Can you please post links to some of the switches which can do what you are saying you can do.
Well, let me make one correction to what I said in one of the posts: You aren't going to be able to assign IP address based on switch port. I got too caught up in what I was trying to describe and didn't pay enough attention to what I was actual writing. Other than doing that, I was just talking about using a switch as an Ethernet bridge and any switch
can do that.
I need to run 3 networks on the 3 different ports I am looking at
eg port 1=> 10.10.10.0/24
port2 => 192.168.10.0/24
port3=> DHCP client on ISP network
I dont see how I can do this using a single port ethernet on a linux computer and a consumer network switch...
I don't see the problem. The switch is just a bridge, it just passes stuff along. The ISP network is connected to the switch, but all packets are just passed to your router. The router requests an IP from the ISP's DHCP server and it is passed through the switch back to the router. A device on your LAN requests 10.10.10.0/24 and it is passed through the switch to your router. Same with a request for 192.168.10.0/24. Now you may not be able to isolate your networks by Ethernet port, since you won't actually know what switch port a device is connected to, but you will be able to use MAC addresses to control what IP address a device is assigned and you will be able to control what networks a given IP address can communicate with via routing.
Next I will have to configure shorewall (www.shorewall.net
) if you read through some of the documentation, I need to configure 3 interfaces with the software and setup the configuration. I am unable to understand how I will see the 3 or 4 interfaces on the consumer switch visible on the linux computer... which has only one interface...
Well, I am talking about routing by IP address not physical interface. If you absolutely have to do control by physical interface, than my solution will not work. That said, the routing solution I propose seems to be fully supported by Shorewall -- look at this
. I believe the same can be said for pretty much every popular firewall package.