RE: Setup/routing question with cipe|
"Neulinger, Nathan" <nneul,AT,umr,DOT,edu>|
Thu, 9 Aug 2001 21:59:35 +0200|
I think I found out how to do this with the advanced routing feature in
recent kernels, it can do source based routing.
That should make things a WHOLE lot simpler.
I'll post a summary of my configuration when I have it working, as I think
it might be a useful example.
> -----Original Message-----
> From: Neulinger, Nathan [mailto:nneul,AT,umr,DOT,edu
> Sent: Thursday, August 09, 2001 2:33 PM
> To: 'cipe-l,AT,inka,DOT,de'
> Subject: Setup/routing question with cipe
> To start off with - I have the cipe link up and running, and
> a route from
> the server pkcipe side to the client (i.e. ping shows up on
> client). The
> goal is to make use of a VPN to have use of static IP addresses.
> NET-C (cable modem)
> I have a single semi-dynamic IP on Net-C that virtually never
> changes. It is
> a DHCP assigned address and default route.
> I would like ALL traffic to go over the CIPE link to the server.
> In my if-up script on the server, I route LAN/NET-B traffic
> to 10.0.1.1, and
> set up the proxy arp.
> Would I now need to:
> a. Drop the default route on the Client going to
> cable-modem gateway
> b. Add a single host route for the Server pointing at the
> cable-modem gateway
> Is there any nice way of doing this other than hardwiring the
> cable modem
> gateway and hardwiring the drop of the script?
> I'd really prefer to be able to say:
> On Client: Route all traffic from Net-C over CIPE, but
> else use default.
> i.e. any traffic from the router itself would go over default
> route, but the
> 'forwarded' traffic would go over cipe. Is there any way to
> do this with
> ipchains rules?
> Suggestions? Am I on the right track here?
> -- Nathan
> Nathan Neulinger EMail: nneul,AT,umr,DOT,edu
> University of Missouri - Rolla Phone: (573) 341-4841
> Computing Services Fax: (573) 341-4216
> Message sent by the cipe-l,AT,inka,DOT,de mailing list.
> Unsubscribe: mail majordomo,AT,inka,DOT,de, "unsubscribe cipe-l" in body
> Other commands available with "help" in body to the same address.
> CIPE info and list archive: