Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: jebw on December 24, 2003, 05:43:13 AM
-
I'd like to add an extra ethernet card with restricted access to only the Squid proxy.
It will have a wireless access point connected to it for laptop roaming. Has anyone written some info on this?
[%sig%]
-
Orange interface...???
uhhhh you're on the e-smith forums here... Next to that try searching for extra nic or DMZ.
Happy holidays!
guestHH
-
guestHH wrote:
> Orange interface...???
> uhhhh you're on the e-smith forums here... Next to that try
> searching for extra nic or DMZ.
Orange interface = not fully trusted network on the inside of the firewall.
Other specialized distributons call it the orange interface and I was hoping that someone may have done this as the forum search only turns up hopeful requests.
Wireless is getting very popular and providing a firewalled route to the internet only and not your internal network I thought would have become a more popular requirement.
..........____________
.........|..E-Smith...|
Eth0:....|............|
RED......|............|. Eth1: Internal network - all trusted clients
.........|............|. Green
.........|............|
.........|....Squid - |. Eth2: wireless AP - internet access for wireless clients
.........|............|. Orange
.........|____________|
-
Install the third nic & make sure the system detects network card.. & configure the card as per howto:
Add Third network card
MY Network Setup;
NIC1-ETH0; 192.168.x.1 (RED)
NIC2-ETH1; INTERNET(GREEN)
NIC3-ETH2; 192.168.y.1(ORANGE)
1. /sbin/e-smith/config set EthernetDriver2 e100(your nic device driver)
2.mkdir -p /etc/e-smith/templates-custom/etc/sysconfig/network-scripts/ ifcfg-eth2
3. cp /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/e-smith/templates-custom/etc/sysconfig/network-scripts/ifcfg-eth2
4. pico /etc/sysconfig/network-scripts/ifcfg-eth2
added 2nd internal nic IP Address
DEVICE=eth2
USERCTL=no
ONBOOT=yes
BOOTPROTO=none
IPADDR=192.168.y.1
NETMASK=255.255.255.0
NETWORK=192.168.y.0
BROADCAST=192.168.y.255
5. /sbin/e-smith/expand-template /etc/sysconfig/network-scripts/ifcfg-eth2
6. /sbin/e-smith/signal-event console-save
7. add the local network using server manager
Network 192.168.y.0
netmask 255.255.255.0
router 192.168.y.1
8. rebooted
9. connect wirelesss AP to eth2 (ORANGE)
10. Manually set IP Addresses to all workstations connected to third nic (orange)..
-
I was wondering is step #1 for a third NIC if the following line for eth2 (based on an e100 driver) is correct;
1. /sbin/e-smith/config set EthernetDriver2 e100
Should it not look like this;
1. /sbin/e-smith/config set EthernetDriver3 e100
And is the line really required?
Chaloner Hale