Mailinglist Archive: opensuse-edu (146 mails)

< Previous Next >
Re: [suse-linux-uk-schools] Masquerading
  • From: "Richard Naylor" <ranaylor@xxxxxxxxxxxx>
  • Date: Sun, 16 Jul 2000 00:54:18 +0000 (UTC)
  • Message-id: <000501bfee41$aa313620$0300a8c0@xxxxxxxxxxxxxxxxxx>

is the best way to do this not just to give the new computers ip's in the
172.19.51.x
if all you machines have the netmask of 255.255.0.0 then they'll all be able
to communicate.

Or is there a problem with security?
ie you dont want computers in the 172.19.50 subnet to see the new computers?

if this is the case give the 172.19.50.x a netmask of 255.255.255.0 and the
172.19.51.x a netmask of 255.255.0.0

now 172.19.51.x can see 172.19.50.x but not vice versa.

maybe i've misundestood the problem, but i cant see how masquerading would
help.

with your suggestion, the router does not need to perform masquerading, it
can route packets between 172.19.50.x with 192.168.x.x as it has an ip
address on both subnets.

hope this helps.



> I need to extend my school's network beyond the 254 IP numbers I'm using -
> based on 172.19.50.x
>
> This network includes a router which links through an ISDN line to an LEA
> proxy server.
>
> Is the best way to achieve this to split the network into 2 segment and
> use a Linux machine and Masquerading to link them together.
>
> ie.- leave the bulk of the machines on 172.19.50.x
> use 192.168.0.x for the others
> use two NICs in the Linux machine, 1 for each subnet
> Install masquerading
>
> Will this allow the machines on 192.168.0.x to access *all* the services
> on the main network?
>
> Dave Williams
>
>


< Previous Next >
References