Re: [LARTC] Linux router configuration??
Ryan Johnson wrote: Could you send me the output of route -n? Your two network cards should not be in the same network, if they are, it is not a rotuer. The whole purpose of a router is a gateway for clients on a network to get to another network that they (clients) do not know how to reach. Ryan Anyway thanks Ryan, I just wanted to confirm from you, whether we can have two NIC's in a m/c connected to a same network. Output of route -n is :- Destination Gateway Genmask Flags Metric RefUse Iface 192.168.1.0 0.0.0.0 255.255.255.0 U 0 00 eth1 192.168.1.0 0.0.0.0 255.255.255.0 U 0 00 eth1 127.0.0.0 0.0.0.0 255.0.0.0 U 0 00 lo 0.0.0.0 192.168.1.2 0.0.0.0 UG 0 00 eth0 what I was expecting was:- Destination Gateway Genmask Flags Metric RefUse Iface 192.168.1.0 0.0.0.0 255.255.255.0 U 0 00 eth0 192.168.1.0 0.0.0.0 255.255.255.0 U 0 00 eth1 127.0.0.0 0.0.0.0 255.0.0.0 U 0 00 lo 0.0.0.0 192.168.1.2 0.0.0.0 UG 0 00 eth0 Regards -Raghu Ryan Johnson wrote: I am going to assume you want the most basic router, just two interfaces. 1.) Make sure both network cards have been detected. ifconfig eth0 ifconfig eth1 Can I have both the network cards in the same n/w...? Becoz If I try to use both NIC's with the same n/w, running $ route -n we can see either eth1 or eth0 repeated twice. Pls let me know where is the problem..? Regards -Raghu 2.) Set up each interface on its own network, make sure the interface has been activated, you can use ifconfig for this. 3.) issue the command echo 1 /proc/sys/net/ipv4/ip_forward to enable ip fowarding, w/o this the kernel will not send packets between interfaces 4.) set the clients behind the router to point to the internal ip of your router Any changes made to the system will have to be initialized during the boot process. Of course if you have ip addresses that you would like to nat/masq behind the router, you will have to use iptables. You really should be more specific on your needs. Good luck. Good morning at all, thanks for previous help, but I have another ask. I have a few experience of Linux world's, and I need to configure a Linux PC as router, what are the steps? What do I do? Thanks. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ -- ** This email is confidential and is intended for the original recipient(s) only. If you have erroneously received this mail, please delete it immediately and notify the sender. Unauthorized copying, disclosure or distribution of the material in this mail is prohibited. Views expressed in this mail are those of the individual sender and do not bind Gsec1 Limited. or its subsidiary, unless the sender has done so expressly with due authority of Gsec1.** ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] dead gateway detection in linux
Hi, Few questions: 1] How does dead gateway detection happen in Linux? 2] I am using multipath default routes and I want the kernel to detect when a particular default route is down and stop using it. I would also like the kernel to detect when that particular default route is up and start reusing it. From the reading that I have done so far I realized there are two options. a] One option is to use Juliano's patches (http://www.ssi.bg/~ja/nano.txt). From what I understand Juliano's patches provide following. The patches let a static route be marked as 'dead' when it goes down. Also it detects that when the route is up and starts using it. However, it requires that we use NAT. I do not want to use NAT. In that case will his patches work for me? Another question regarding his patches is how does kernel detect when a route is dead? b] second option is put together a simple script which pings and find out when routes are dead and changes the multipath default routes accordingly. That is what I am doing now. I would like to know if there is a better option. I would appreciate if more pointers/information/options are provided for failover mechanism in mutipath default routes. Thanks, Madhuri ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Trying to understand Routing for muliple networks
