User`s manual

IA260-261-262 EM-2260 LX User’s Manual Managing Communications
NAT Example
The IP address of LAN1 is changed to 192.168.3.127 (you will need to load the module
ipt_MASQUERADE):
Embedded Computer
PC1 (Linux or Windows)
IP/Netmask:
Gateway:
192.168.3.100/24
192.168.3.127
PC2 (Linux or Windows)
IP/Netmask:
Gateway:
192.168.4.100/24
192.168.4.127
LAN1
LAN2
LAN1: 192.168.3.127/24
LAN2: 192.168.4.127/24
NAT Area / Private IP
1. #echo 1 > /proc/sys/net/ipv4/ip_forward
2. #modprobe ip_tables
3. #modprobe iptable_ filter
4. #modprobe ip_conntrack
5. #modprobe iptable_nat
6. #modprobe ipt_MASQUERADE
7. #iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.3.127
8. #iptables -t nat -A POSTROUTING -o eth0 -s 192.168.3.0/24 -j MASQUERADE
Enabling NAT at Bootup
In most real world situations, you will want to use a simple shell script to enable NAT when the
IA260/IA261/IA262/EM-2260 boots up. The following script is an example.
#!/bin/bash
# If you put this shell script in the /home/nat.sh
# Remember to chmod 744 /home/nat.sh
# Edit the rc.local file to make this shell startup automatically.
# vi /etc/rc.d/rc.local
# Add a line in the end of rc.local /home/nat.sh
EXIF=‘eth0’ #This is an external interface for setting up a valid IP address.
EXNET=‘192.168.4.0/24’ #This is an internal network address.
# Step 1. Insert modules.
# Here 2> /dev/null means the standard error messages will be dump to null device.
modprobe ip_tables 2> /dev/null
modprobe ip_nat_ftp 2> /dev/null
modprobe ip_nat_irc 2> /dev/null
modprobe ip_conntrack 2> /dev/null
modprobe ip_conntrack_ftp 2> /dev/null
modprobe ip_conntrack_irc 2> /dev/null
# Step 2. Define variables, enable routing and erase default rules.
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
export PATH
4-12