Re: [Shorewall-users] Basic VLAN question...

[Robert K C. J. -I. F. D. Corp. <bco...@in...>]

Ed,

Not sure it is the best way, but I would do it this way:

Add additional internal interface (192.168.2.0?) for his connection to 
your firewall.  His device would plug in there.

Add additional external IP for masq/nat for his network to your external 
interface.

Another strategy would be for you to control his firewall device, and 
block any traffic from his network to yours, but allowing anything else.

- Bob