x.x.x.129 router (by the ISP, not under my control)
x.x.x.130 firewall (with proxy_arp)
x.x.x.128/27 my subnet
x.x.x.135 server1
x.x.x.136 server2 etcpp
x.x.y.242 firewalls second ip, different subnet, for ssh access..
x.x.x.129 x.x.x.128/27
| |
| vlan 1 | | vlan 7 |
| |
bond0 bond0.7
\ /
x.x.x.130
on the firewall:
ip route:
x.x.x.129 dev bond0 scope link
x.x.y.240/28 dev bond0 proto kernel scope link src x.x.y.242
x.x.x.128/27 dev bond0.7 scope link
default via x.x.y.241 dev bond0
ip addr:
5: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue
link/ether 00:04:23:bf:75:8d brd ff:ff:ff:ff:ff:ff
inet x.x.y.242/28 brd x.x.y.255 scope global bond0:1
inet x.x.x.130/27 brd x.x.x.159 scope global bond0
inet6 fe80::204:23ff:febf:758d/64 scope link
valid_lft forever preferred_lft forever
9: bond0.7@bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue
link/ether 00:04:23:bf:75:8d brd ff:ff:ff:ff:ff:ff
inet x.x.x.130/32 scope global bond0.7
inet6 fe80::204:23ff:febf:758d/64 scope link
valid_lft forever preferred_lft forever
arp -an
? (x.x.y.241) auf 00:D0:01:F5:C8:00 [ether] auf bond0
? (x.x.x.139) auf <unvollständig> auf bond0.7
? (x.x.x.129) auf 00:D0:01:F5:C8:00 [ether] auf bond0
? (x.x.x.135) auf 00:0A:E4:83:D5:F7 [ether] auf bond0.7