SUMMARY: attach 2 LANS to 1 Physical interface

From: Bill Shorter (jwillie@fast.net)
Date: Mon Oct 09 2000 - 19:36:52 CDT


Hi,

I was cautioned by many about security concerns about doing this.
I didn't mention in my original post that this would have been for a
"practice LAN" that would exist within our LAN.
But the bottom line is that I was told by many that this would not work
with only 1 physical interface.
Thus we will go with physical interfaces.
thanks for the timely replies,

Rich
Here is my original Post:

Hi,

I got a sparc ultra 5 running vers. 8 solaris.
I have it hooked into an HP switch along with the rest of our LAN.
I got the switch configured to have 2 VLAN's(a public and a private).
I have the sparc on both VLANs.

I want to use this sparc as a firewall to the boxes on the private VLAN.
The sparc in question has only one ether interface with 2 logical interfaces.

One interface for each VLAN.

hme0: is on the 198.107 (public) subnet
hme0:1 is on the 10.0 (private) subnet.

I am able to ping boxes on the public subnet, but not the private.

I have Ip forwarding turned on and have removed the /etc/defaultrouter file.

I did a route add net 198.107.33.0 and a route add net 10.0.0.0 through
each logical interface.

Still no luck. Can only ping to the public subnet.

Not sure what is wrong.
Should I NOT be attempting this with only 1 physical interface?
Even though I have it configured to be 2 logical interfaces with different
IP addresses?

thanks,

Rich

S
U BEFORE POSTING please READ the FAQ located at
N ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/faq
. and the list POLICY statement located at
M ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/policy
A To submit questions/summaries to this list send your email message to:
N sun-managers@ececs.uc.edu
A To unsubscribe from this list please send an email message to:
G majordomo@sunmanagers.ececs.uc.edu
E and in the BODY type:
R unsubscribe sun-managers
S Or
. unsubscribe sun-managers original@subscription.address
L To view an archive of this list please visit:
I http://www.latech.edu/sunman.html
S
T

S
U BEFORE POSTING please READ the FAQ located at
N ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/faq
. and the list POLICY statement located at
M ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/policy
A To submit questions/summaries to this list send your email message to:
N sun-managers@sunmanagers.ececs.uc.edu
A To unsubscribe from this list please send an email message to:
G majordomo@sunmanagers.ececs.uc.edu
E and in the BODY type:
R unsubscribe sun-managers
S Or
. unsubscribe sun-managers original@subscription.address
L To view an archive of this list please visit:
I http://www.latech.edu/sunman.html
S
T



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:14:19 CDT