Hi All, I am trying to understand how to setup routing for multiple uplinks using a Bering firewall. Using this document http://lartc.org/howto/lartc.rpdb.multiple-links.html 1) Am I correct in that I can safely leave out these commands, since these routes are automatically setup by Bering? ip route add $P1_NET dev $IF1 src $IP1 ip route add $P2_NET dev $IF2 src $IP2 2) I am also struggling to understand which of the commands are responsible for ensuring that packets arriving on one interface, are equally returned on the same interface. Is it achieved by this? ip rule add from $IP1 table T1 ip rule add from $IP2 table T2 or this? ip route add $P0_NET dev $IF0 table T1 ip route add $P2_NET dev $IF2 table T1 ip route add 127.0.0.0/8 dev lo table T1 ip route add $P0_NET dev $IF0 table T2 ip route add $P1_NET dev $IF1 table T2 ip route add 127.0.0.0/8 dev lo table T2 Regards, Simon Chalk. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] RTP packet filtering
I havent't tested this, but it should work: tc filter ... \ match ip protocol 17 0xff \ match u16 0x8000 0x at nexthdr + 8 The first match selects udp and the second selects the protocol information and payload type. Note that there is more info there than just the protocol version (no padding, no extension, no CSIDs). Also, why is the type 00? On Tue, 2003-09-30 at 17:13, Rafael Gustavo Gassner wrote: Hi all, I need to allow RTP packages on my network, but don´t want to allow all UDP (And then ill try to priorize it), so i think i could do that using u32. I can see that all packages that are RTP have a field 80 00, as shown below (It is the protocol version and payload type): xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx 0010 xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx 0020 xx xx xx xx xx xx xx xx xx xx 80 00 xx xx xx xx Could someone give me a tip on how should the u32 filter look like? Thanks a lot, Rafael Gustavo Gassner ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ -- Lawrence MacIntyre 865.574.8696 [EMAIL PROTECTED] Oak Ridge National Laboratory High Performance Information Infrastructure Technology Group signature.asc Description: This is a digitally signed message part
Re: [LARTC] dead gateway
Hi Please check the Julian Anastasov site http://www.ssi.bg/~ja/ he has this patch regards hare - Original Message - From: vadiraj c s [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 11:04 AM Subject: [LARTC] dead gateway Hi all, Has any one used dead gateway detection patch. Any one worked on it. What do you feel about it regards vadiraj ___ Television meets Accounts; Jyoti Weds Rajaram. Rediff Matchmaker strikes another interesting match !! Visit http://matchmaker.rediff.com?1 ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Re: HTB and metro+int. limits
I'm sorry, but I'm still confused about assigning separate limits for metro and international traffic. After I mark metro traffic with --set-mark 6 and int. traffic with --set-mark 5 what's the next step? Can someone give me an example? It seems that my approach is somehow wrong after marking of the packets. Thanks again. Alex - Original Message - From: Stef Coene [EMAIL PROTECTED] To: Alex [EMAIL PROTECTED]; Lartc [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 12:59 PM Subject: Re: [LARTC] Re: HTB and metro+int. limits On Tuesday 30 September 2003 21:27, Alex wrote: Thanks for your replay, it really helps, but to take the question further, from what you have seen in my sample script, how should I classify packets with tc ? I don't know how to put them in separate classes,. What I have in my script will only shape metro traffic, but for international how would the tc command be? Something like: /sbin/tc class add dev eth2 parent 1:2 classid 2:11 htb rate 50kbit ceil 100kbit prio 5 /sbin/tc filter add dev eth2 parent 1:0 protocol ip prio 5 u32 match ip dst 192.168.254.10 flowid 1:11 Would this be the correct commands? No. You create a class with a wrong number. If the parent class is 1:x, the class name has to be 1:y. Thanks again. Alex ---begin my script sbin/tc qdisc add dev eth2 root handle 1: htb default 10 /sbin/tc class add dev eth2 parent 1: classid 1:1 htb rate 10M #metro /sbin/tc class add dev eth2 parent 1:1 classid 1:10 htb rate 10M /sbin/tc filter add dev eth2 protocol ip parent 1:10 prio 3 handle 6 flowid 1:10 This filter will not do much (typo?). You attach it to class 1:10 (the parent parameter). This should be 1: so all packets leaving eth2 will be checked against this filter. And is 10M working? Normally 10mbit is used. Stef -- [EMAIL PROTECTED] Using Linux as bandwidth manager http://www.docum.org/ #lartc @ irc.openprojects.net ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Re: HTB and metro+int. limits part2
