Pessoal. tenho a seguinte situação e gostaria de uma ajudinha
5.2.1-RELEASE FreeBSD 5.2.1-RELEASE
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=b<RXCSUM,TXCSUM,VLAN_MTU>
inet6 fe80::201:1ff:fec7:4694%xl0 prefixlen 64 scopeid 0x3
inet 201.88.72.130 netmask 0xfffffff8 broadcast 201.88.72.135
inet 201.88.72.131 netmask 0xffffffff broadcast 201.88.72.131
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=8<VLAN_MTU>
inet 192.168.253.254 netmask 0xffffff00 broadcast 192.168.253.255
inet6 fe80::208:54ff:fe26:8d4f%rl0 prefixlen 64 scopeid 0x2
inet 201.88.72.136 netmask 0xfffffff8 broadcast 201.88.72.143
ambos ligados em um Swith.
quero fazer a seguinte forma: prender o mac e limitar o determinado IP
VALIDO ao gateway 201.88.72.136 - estou testando as seguintes
regrinhas.
#!/bin/sh
#Path Ipfw
IPFW=/sbin/ipfw
#Ativar Suporte Layer2
sysctl net.link.ether.ipfw=1
#Desativando passagem unica
/sbin/ipfw disable one_pass
#Ativa Regras Fw
#./orion-firewall
#Configuracao da rede
gateway="xl0"
clientes="rl0"
firewall="vr0"
#-[001]--------------------------
#CLIENTE: IP REAL EDUARDO
#INSTALL:
mac_001="00:50:2c:a8:81:ac"
ip_001="201.88.72.137/32"
bwin_001="100"
bwout_001="100"
#INICIO CONTROLE
ipfw add allow layer2 not mac-type ip
#001
ipfw add allow layer2 src-ip ${ip_001} mac any ${mac_001}
ipfw add allow layer2 dst-ip ${ip_001} mac ${mac_001} any
ipfw pipe 100 config bw ${bwin_001}Kbit/s
ipfw pipe 101 config bw ${bwout_001}Kbit/s
ipfw -q -f add pipe 100 ip from any to ${ip_001}in
ipfw -q -f add pipe 101 ip from ${ip_001} to any out
ipfw add allow all from ${ip_global} to any not layer2
ipfw add allow all from any to ${ip_global} not layer2
#Fecha o restante
ipfw add 65000 deny log all from any to any layer2 in via $clientes
[EMAIL PROTECTED]
[EMAIL PROTECTED]
-------------------------
Histórico: http://www.fug.com.br/historico/html/freebsd/
Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
