in it, one on the internal network
> > on one on the Internet.  One of the workstations also has two NICs and
> > is connected to someone else's internal network (172.16.*.*).  I would
> > like to have the workstation that is multi-homed on 192.. and 172.. do
> > masquerading from workstation on 192 to the network on 172.  Can anyone
> > point me in the right direction (I'm happy to RTM, I just need to know
> > where the manual is)
> >
> > Hugh
> >
> > _______________________________________________
> > Web Page:  http://lug.boulder.co.us
> > Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> 
> --
> 
> John Hernandez, Network Engineer --------------------------------------
> US Department of Commerce                             tel: 303-497-6392
> NOAA/OAR - Mailstop R/OM12                            fax: 303-497-6005
> 325 Broadway                            e-mail: John.Hernandez at noaa.gov
> Boulder, CO 80303                               http://boulder.noaa.gov
> -----------------------------------------------------------------------
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug