Re: IP Routing on MacOS X
Re: IP Routing on MacOS X
- Subject: Re: IP Routing on MacOS X
- From: Jim Lloyd <email@hidden>
- Date: Tue, 30 May 2006 19:51:15 -0700
Nevermind, I figured out that I was fundamentally confused, needed
NAT, and now have a working solution.
On May 30, 2006, at 2:51 PM, Jim Lloyd wrote:
I have a network administration problem that I am hoping someone on
this list might be able to help me with.
I am configuring some linux boxes that I am getting ready to ship
off to a data center for colocation hosting. The host has assigned
a CIDR /28 network to me, and provides a gateway node in that
network. I'd like to be able to test all of my servers at home
before I ship them off to the data center. I'd like to try to set
up a G5 so that it appears to be the gateway machine. I have a 2nd
ethernet card installed, so I can dedicate that card to my CIDR /28
network. I've done everything that I think I should need to do to
make this work, but the G5 is not forwarding packets.
I've enabled ip forwarding in the kernel:
$ sudo sysctl -w net.inet.ip.forwarding=1
I've configured the 2nd card (using the Network Control Panel)
$ ifconfig en2
en2: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet6 fe80::204:23ff:fea5:c8cd%en2 prefixlen 64 scopeid 0x5
inet 69.13.223.145 netmask 0xfffffff0 broadcast 69.13.223.159
ether 00:04:23:a5:c8:cd
media: autoselect (1000baseT <full-duplex>) status: active
(FYI en0 is the primary interface, and en1 is an 802.11 interface)
I have TCP/IP access in both directions for one hop, i.e. I can ssh
to a linux box from the G5, and also to the G5 from a linux box.
I've disabled the firewall on the linux box. I have NOT disabled
the firewall on my G5 (en0 is a public ip), but I'm pretty sure I
have the firewall configured properly to allow all traffic on the
en2 interface. I use Flying Buttress as a front end to ipfw and I
not filtering en2.
Does anyone have any idea what I am overlooking?
Thanks,
Jim Lloyd
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40mac.com
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden