<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-2">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
Administrator wrote:<br>
<blockquote type="cite"
cite="mid7B84EAE58BEF9247953863FDD3090E7B0516E4@ice_server.ice.si">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="ProgId" content="Word.Document">
<meta name="Generator" content="Microsoft Word 10">
<meta name="Originator" content="Microsoft Word 10">
<link rel="File-List" href="cid:filelist.xml@01C3922D.E309F4D0">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:HyphenationZone>21</w:HyphenationZone>
<w:EnvelopeVis/>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.EmailStyle17
{mso-style-type:personal-compose;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
<div class="Section1">
<p class="MsoNormal"><font size="2" face="Arial"><span
style="font-size: 10pt; font-family: Arial;">Zanima me, če je možno
narediti sledeče?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Arial"><span
style="font-size: 10pt; font-family: Arial;">Vse mašine so v LAN
192.168.1.0/24. Ena od teh mašin ima
dialup connection na VPN. Ko se poveže dobi ta mašina pač IP iz drugega
subneta
in sicer 192.168.110.0/24. Kako Lahko naredim routing na ostalih
mašinah, da bi
ob uspešni dialup povezavi ostale mašine lahko dostopale do
192.168.110.0/24
ali pa je to nekaj česar sploh ni možno narediti?<o:p></o:p></span></font></p>
</div>
</blockquote>
Čisto preprosto. Imaš dve možnosti:<br>
1. nastaviš na vseh mašinah default gateway na tvoj VPN gateway
(uporabno v primeru, da nimaš dostopa do interneta skozi NAT ali kakšne
druge omejitve) <br>
route add -net 0.0.0.0 netmask 0.0.0.0 gw [VPN IP] ali<br>
route add default [VPN IP]<br>
<br>
2. nastaviš route do drugega konca VPNja na vseh mašinah <br>
route add -net 192.168.110.0 netmask 255.255.255.0 gw [VPN IP]<br>
<br>
Kako dodaš v statičen del konfiguracije je nekoliko odvisno od verzije
inn distribucije... Na drugi strani VPN konca je ptrebno zagotoviti
podobno (torej kam pošiljati pakete za tvojo mrežo)...<br>
<br>
V vsakem primeru pa moraš vklopiti routing na tvoji VPN gw mašini:<br>
na moji mašini (RH 9+) je to v <br>
<span style="font-family: monospace;"> /etc/sysctl.conf</span><br>
vnos:<br>
<span style="font-family: monospace;"> # Controls IP packet
forwarding</span><br style="font-family: monospace;">
<span style="font-family: monospace;"> net.ipv4.ip_forward = 1</span><br>
<pre class="moz-signature" cols="72">ali kar s komando :
</pre>
<span style="font-family: monospace;"> echo "1" >
/proc/sys/net/ipv4/ip_forward</span><br>
<pre class="moz-signature" cols="72">
Lep pozdrav
Miroslav
-------------------------------------------------
** ENSICO d.o.o. <a class="moz-txt-link-abbreviated" href="http://www.ensico.si">www.ensico.si</a> **
** <a class="moz-txt-link-abbreviated" href="mailto:miroslav.jurkas@ensico.si">miroslav.jurkas@ensico.si</a> **
** project manager & unix system administrator **
-------------------------------------------------
</pre>
</body>
</html>