I forgot to say that I have put my script on http://retea.hostingcenter.ro/htb.txt Maybe someone could lead to to the correct sintax if there's something wrong. Alex - Original Message - From: Stef Coene [EMAIL PROTECTED] To: Alex [EMAIL PROTECTED]; Lartc [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 12:59 PM Subject: Re: [LARTC] Re: HTB and metro+int. limits On Tuesday 30 September 2003 21:27, Alex wrote: Thanks for your replay, it really helps, but to take the question further, from what you have seen in my sample script, how should I classify packets with tc ? I don't know how to put them in separate classes,. What I have in my script will only shape metro traffic, but for international how would the tc command be? Something like: /sbin/tc class add dev eth2 parent 1:2 classid 2:11 htb rate 50kbit ceil 100kbit prio 5 /sbin/tc filter add dev eth2 parent 1:0 protocol ip prio 5 u32 match ip dst 192.168.254.10 flowid 1:11 Would this be the correct commands? No. You create a class with a wrong number. If the parent class is 1:x, the class name has to be 1:y. Thanks again. Alex ---begin my script sbin/tc qdisc add dev eth2 root handle 1: htb default 10 /sbin/tc class add dev eth2 parent 1: classid 1:1 htb rate 10M #metro /sbin/tc class add dev eth2 parent 1:1 classid 1:10 htb rate 10M /sbin/tc filter add dev eth2 protocol ip parent 1:10 prio 3 handle 6 flowid 1:10 This filter will not do much (typo?). You attach it to class 1:10 (the parent parameter). This should be 1: so all packets leaving eth2 will be checked against this filter. And is 10M working? Normally 10mbit is used. Stef -- [EMAIL PROTECTED] Using Linux as bandwidth manager http://www.docum.org/ #lartc @ irc.openprojects.net ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Error compiling iproute
I'm trying to compile iproute2-2.4.7-now-ss020116-try.tar.gz with the htb3.6-020525 tc patch against a Linux 2.4.22 kernel. At first I would get an error message in the first lines and I found a workaround by removing the -I../include-glibc from the GLIBCFIX and the -O2 from the CCOPTS. But now I'm getting errors when it tries to compile arpd.c gcc -D_GNU_SOURCE -Wstrict-prototypes -Wall -g -I/usr/include/db3 -include ../include-glibc/glibc-bugs.h -I/usr/src/linux/include -I../include -DRESOLVE_HOSTNAMES -c -o arpd.o arpd.c arpd.c: In function `do_one_request': arpd.c:342: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:342: error: too few arguments to function arpd.c:366: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:366: error: too few arguments to function arpd.c:392: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:392: error: too few arguments to function arpd.c:410: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:410: error: too few arguments to function arpd.c:422: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:422: error: too few arguments to function arpd.c: In function `get_arp_pkt': arpd.c:520: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:520: error: too few arguments to function arpd.c:530: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:530: error: too few arguments to function arpd.c: In function `main': arpd.c:670: warning: implicit declaration of function `dbopen' arpd.c:670: warning: assignment makes pointer from integer without a cast arpd.c:716: warning: passing arg 2 of pointer to function from incompatible pointer type arpd.c:716: error: too few arguments to function arpd.c:729: error: structure has no member named `seq' arpd.c:729: error: `R_NEXT' undeclared (first use in this function) arpd.c:729: error: (Each undeclared identifier is reported only once arpd.c:729: error: for each function it appears in.) arpd.c:840: error: too few arguments to function arpd.c:844: error: too few arguments to function make[1]: *** [arpd.o] Error 1 make[1]: Leaving directory `/usr/src/iproute2/misc' make: *** [all] Error 2 Anybody know what I can do for this? I'm using GCC-3.3.1 and Glibc-2.3.2 Jean-Rene Cormier ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Htb on trunked line
