LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   iptables and routing (https://www.linuxquestions.org/questions/linux-networking-3/iptables-and-routing-71518/)

palhope 07-10-2003 07:01 AM

iptables and routing
 
hi ,
am tired of thes problem, i hope i can find any help.
i have 2 LAN, connected by fraction t1 line, NOS is windows NT 4,,
i establish trust relationship between the 2 domain , so i can share file, and manage the user account and right form offic A. in office A i have internet service , i build firewall and add squid to work as transpernt proxy, think is ok, the point is , i want officeB be to have internet through office A, so i would connect the router2 to the firewall , the figer below show whate i want to accomplish.
isp
|
| fractional t1 line
|
router 1
|
firewall ---------- router 2------fractional t1 line ---router , my office B lan
| 192.168.11.0/24
|
my offic A lan 192.168.10.0/24

same time i have
#keep the trust between the 2 site
#be able to manage the bandwidth of internet service ' give office B 30% of the total bandwith

please if any one have any idea send me,
thank you all
best regard.

deanrantala 07-10-2003 11:42 AM

The proper way to set this up is like so...

Internet ---->linux PC(router/firewall)<---->hub/switch<--->winNT PC

or...

Internet---->linux PC(router/firewall)<----(crosswired patch cord)--->winNT PC

If you already got a standalone router, you can also hook it up like I am about to show you, but I sugest (for better security) that you use the router as a simple switch/DHCP server, and use one of the methods above - using your linux box as the firewall/router.


--------------------------->Linux PC
|
internet-->router/hub
|
----------------------------WinNT PC

__________________________________________

If you need a good howto on setting up IP masqurarading (to use your Linux box as a router/firewall) visit http://www.tldp.org , they got lots of good howto's that are well laid out...

hakcenter 07-10-2003 12:01 PM

why not just have lan b setup just like lan a, and then use a vpn tunnel ?

as far as i was aware, you couldn't get your own t line directly to another building


All times are GMT -5. The time now is 08:37 AM.