how to set up DHCP for both LAN ports

revinking · 07-27-2008, 12:47 PM

My Transparent squid box has 2 LAN cards

eth0: 10.0.0.2 (connected to internet)
gw : 10.0.0.1

eth1: 192.168.1.1 (connected to LAN)
gw : 10.0.0.2

How do i set dhcp server for both 192.168.1.0/24 LAN and 10.0.0.0/24 LAN networks. Both LAN networks need dhcp server from the same squid box??

Thanks for help

grejon04 · 07-28-2008, 10:23 AM

I think you would just edit your dhcpd.conf file to have an entry for both networks (google the file name for an example of how this file is set up, and triple-check for errors - this is where most problems come from) then you should be able to start the dhcpd service and pass addresses for both networks.

Also, I don't think a network can have a default gateway that is not on the network (your 192.168 network cannot forward L2 traffic to the 10 net) - are you trying to have this machine route the packets?

revinking · 07-29-2008, 01:31 AM

Quote:

Originally Posted by grejon04

I think you would just edit your dhcpd.conf file to have an entry for both networks (google the file name for an example of how this file is set up, and triple-check for errors - this is where most problems come from) then you should be able to start the dhcpd service and pass addresses for both networks.

Also, I don't think a network can have a default gateway that is not on the network (your 192.168 network cannot forward L2 traffic to the 10 net) - are you trying to have this machine route the packets?

This sqid machine is a router as well. but i am having troubles with my incoming connections i.e. to my public DMZ servers. HOw do i set it in the iptables to let incoming connections to my DMZ in 10.0.0.0/24 network??

grejon04 · 07-30-2008, 06:37 AM

Right, but a packet sent from a 192 network will not find the 10 net without being elevated to layer 3 through a routed 192 address first - you cannot have a DG on a different network.

IPtables -

http://www.yolinux.com/TUTORIALS/Lin...rkGateway.html

http://rimuhosting.com/howto/firewall.jsp

http://www.faqs.org/docs/iptables/