Re: bridge+dhcp+nat in a single box

On 8/30/06, Marco Carvalho <[email protected]> wrote:
> Hi all
>
> I want to do something like this:
>
>
> Router-------<eth0>bridge+dhcp+nat<eth1>----bridge(terabeam)---------some
> clients with valid IP
>                                                                     |
>
> --------------- some clients with invalid IP (dhcp)
>
> Well, I need that some clients with valid IPs pass through bridge
> directly, without routing and some clients get an IP via DHCP and be
> masqueraded.
>
> Now bridge is working like a charm and clients with valid IPs can navigate.
> clients without valid IP can get an IP from DHCP, but can't navigate.
>
>
> Here go my configuration:
>
> ifconfig br0 0.0.0.0
> ifconfig eth0 200.XXX.XXX.49 netmask 255.255.255.192
> ifconfig eth1 192.168.200.2 netmask 255.255.255.0
> ebtables -t broute -A BROUTING -p ipv4 -i eth0 --ip-dst 200.XXX.XXX.49 -j DROP
> ebtables -t broute -A BROUTING -p ipv4 -i eth1 --ip-dst 192.168.200.2 -j DROP
> ebtables -t broute -A BROUTING -p arp -i eth0 -d 00:48:54:60:2D:93 -j DROP
> ebtables -t broute -A BROUTING -p arp -i eth1 -d 00:20:ED:08:11:9B -j DROP
>
> iptables -t nat -A POSTROUTING -o eth0 -s 192.168.200.0/24 -j MASQUERADE
>
> echo 1 > /proc/sys/net/ipv4/ip_forward
>
> DHCP range:  192.168.200.100 - 192.168.200.200
>
> Any help are welcome
>
> Thanks and sorry for my bad English
>

By the way, my kernel is 2.6.8 (Debian Sarge)

-- 
Marco Carvalho (macs) | marcoacarvalho(a)gmail.com
http://arrakis.no-ip.info  | http://cdd.debian-br.org
Maceio - Alagoas - Brazil
Debian GNU/Linux unstable (Sid)
GNU-PG ID:08D82127 - Linux Registered User #141545
Notícias Semanais do Debian em Português: http://www.debian.org/News/weekly
Alertas de Segurança Debian (DSA): http://www.debian.org/security

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642