diff --git a/docs/Shorewall_and_Aliased_Interfaces.xml b/docs/Shorewall_and_Aliased_Interfaces.xml index 0f8d66ce6..da5dbefc4 100644 --- a/docs/Shorewall_and_Aliased_Interfaces.xml +++ b/docs/Shorewall_and_Aliased_Interfaces.xml @@ -64,12 +64,13 @@ eth0:0 Link encap:Ethernet HWaddr 02:00:08:3:FA:55 The ifconfig utility is being gradually phased out in favor of the - ip utility which is part of the iproute package. The - ip utility does not use the concept of aliases or virtual interfaces but - rather treats additional addresses on an interface as objects in their own - right. The ip utility does provide for interaction with ifconfig in that - it allows addresses to be labeled where these labels - take the form of ipconfig virtual interfaces. + ip utility which is part of the + iproute package. The ip utility does not use the + concept of aliases or virtual interfaces but rather treats additional + addresses on an interface as objects in their own right. The ip utility + does provide for interaction with ifconfig in that it allows addresses to + be labeled where these labels take the form of + ipconfig virtual interfaces. ip @@ -150,6 +151,11 @@ iface eth0 inet static In the sub-sections that follow, we'll take a look at common scenarios. + + The examples in the following sub-sections assume that the local + network is 192.168.1.0/24. + +
Separate Rules @@ -186,7 +192,7 @@ DNAT net loc:192.168.1.3 tcp 80 - 20 /etc/shorewall/masq: #INTERFACE SUBNET ADDRESS -eth0 eth1 206.124.146.178 +eth0 192.168.1.0/24 206.124.146.178 Shorewall can create the alias (additional address) for you if you set ADD_SNAT_ALIASES=Yes in @@ -204,16 +210,15 @@ eth0 eth1 206.124.146.178 the INTERFACE column as follows. /etc/shorewall/masq#INTERFACE SUBNET ADDRESS -eth0:0 eth1 206.124.146.178 - - Shorewall can also set up SNAT to round-robin over a range of IP - addresses. To do that, you specify a range of IP addresses in the - ADDRESS column. If you specify a label in the INTERFACE column, - Shorewall will use that label for the first address of the range and - will increment the label by one for each subsequent label. +eth0:0 192.168.1.0/24 206.124.146.178Shorewall + can also set up SNAT to round-robin over a range of IP addresses. To do + that, you specify a range of IP addresses in the ADDRESS column. If you + specify a label in the INTERFACE column, Shorewall will use that label + for the first address of the range and will increment the label by one + for each subsequent label. /etc/shorewall/masq#INTERFACE SUBNET ADDRESS -eth0:0 eth1 206.124.146.178-206.124.146.180 +eth0:0 192.168.1.0/24 206.124.146.178-206.124.146.180 The above would create three IP addresses: