[IPCop-user] Multiple LAN Networks (Custom Interfaces)

[Rick S. <ri...@de...>]

Hello,

I would like to set up a IPCop 2.0.2 firewall with the following
networks:
RED (wan-1)
ORANGE (DMZ-1)
BLUE (wlan-1)
GREEN (lan-1)
YELLOW (lan-2)

RED, ORANGE, and BLUE will be as usual. I would like GREEN for my office
network and YELLOW for my bookkeeping network. Workstations in the GREEN
network shouldn't connect to any device in the YELLOW network.
Workstations in the YELLOW network should be able to connect to a shared
printer in the GREEN network and participate in a Windows Samba network.

So far, I have a PC with 5 NICs with IPCop 2.0.2 installed on it. At
install time, I assigned NICs to the RED, ORANGE, BLUE, and GREEN
networks. The 5th NIC was assigned as unused-1.

It looks like custom interfaces in not currently supported. Further
investigation lead me to believe that the following needs to be done to
activate a custom interface:

1. changed 'unused-1' to 'lan-2'
in /etc/udev/rules.d/70-persistent-net.rules

2. added the following to /var/ipcop/ethernet/settings
YELLOW_1_NETADDRESS=192.168.20.0
YELLOW_1_NETMASK=255.255.255.0
YELLOW_1_ADDRESS=192.168.20.254
YELLOW_1_MAC=My MAC address
YELLOW_1_DRIVER=tulip
YELLOW_1_DEV=lan-2
YELLOW_COUNT=1

3. changed /var/ipcop/firewall/custominterfaces from
YELLOW,lan-2,off,0
to
YELLOW,lan-2,on,1

4. added YELLOW to to the definition of @INTERFACES in /etc/rc.d/rc.net

5. added YELLOW,ip,192.168.20.0,255.255.255.0,1
to /var/ipcop/firewall/customnetworks

6. added YELLOW interface in the web admin GUI (Firewall > Interfaces)

after doing the above:

ifconfig lan-2 shows the correct settings for the YELLOW interface.

Under Custom Interfaces in the web admin GUI (Firewall > Interfaces) the
following is listed:
Name	Interface	Used
YELLOW	lan-2		1x

Under Firewall > Firewall Rules in the web admin, YELLOW shows up as a
selection in the Custom interfaces drop down box and the Custom address
drop down box.

Is this above correct, or am I missing something? Also, is there any
documentation available for Custom Interfaces? 

Any input would be greatly appreciated.


Thanks,
-- 
Rick Sutphin
Project Manager
Delta Technologies, Inc.
P.O. Box 2301
Tallahassee, FL 32316
850.575.3977 office
850.575.3908 fax
850.251.2345 cell
Licenses
EF-20000414 FL
ES-0000212 FL
LU405002 GA
1633 AL