On Wed, Jun 05, 2002 at 01:59:10PM -0300, Carlos Barros wrote: > > Intenet > > | > > | > > Gateway; Cisco: 194.224.7.1 > > | > > | > > | 194.224.7.9 > > Firewall > > | 194.224.7.10 > > | > > | > > ----------------------------------------------------------------- LAN > > | | | > > 194.224.7.3 194.224.7.2 10.128.114.2.2 (Radius) etc. > > > 1- your firewall have 2 interfaces in the same subnet. > 2- so your firewall dont know where the hosts are.
It does, it is just ugly. If you have no network rute to the .9 interface it will work. Therefore you have to remove the network route. This can be done with "route del -net 194.224.7.0 netmask 255.255.255.0 dev eth0". To execute this command you can eighter put it in a boot up script or you can use the "up /sbin/route ..." command in interfaces file. My question why i was asking was because of the different netmask in the additional routes. The above schema does not require them. A Netroute to the LAN and a Hostroute to the Cisco and a default gateway using that host route is everything which is needed. Greetings Bernd -- (OO) -- [EMAIL PROTECTED] -- ( .. ) [EMAIL PROTECTED],linux.de,debian.org} http://home.pages.de/~eckes/ o--o *plush* 2048/93600EFD [EMAIL PROTECTED] +497257930613 BE5-RIPE (O____O) When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]