Re: Routing Problem (was: Re: Startup messages)

On April 26, 2005 01:42 am, PD wrote:
> Dear Scott,
>
> Thank you for your advice that really solve out problem.
>
> But we still have the other problem that seems to be a routing problem.
> We does not know whether this can be insert into initialize.fw file or not.
>
> our network
> 192.168.105.0/25
>
> main router ----- nocat box ----- AP ----- client
> main router : 192.168.105.8
> nocat box (fxp0) 192.168.105.16/25
> nocat box (dc0) 192.168.105.130/29
> ap (wan port) 192.168.105.131/29
> ap (ethernet port) 192.168.105.193/26
> client using DHCP IP pool 192.168.105.194-254/26
>
> from other terminal that using IP 1 - 126, we can ping to AP wan port, but
> not AP ethernet port and other pc that using IP 194-254.
>
> seems that nocat box did not pass / allow the routing of 192.168.105.192/26
>

Sorry - I was gone for two days

Does your nocat box have the route?  You will have to add a static route of 
the form (command line)

route add 192.168.105.192/26 192.168.105.131

or add the following two lines in your /etc/rc.conf file

static_routes="apdhcp"
route_apdhcp="192.168.105.192/26 192.168.105.131"

Scott
> Questions, how to pass 192.168.105.192/26 via nocat ?
>
> I did try to insert "{ipfw} allow 192.168.105.192/26 to any via
> {internaldevice}" into initialize.fw, but still does not solve the problem.
>
> My AP is WRT54G that does not allow wan port and ethernet port within the
> same IP subnet.
>
> Regards
>
> PD
>
> > I've added the following options to my kernel:
> >
> > options         IPDIVERT
> > options         IPFIREWALL
> > options         IPFIREWALL_VERBOSE
> > options         IPFIREWALL_VERBOSE_LIMIT=5000
> > options         DUMMYNET
> > options         HZ=1000
> >
> > Read /usr/src/sys/conf/NOTES for full descriptions of the options.
> >
> > "options DUMMYNET" allows you to use pipes and queues to shape the
> > traffic. I shape the traffic so the people using our public access points
> > don't use too much of our bandwidth.  There is also a section of ipfw man
> > page devoted to traffic shapeing and dummynet.
>
> _______________________________________________
> NoCat mailing list
> [email protected]
> http://lists.nocat.net/mailman/listinfo/nocat

-- 
Scott E. Campbell
Systems Administrator
Greater Victoria Public Library
Victoria, BC CANADA

t 250-382-7241 x268
f 250-385-5971