diff --git a/docs/Shorewall_and_Aliased_Interfaces.xml b/docs/Shorewall_and_Aliased_Interfaces.xml
index 0f8d66ce6..da5dbefc4 100644
--- a/docs/Shorewall_and_Aliased_Interfaces.xml
+++ b/docs/Shorewall_and_Aliased_Interfaces.xml
@@ -64,12 +64,13 @@ eth0:0 Link encap:Ethernet HWaddr 02:00:08:3:FA:55
The ifconfig utility is being gradually phased out in favor of the
- ip utility which is part of the iproute package. The
- ip utility does not use the concept of aliases or virtual interfaces but
- rather treats additional addresses on an interface as objects in their own
- right. The ip utility does provide for interaction with ifconfig in that
- it allows addresses to be labeled where these labels
- take the form of ipconfig virtual interfaces.
+ ip utility which is part of the
+ iproute package. The ip utility does not use the
+ concept of aliases or virtual interfaces but rather treats additional
+ addresses on an interface as objects in their own right. The ip utility
+ does provide for interaction with ifconfig in that it allows addresses to
+ be labeled where these labels take the form of
+ ipconfig virtual interfaces.
ip
@@ -150,6 +151,11 @@ iface eth0 inet static
In the sub-sections that follow, we'll take a look at common
scenarios.
+
+ The examples in the following sub-sections assume that the local
+ network is 192.168.1.0/24.
+
+
Separate Rules
@@ -186,7 +192,7 @@ DNAT net loc:192.168.1.3 tcp 80 - 20
/etc/shorewall/masq:
#INTERFACE SUBNET ADDRESS
-eth0 eth1 206.124.146.178
+eth0 192.168.1.0/24 206.124.146.178
Shorewall can create the alias (additional address) for you if you
set ADD_SNAT_ALIASES=Yes in
@@ -204,16 +210,15 @@ eth0 eth1 206.124.146.178
the INTERFACE column as follows.
/etc/shorewall/masq#INTERFACE SUBNET ADDRESS
-eth0:0 eth1 206.124.146.178
-
- Shorewall can also set up SNAT to round-robin over a range of IP
- addresses. To do that, you specify a range of IP addresses in the
- ADDRESS column. If you specify a label in the INTERFACE column,
- Shorewall will use that label for the first address of the range and
- will increment the label by one for each subsequent label.
+eth0:0 192.168.1.0/24 206.124.146.178Shorewall
+ can also set up SNAT to round-robin over a range of IP addresses. To do
+ that, you specify a range of IP addresses in the ADDRESS column. If you
+ specify a label in the INTERFACE column, Shorewall will use that label
+ for the first address of the range and will increment the label by one
+ for each subsequent label.
/etc/shorewall/masq#INTERFACE SUBNET ADDRESS
-eth0:0 eth1 206.124.146.178-206.124.146.180
+eth0:0 192.168.1.0/24 206.124.146.178-206.124.146.180
The above would create three IP addresses: