NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Dual WAN




If you don't need NAT, you can use standard routing tables to specify outbound interfaces on a per-destination basis.

For more granulatity, or to use NAT, use PF to map on a per-L3/L4 protocol, in combination with supernet routing.

For example, if 10.0.0.0/8 is the corp network behind the VPN router, you'd have:

route add 0.0.0.0 0.0.0.0 172.16.1.254
route add 10.0.0.0 255.0.0.0 10.5.4.1

If your ISP is filtering some protocol (SMTP), but your corp network forwards it fine, ou'll have to use NAT or policy route statements to push it on a per-UDP/TCP port basis

~BAS


Home | Main Index | Thread Index | Old Index