Hi,

I have an internet connection where the ISP provides me with a block of 8 Public IP address which I use for various things around the house, but my router also has a DHCP server where it hands out Private IPs (192.168.*.*) for guests.

Basically I am wanting to replace my router with my ubuntu server, so that my some of my pc's can be configure with the Public IP's but devices on my wireless and wired PCs can still gain Private IP's.

eventually I will be wanting to get the two network to be able to see each other as well but I assume that will be done with routing once I have the two networks running

currently I have just two NICs one for the internet connection and one for my internal network.

Any help on this would be great.

The Linux Network Administrators Guide will cover most, if not all of it.

Thanks for that yowi is there any specific section i should be looking at as its a pretty huge document.

Is it also possible to have one NIC be able to see two different networks or will i need three?

One for the internet and one for each internal network?

You kind of have a few issues. One is a physical lan/wan. The second is simple tcp/ip connections.

Almost every modern nic can have multiple IP addresses assigned to it. So you would get 2 or more subnets running on the same physical media.

Remember, a subnet plus the ip address offers only one thing. That which is within subnet and that which is outside of subnet. If outside and you want to route it what do you need?

A usual use of two physical nic cards is that the physical media is not connected between lan and wan.


(gateway/router or such)

Some advanced routing to cover the mix of subnets, IP-Masquarade (NAT) is what enables private IP's to connect to the rest of the world.

Be sure to understand when each of the different tables and chains within iptables is relevant, good document for that here:
http://www.netfilter.org/documentati...ing-HOWTO.html

Personally I've not had to deal with real and private IP's on the one side of a gateway and would reduce complexity significantly by not using the real IP's if they are not absolutely necessary. Port forwarding can allow external clients to connect to services on private IP's.

What you want to do is use http://www.google.com/search?q=1+to+1+NAT
Each system inside your network will have it's private IP and then the ones that you use a public IP for get that public IP NAT'd at the router.