Ya, i already use linux+iproute2+tc.The shaping is fine but not with the filter. I already read a lot of docs but can't found the same case so if you have appropriate document links, i will be glad to read that... :) Yeah...abt cisco i hope they hear that too :)) - Original Message - From: Steve Wright [EMAIL PROTECTED] To: Kristiadi Himawan [EMAIL PROTECTED] Cc: lartc [EMAIL PROTECTED] Sent: Thursday, October 02, 2003 1:55 AM Subject: Re: [LARTC] Htb on trunked line On Thu, 2003-10-02 at 06:41, Kristiadi Himawan wrote: Dear All, I have configuration like this : DVB Modem || ___Link A \ / trunk/ CiscoRouter CiscoSwitch---Link B \___ Link C Now i want to put a linux bandwith manager using htb to controll Link A-C bandwith, but i don't know where to put the linux pc. I ever try to put the linux pc at the trunked line between CiscoRouter and CiscoSwitch but found that all traffic always go to default class not to appropriate class and i think that's because of VLAN 802.1Q data format at that line so the filter always miss. Any suggestion abt this kind of configuration? remove all the cisco equipment and replace with Linux.. 8-) Linux+iproute2+tc will easily do what you ask, and the cisco will not. The answer is that simple. I wish there was a nice GUI config for this, but there is not, and it is very complicated for me to make. I see your earlier question about how to make this in Linux, and I would suggest you replace your VLAN config with a new Linux IPRoute2+tc config. There will be a lot of reading for you to do, however. 8-/ Google for policy routing and read about policy routing theory. I think cisco should be very concerned about the day that Linux IPRoute2+tc has a GUI... Perhaps, after that day cisco will suddenly design routers that will run Linux. 8-)) best regards, Steve ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] Packet mangling latency
Firstly... sorry to those of you on both the netfilter and lartc list who'll end up with this message twice... I am trying to find out what kind of latency I can expect when dNAT'ing UDP packets on (probably) a mid-range P3 server, 32-bit 33MHz PCI bus with Intel EEPro NICs. It'll most likely be running whatever the latest 2.4 kernel will be at the time, unless there are significant boosts in packet mangling performace in 2.6. Sorry that this is such vague set of specs, but this is just a vague idea at the moment. Any suggestions for hardware that would be particuarly suited to shifting packets with the lowest possibly latency would be much appreciated. cheers. Jamie... PS Thanks to the Netfilter team for producing such a cracking frame work, thanks to the LARTC guys for making me feel like a newbie again :) -- ** This message was transmitted on 100% recycled electrons ** ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
[LARTC] MSN Messenger automatically disconnects
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am doing traffic shaping with HTB, and my msn messenger version 6 automatically disconnects every 5 minutes or so. Anyboyd had the same problem? I am driving myself mad. Thank you! -BEGIN PGP SIGNATURE- Version: PGP 8.0 iQA/AwUBP3tT3H7diNnrrZKsEQKtvgCgyDFKqKXfhWr/ESGMp6/n5ivDpBIAoPa6 BwDoMvpcalwTekHxcgwb1fy5 =VaRw -END PGP SIGNATURE- ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Htb on trunked line
On Wed, 2003-10-01 at 15:39, Kristiadi Himawan wrote: About your first option to plug the linux box to the switch and create vlan interfaces on it, i have try that before and the result some network can't reach because of arp uncomplete. Are A and C on different IP networks? With routes to each other via the IPs on the subinterfaces on the linux box and they can arp for those IPs, I don't see where the arp issue would come from. And the second option to put linux box between router and switch is the better choice but i face new problem on it. I already create transparent bridge (using eth0 and eth1) on the linux box and it's work. But the problem occur when i try to shape the link using HTB or CBQ, the filter always miss. I will try your suggestion to bridge every vlan interfaces in the linux box. I hope this is the solution. Yeah we do this it works fine. That is, with a bridge per VLAN. If you want to share bandwidth amond the interfaces though, you need to set up IMQ, which I have not done. On Wed, 2003-10-01 at 13:41, Kristiadi Himawan wrote: Dear All, I have configuration like this : DVB Modem || ___Link A \ / trunk/ CiscoRouter CiscoSwitch---Link B \___Link C Ryan Goldberg wrote: Plug the linux box into the switch, set the link to dot1q, add subinterfaces on the linux box, set As and Cs routes to each other via the IPs on those subinterfaces, and do the shaping on those subinterfaces. Should work no problem. Or are you trying to put the linux box in between the switch and router? Then you'd have to talk dot1q to both devices and bridge each corresponding valn to each othter (e.g eth0.3 bridged with eth1.3) and do the shaping on those interfaces. That should also work. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] Htb on trunked line
