add readme

master
David Kebler 2020-05-07 08:38:45 -07:00
parent f1e547339e
commit 70ad9fba02
2 changed files with 33 additions and 0 deletions

View File

33
readme.md Normal file
View File

@ -0,0 +1,33 @@
# Simple Masquerade of Machines on Network through a WAN Interface
Need a simple (no firewall) isolated network within your network where those machines need to "talk outside".
My use case is a stand alone IOT system that had more than one host machine. By isolating that with a "gateway" sbc with dual nic (used usb/ethernet) I can have consistent IP addressing no matter where the system is deployed.
This really is only appropriate within a private LAN. If the WAN side is going to be public facing then you need a more robust firewall like firehol.
Included in repo are three bash scripts and Systemd Service file.
1. clone repo
2. edit the scripts changing the wan/lan Nic names
3. edit service file changing the path to scripts
4. link or copy the service file to `/etc/systemd/system`
Then to start, stop, persist
```
sudo systemctl start masquerade
sudo systemctl stop masquerade
sudo systemctl enable masquerade
```
try starting the service then ping something "outside" from a host "inside" (not the gateway)
if it works then enable it and you are set.
inspired by this post
https://superuser.com/a/939657/430020