Just to clear up bit mis-understanding I did not put same IP on eth0 and eth1, they 10.1.1.1 and 10.1.1.4 But both did reside on the same subnet: 255.0.0.0 With this scenario, I assume you corrected me by saying this configuration will confuse the Debian on will packet will go from which NIC, is this correct?
But then, with the same conf, why am I able to log in from 10.1.1.5 by using https://10.1.1.1:10000 or https://10.1.1.4:10000? This is what somehow confusing me And why the ping result: > 'ping 10.1.1.5' on my Debian > - with eth0 only, resulting: From 10.1.1.4 icmp_seq=10 Destination > Host Unreachable > - with eth1 only, resulting: 64bytes from 10.1.1.5: icmp_seq=1 ttl=125 > time=0.080ms will be different? Cheers ----- Original Message ---- From: subscriptions <[EMAIL PROTECTED]> To: debian-user@lists.debian.org Sent: Tuesday, 25 November, 2008 4:46:45 PM Subject: Re: Fw: Shorewall with Debian On Tue, 2008-11-25 at 06:36 +0100, Phillipus Gunawan wrote: > > Thanks for the reply, > > I admit, yes, it was mistake to create both NIC on the same subnet, > though I need to study more about this > > 'ping 10.1.1.5' on my Debian > - with eth0 only, resulting: From 10.1.1.4 icmp_seq=10 Destination > Host Unreachable > - with eth1 only, resulting: 64bytes from 10.1.1.5: icmp_seq=1 ttl=125 > time=0.080ms > > Please guide me > If I still want to make the same IPs on each NIC, subnetting /8 > and /24 will solve the problem? > With eth1 connected, I can log in into my Webmin either by address > https://10.1.1.1:10000 or https://10.1.1.4:10000 from other host (e.g. > 10.1.1.5) > why is that? > > Thanks You can not have the same IP on each NIC. What is possible; is to have an IP on each NIC from the same (sub)network range, but that makes routing less transparent. Better go with ip from different subnet ranges for each NIC: e.g. 10.0.1.2/24 for eth0 and 10.0.2.2/24 for eth1. What is the purpose of the whole exercise? (important question for what to do next!) If the computers function is *only* a firewall, you might want to look into bridging. Best, Rob -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] Start your day with Yahoo!7 and win a Sony Bravia TV. Enter now http://au.docs.yahoo.com/homepageset/?p1=other&p2=au&p3=tagline Start your day with Yahoo!7 and win a Sony Bravia TV. Enter now http://au.docs.yahoo.com/homepageset/?p1=other&p2=au&p3=tagline -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