Yah, A and C on different ip networks and also different vlan. It's only example, in the real test i use zebra with a lot of vlan interfaces and connect to some cisco switch. And discover that some networks in different vlan can't reach, when i try to see unreachable networks using arp, i found uncomplete arp from it. Until now i don't know why some vlans works fine but the others not.. :( I think it's because arp, may be need to wait for long time before arp get complete. I try this just for half an hour. - Original Message - From: Ryan Goldberg [EMAIL PROTECTED] To: Kristiadi Himawan [EMAIL PROTECTED] Cc: lartc [EMAIL PROTECTED] Sent: Thursday, October 02, 2003 6:02 AM Subject: Re: [LARTC] Htb on trunked line On Wed, 2003-10-01 at 15:39, Kristiadi Himawan wrote: About your first option to plug the linux box to the switch and create vlan interfaces on it, i have try that before and the result some network can't reach because of arp uncomplete. Are A and C on different IP networks? With routes to each other via the IPs on the subinterfaces on the linux box and they can arp for those IPs, I don't see where the arp issue would come from. And the second option to put linux box between router and switch is the better choice but i face new problem on it. I already create transparent bridge (using eth0 and eth1) on the linux box and it's work. But the problem occur when i try to shape the link using HTB or CBQ, the filter always miss. I will try your suggestion to bridge every vlan interfaces in the linux box. I hope this is the solution. Yeah we do this it works fine. That is, with a bridge per VLAN. If you want to share bandwidth amond the interfaces though, you need to set up IMQ, which I have not done. On Wed, 2003-10-01 at 13:41, Kristiadi Himawan wrote: Dear All, I have configuration like this : DVB Modem || ___Link A \ / trunk/ CiscoRouter CiscoSwitch---Link B \___Link C Ryan Goldberg wrote: Plug the linux box into the switch, set the link to dot1q, add subinterfaces on the linux box, set As and Cs routes to each other via the IPs on those subinterfaces, and do the shaping on those subinterfaces. Should work no problem. Or are you trying to put the linux box in between the switch and router? Then you'd have to talk dot1q to both devices and bridge each corresponding valn to each othter (e.g eth0.3 bridged with eth1.3) and do the shaping on those interfaces. That should also work. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Re: [LARTC] MSN Messenger automatically disconnects
I am running MSN Messenger v6 and also running HTB with traffic shaping. I'm not having any problems with Messenger. Do you have a firewall which might be interfering with your Messenger connection? WDW - Original Message - From: GoMi [EMAIL PROTECTED] To: 'lartc' [EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 6:23 PM Subject: [LARTC] MSN Messenger automatically disconnects -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am doing traffic shaping with HTB, and my msn messenger version 6 automatically disconnects every 5 minutes or so. Anyboyd had the same problem? I am driving myself mad. Thank you! -BEGIN PGP SIGNATURE- Version: PGP 8.0 iQA/AwUBP3tT3H7diNnrrZKsEQKtvgCgyDFKqKXfhWr/ESGMp6/n5ivDpBIAoPa6 BwDoMvpcalwTekHxcgwb1fy5 =VaRw -END PGP SIGNATURE- ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ ** * This message has been scanned by CityNET's email scanner for viruses and dangerous content * * and is believed to be clean. CityNET is proud to use MailScanner. For more information * * concerning MailScanner, visit http://www.mailscanner.info * ** ** * This message has been scanned by CityNET's email scanner for viruses and dangerous content * * and is believed to be clean. CityNET is proud to use MailScanner. For more information * * concerning MailScanner, visit http://www.mailscanner.info * ** ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
