Topic: Addition network card for Orange interface

[jebw]

I'd like to add an extra ethernet card with restricted access to only the Squid proxy.
It will have a wireless access point connected to it for laptop roaming. Has anyone written some info on this?

[%sig%]

[guestHH]

Orange interface...???


uhhhh you're on the e-smith forums here... Next to that try searching for extra nic or DMZ.

Happy holidays!

guestHH

[jebw]

guestHH wrote:

> Orange interface...???
> uhhhh you're on the e-smith forums here... Next to that try
> searching for extra nic or DMZ.

Orange interface = not fully trusted network on the inside of the firewall.
Other specialized distributons call it the orange interface and I was hoping that someone may have done this as the forum search only turns up hopeful requests.
Wireless is getting very popular and providing a firewalled route to the internet only and not your internal network I thought would have become a more popular requirement.
..........____________
.........|..E-Smith...|
Eth0:....|............|
RED......|............|. Eth1: Internal network - all trusted clients
.........|............|. Green
.........|............|
.........|....Squid - |. Eth2: wireless AP - internet access for wireless clients
.........|............|. Orange
.........|____________|

[john]

Install the third nic & make sure the system detects network card.. & configure the card as per howto:


Add Third network card

MY Network Setup;

NIC1-ETH0; 192.168.x.1 (RED)
NIC2-ETH1; INTERNET(GREEN)
NIC3-ETH2; 192.168.y.1(ORANGE)


1. /sbin/e-smith/config set EthernetDriver2 e100(your nic device driver)

2.mkdir -p /etc/e-smith/templates-custom/etc/sysconfig/network-scripts/ ifcfg-eth2

3. cp /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/e-smith/templates-custom/etc/sysconfig/network-scripts/ifcfg-eth2

4. pico /etc/sysconfig/network-scripts/ifcfg-eth2

 added 2nd internal nic IP Address

DEVICE=eth2
USERCTL=no
ONBOOT=yes
BOOTPROTO=none
IPADDR=192.168.y.1
NETMASK=255.255.255.0
NETWORK=192.168.y.0
BROADCAST=192.168.y.255

5. /sbin/e-smith/expand-template /etc/sysconfig/network-scripts/ifcfg-eth2

6. /sbin/e-smith/signal-event console-save

7. add the local network using server manager

Network 192.168.y.0
netmask 255.255.255.0
router  192.168.y.1

8. rebooted


9. connect wirelesss AP to eth2 (ORANGE)

10. Manually set IP Addresses to all workstations connected to third nic (orange)..

[Chaloner Hale]

I was wondering is step #1 for a third NIC if the following line for eth2 (based on an e100 driver) is correct;

1. /sbin/e-smith/config set EthernetDriver2 e100

Should it not look like this;

1. /sbin/e-smith/config set EthernetDriver3 e100

And is the line really required?


Chaloner Hale