----- Original Message -----
From: "Warrl"
| On Fri, 03 Mar 2000, Paul Zimdars wrote:
| > So I cannot just setup two interfaces with real ip numbers and have
| > internal machines behind the second interface using real ip numbers?
| > I want the linux box to be a firewall using ipchains on an existing
| > network.
|
| Yes you can, but you do have to be able to define the machines on
| each side via the card's address and netmask.
|
| It *is* possible to assign TWO addresses (and masks) to an NIC, which
| gets you some more flexibility. However I don't know how to do this.
IP aliasing. Must be enabled in the kernel (config option hiding somewhere
in the network config sections).
With aliasing enabled, you can assign IPs, masks, etc to -- for example --
eth0 as well as eth0:0, eth0:1, eth0:2, eth0:3, etc ,etc ,etc. I'm not sure
_how many_ aliased interfaces you'll get, but on my development box I have
from eth0 to eth0:22 currently, or 24 addresses bound to one card. :>
Once the kernel is compiled w/ aliasing support, there is nothing special to
do in order to assign an address to an aliased interface; it is done the
same way you'd do it for eth0, except, of course, you'd use eth0:0, etc as
the interface.
[snip]
--
To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/