,,Forwardowanie IP'' za NAT

[Andrzej Krzysztofowicz]

Tomasz Pala wrote:
> 
> EN!
> 
> On Mon, Jul 25, 2005 at 07:38:38 +0200, Andrzej Krzysztofowicz wrote:
> 
> > A nie prosciej zrobic to na poziomie routingu?
> > Tzn. nie NAT-owac polaczen z/do okreslonych IP.
> 
> It's easier, but you waste adresses for gateway, network and broadcast.

No, I don't.
Hint: use routing to a single host, not full network.

> It's not problem when you're LIR, but most people in Poland have no more
> than /27. Soon I'll face dividing /20 for customers and I'm thinking
> about using /32 masks - anyone has some experience?

Just an example of routing table:

X.Y.Z.0/24 dev eth0  proto kernel  scope link  src X.Y.Z.1
10.0.0.0/24 dev eth1 proto kernel  scope link  src 10.0.0.1
X.Y.Z.10 dev eth1  scope link
default via X.Y.Z.254 dev eth0 onlink

And either:
- configure routing to X.Y.Z.10 via X.Y.Z.1 on any host in X.Y.Z.0/24 on eth0
  that needs the routing (especially the gw, X.Y.Z.254), or
- configure proxy arp on X.Y.Z.1 machine (to respond on arp requests for
  X.Y.Z.10 on eth0)

-- 
=======================================================================
  Andrzej M. Krzysztofowicz               ankry at mif.pg.gda.pl
  phone (48)(58) 347 14 61
Faculty of Applied Phys. & Math.,   Gdansk University of Technology