[FUG-BR] Limitar banda IP VALIDO (FREEBSD)

[Anailson Gomes]

Pessoal. tenho a seguinte situação e gostaria de uma ajudinha

 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE

xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=b<RXCSUM,TXCSUM,VLAN_MTU>
        inet6 fe80::201:1ff:fec7:4694%xl0 prefixlen 64 scopeid 0x3
        inet 201.88.72.130 netmask 0xfffffff8 broadcast 201.88.72.135
        inet 201.88.72.131 netmask 0xffffffff broadcast 201.88.72.131

rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=8<VLAN_MTU>
        inet 192.168.253.254 netmask 0xffffff00 broadcast 192.168.253.255
        inet6 fe80::208:54ff:fe26:8d4f%rl0 prefixlen 64 scopeid 0x2
        inet 201.88.72.136 netmask 0xfffffff8 broadcast 201.88.72.143


ambos ligados em um Swith.
quero fazer a seguinte forma: prender o mac e limitar o determinado IP
VALIDO ao gateway 201.88.72.136 -  estou testando as seguintes
regrinhas.


#!/bin/sh

#Path Ipfw
IPFW=/sbin/ipfw
#Ativar Suporte Layer2
sysctl net.link.ether.ipfw=1
#Desativando passagem unica
/sbin/ipfw disable one_pass
#Ativa Regras Fw
#./orion-firewall

#Configuracao da rede
gateway="xl0"
clientes="rl0"
firewall="vr0"


#-[001]--------------------------
#CLIENTE: IP REAL EDUARDO
#INSTALL:
mac_001="00:50:2c:a8:81:ac"
ip_001="201.88.72.137/32"
bwin_001="100"
bwout_001="100"

#INICIO CONTROLE
ipfw add  allow layer2 not mac-type ip

#001
ipfw add allow layer2 src-ip ${ip_001} mac any ${mac_001}
ipfw add allow layer2 dst-ip ${ip_001} mac ${mac_001} any
ipfw pipe 100 config bw ${bwin_001}Kbit/s
ipfw pipe 101 config bw ${bwout_001}Kbit/s
ipfw -q -f add pipe 100 ip from any to ${ip_001}in
ipfw -q -f add pipe 101 ip from ${ip_001} to any out

 ipfw add  allow all from ${ip_global} to any not layer2
 ipfw add  allow all from any to ${ip_global} not layer2

#Fecha o restante
ipfw add 65000 deny log all from any to any layer2 in via $clientes

anailson em msn.com
anailson em gmail.com