Koozali.org: home of the SME Server
Legacy Forums => Experienced User Forum => Topic started by: Richard on November 04, 2003, 01:51:00 PM
-
Help needed for routing problem:
I have a 5.6. e-smith box on a DSL-router that is sip-spoofed to give me the real isp-ip number on my external nic. The big advantage would be that the router would do the dial-in and would be always-on and I wouldn't be bothered by NAT or stuff. My external nic would be directly connected. However, all trafic must be routed through my DSL-router on ip 10.0.0.138. In the admin-panel I set the gateway to 10.0.0.138.
Somehow the routing through the gateway isn't set correctly. The external network is not available. Somehow e-smith doens't set the gateway (because it is on another subnet?).
When I manually set:
# route add 10.0.0.138 dev eth1
# route add default gw 10.0.0.138
...things seem to work.
But the ifconfig gives some weird values:
eth1 Link encap:Ethernet HWaddr 00:50:BF:99:77:A5
inet addr:62.xxx.xxx.xxx Bcast:255.255.255.255 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:20507 errors:0 dropped:0 overruns:0 frame:0
--> TX packets:0 errors:19008 dropped:0 overruns:0 carrier:38005
collisions:0
RX bytes:4034755 (3.8 Mb) TX bytes:0 (0.0 b)
How to set this up correctly within e-smith, though? because the routing is also needed to be correct for ipsec etc...
Ifcfg-eth1:
DEVICE=eth1
USERCTL=no
ONBOOT=yes
BOOTPROTO=none
IPADDR=62.xxx.xxx.xxx
NETMASK=255.255.255.255
NETWORK=10.0.0.138
BROADCAST=255.255.255.255
Network
GATEWAYDEV eth1
GATEWAY 10.0.0.138
Any help appreciated!
-
Configure the router to use 10.0.0.1 for its internal interface; turn off DHCP on the internal interface.
Rerun the SME setup from the server screen and set the external NIC (eth1: the one that connects to the router) to a static IP of 10.0.0.2 with a gateway of 10.0.0.1
This config is one I use all the time and works a treat - just rememeber to use a different IP range on the internal NIC (eth0) in the SME box such as 192.168.0.*
HTH
-
Thanx for the reply!
The problem with the situation you describe is that the e-smith server is *behind* a NATting router. I suspect this to give me big problems in getting ipsec to work
What I'm after, is using my real ip-address on my external nic, so 62.xxx.xxx.xxx and let my e-smith box do the NATting.
My DSL-router is already configured for this.
The only thing to get working is the correct networking:
So: External ip 62.xxx.xxx.xxx, all trafic through gateway 10.0.0.138
What netmask/network/broadcasting or modifications to get the gateway working correctly???