OpenForum RSS: FreeBSD router + Cisco 2950 Real ip on port 10

FreeBSD router + Cisco 2950 Real ip on port 10 (Silent)

Fri, 26 Apr 2013 11:34:58 GMT

>[�� ]
>>> SW1(config-if)# int fa 0/24
>>> SW1(config-if)# description ISP
>>> SW1(config-if)# int fa 0/23
>>> SW1(config-if)# no cdp enable
>>> SW1(config-if)# description FreeBSD
>>> SW1(config-if)# int fa 0/22
>>> SW1(config-if)# description Server
>>> ��!
>> SW1(config-if-range)# switchport access vlan 9
> � �� FreeBSD �� -�� ? �� VLAN?

��? � �� VLAN-�. �� (217.150.150.0/24, � �� ), � �� (192.168.1.0/24). � �� : FreeBSD (bce0 217.150.150.140), uplink �� (217.150.150.1 - ��), �� (217.150.150.145). � �� FreeBSD (bce1 192.168.0.1/24). �� FreeBSD �� , �� NAT-��.

FreeBSD router + Cisco 2950 Real ip on port 10 (kotofeych)

Thu, 25 Apr 2013 11:46:35 GMT

>[�� ]
>> SW1(config-if-range)# switchport vlan 9
>> SW1(config-if)# int fa 0/24
>> SW1(config-if)# description ISP
>> SW1(config-if)# int fa 0/23
>> SW1(config-if)# no cdp enable
>> SW1(config-if)# description FreeBSD
>> SW1(config-if)# int fa 0/22
>> SW1(config-if)# description Server
>> ��!
> SW1(config-if-range)# switchport access vlan 9

� �� FreeBSD �� -�� ? �� VLAN?

FreeBSD router + Cisco 2950 Real ip on port 10 (ant)

Sat, 20 Apr 2013 11:18:29 GMT

>[�� ]
> SW1(config-if-range)# switchport mode access
> SW1(config-if-range)# switchport vlan 9
> SW1(config-if)# int fa 0/24
> SW1(config-if)# description ISP
> SW1(config-if)# int fa 0/23
> SW1(config-if)# no cdp enable
> SW1(config-if)# description FreeBSD
> SW1(config-if)# int fa 0/22
> SW1(config-if)# description Server
> ��!

SW1(config-if-range)# switchport access vlan 9

FreeBSD router + Cisco 2950 Real ip on port 10 (Silent)

Sat, 20 Apr 2013 10:52:51 GMT

FreeBSD router + Cisco 2950 Real ip on port 10 (Silent)

Sat, 20 Apr 2013 10:49:03 GMT

>[�� ]
> �� Cisco Catalyst 2950 (24 ��).
> �� 2 ��:
> bce0 - �� (�� 217.150.150.140) - � ��.
> bce1 - �� (�� 192.168.0.1) - � ��.
> �� (217.150.150.140-145).
> �� ipfw + natd. �� VLAN ��.
> �� 10 �� , � ��
> �� 217.150.150.145. �.�. �� -�� , � ��
> �� .
> ��, �� ...

�� , �� , �� , ��: �� , uplink �� IPS �� FreeBSD �� (� �� f0/24), FreeBSD �� (f0/23), "�� " � f 0/22. �� f0/22-24 �� vlan. ��.

�.�.

SW1(config)#vlan 9
SW1(config-vlan)#name REALNET
SW1(config-vlan)# int range fa 0/22-24
SW1(c

FreeBSD router + Cisco 2950 Real ip on port 10 (Miha)

Thu, 18 Apr 2013 16:38:48 GMT

>[�� ]
>> $cmd 6300 nat 3 log ip4 from not me to _external_ip_
>> $cmd 6310 allow log tcp from not me to _internal_ip_ setup limit
>> src-addr 1
>> $cmd 6310 allow log icmp ......
>> .....
>> .....
>> $cmd 6399 deny log from not me to _internal_ip_
> �� ...
> �� VLAN-per-user, ��
> �� ...

�� . � "�� " �� . �� .

FreeBSD router + Cisco 2950 Real ip on port 10 (kotofey)

Thu, 18 Apr 2013 14:31:47 GMT

>[�� ]
>
> redirect_addr _internal_ip2_ _external_ip2_
> ��
> $cmd 6300 nat 3 log ip4 from not me to _external_ip_
> $cmd 6310 allow log tcp from not me to _internal_ip_ setup limit
> src-addr 1
> $cmd 6310 allow log icmp ......
> .....
> .....
> $cmd 6399 deny log from not me to _internal_ip_

�� ...

�� VLAN-per-user, �� ...

FreeBSD router + Cisco 2950 Real ip on port 10 (Miha)

Thu, 18 Apr 2013 14:11:35 GMT

>[�� ]
> �� Cisco Catalyst 2950 (24 ��).
> �� 2 ��:
> bce0 - �� (�� 217.150.150.140) - � ��.
> bce1 - �� (�� 192.168.0.1) - � ��.
> �� (217.150.150.140-145).
> �� ipfw + natd. �� VLAN ��.
> �� 10 �� , � ��
> �� 217.150.150.145. �.�. �� -�� , � ��
> �� .
> ��, �� ...

�� , �� in-kernel nat, �� .
� ��

ipfw nat 3 config unreg_only same_ports reset \
redirect_addr _internal_ip_ _external_ip_ \
redirect_addr _internal_ip2_ _external_ip2_

��

$cmd 6300 nat 3 log ip4 from not me to _external_ip_
$cmd 6310 allow log tcp from