From: Andy Bavier Date: Mon, 18 May 2009 14:26:14 +0000 (+0000) Subject: Add subnet for external NAT interface X-Git-Tag: vsys-0.99-0~15 X-Git-Url: http://git.onelab.eu/?p=vsys.git;a=commitdiff_plain;h=08f1f840489ef17a0dbe610f080567ad8d115120 Add subnet for external NAT interface --- diff --git a/factory/setup-nat b/factory/setup-nat index e703f5d..9a0c4f5 100755 --- a/factory/setup-nat +++ b/factory/setup-nat @@ -8,7 +8,7 @@ read KEY ETUN0=nat$KEY ETUN1=natx$KEY ip link add name $ETUN0 type veth peer name $ETUN1 -ifconfig $ETUN1 10.0.$KEY.1 up +ifconfig $ETUN1 10.0.$KEY.1/24 up iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -A FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT