I have linux server that now it`s routing to private ips using iptables.(masquerade) I just got 32 public ips and i want them also to have internet access in paralell with the private ip class. I understand that i don't need NAT if routing to a public ip class. How to make them both work. routing to the public ip and routing to the private ip. how can i do that? thank you.
|
feedback
|
|
The ideal way to do it is with two separate networks. Like this: modem <-> switch1 <-> firewall/router <-> switch2 Connect 'outside' machines to switch1 and 'inside' machines to switch2. Another way to do it is like this: modem <-> firewall/router <-> switch Here you bridge the modem interface to the interface that goes to the switch. You implement your firewall by filtering the bridge. The NAT is purely 'on a stick'. This actually works perfectly. Set up the public IPs first and get them working, then just add the NAT by adding a sub-interface with an RFC1918 address and configuring it exactly as if it was a second physical interface. | |||
feedback
|
