Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1
OK, do you have the firewall on or off now? What happens if you try to turn the firewall on with the new settings (all interfaces in the internal zone)? By the way - excuse me for the silly question, but is it at all possible that you might have a conflicting IP address? (another server on the network with the same IP address which does not support SSH) Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Thursday, July 15, 2010 12:39 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 Ok, I have tried that now, had to be sure how to turn of firewall first via VM console in case of no net at all. No change, but now I get messages in the log (messages file) with 'kernel: martian source my login ip not working from my PC ip address, on dev eth0' (or 1) martian source means a source IP that is not possible together with other ipconfig ( I have done some googling here ), so the kernel just refuse it. But I don't get the reason here, it is not an 'impossible' source IP here. I keep digging/googling /Tore ___ Tore Agblad Volvo Information Technology Infrastructure Mainframe Design Development, Linux servers Dept 4352 DA1S SE-405 08, Gothenburg Sweden Telephone: +46-31-3233569 E-mail: tore.agb...@volvo.com http://www.volvo.com/volvoit/global/en-gb/ -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Amir Glaser Sent: den 14 juli 2010 12:54 To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 I've noticed that sometimes in various version of SuSE it is not enough to turn the firewall off. For some unknown reason (I haven't had the time to look deeper into it), when you have several interfaces you have to add them all to the internal zone, and only then turn the firewall off (or keep it on if you wish). I'm not sure this issue still exists in SLES11 (as I've said - I haven't had the time to fully investigate this), but I definitely experienced this on SLES9 and SLES10. Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Tuesday, July 13, 2010 4:21 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 Yes , we took the easy way and turned the firewall off. No luck :( My current suspicions is that somewhere a config default value specify that if two interfaces, use one as current and the other as backup Haven't verified that one yet, for the moment I'm preparing to clone a new server in our ip zone to verify it doesn't work here as well. Thank's anyway :) ___ Tore Agblad Volvo Information Technology Infrastructure Mainframe Design Development, Linux servers Dept 4352 DA1S SE-405 08, Gothenburg Sweden Telephone: +46-31-3233569 E-mail: tore.agb...@volvo.com http://www.volvo.com/volvoit/global/en-gb/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 9.0.830 / Virus Database: 271.1.1/3006 - Release Date: 07/15/10 05:26:00 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1
Hi, I'm guessing you meant internal zone and not external zone? Another question - is there ping to the other interfaces? Do you get the same Martian Source messages when you attempt to ping as well? The fact that you're getting something (the Martian Source message) when trying to access the other interfaces, tells me that there's nothing wrong with the routing/ARP lookup/etc. but rather something internal to the Linux - this is why I'm pursuing the firewall issue. Steffen's idea also makes sense because all your interfaces are on the same IP segement. Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Thursday, July 15, 2010 2:16 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 I tried with firewall on and off, and with all interfaces in external zone, fw on and off. No ip conflict I assume since we can influence what NIC to be active, all of them works but only one at a time :( and that is not a silly question, my experince is that often the error is to simple ! meaning somebody did not ask those silly questions I think I go for that 'martian source' message. Obviously this is the reason the ssh login is refused, I just have figure out why. Since we use Layer3 network here, we know that MACaddress as seen from outside is the same for all three NICs, that might be the reason it is considered an impossible source ip address. Hmm Cordialement / Vriendelijke Groeten / Best Regards / Med Vänliga Hälsningar Tore Agblad Volvo Information Technology Infrastructure Mainframe Design Development SE-405 08, Gothenburg Sweden E-mail: tore.agb...@volvo.com http://www.volvo.com/volvoit/global/en-gb/ From: Linux on 390 Port [linux-...@vm.marist.edu] On Behalf Of Amir Glaser [a...@csl-int.com] Sent: Thursday, July 15, 2010 13:11 To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 OK, do you have the firewall on or off now? What happens if you try to turn the firewall on with the new settings (all interfaces in the internal zone)? By the way - excuse me for the silly question, but is it at all possible that you might have a conflicting IP address? (another server on the network with the same IP address which does not support SSH) Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Thursday, July 15, 2010 12:39 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 Ok, I have tried that now, had to be sure how to turn of firewall first via VM console in case of no net at all. No change, but now I get messages in the log (messages file) with 'kernel: martian source my login ip not working from my PC ip address, on dev eth0' (or 1) martian source means a source IP that is not possible together with other ipconfig ( I have done some googling here ), so the kernel just refuse it. But I don't get the reason here, it is not an 'impossible' source IP here. I keep digging/googling /Tore ___ Tore Agblad Volvo Information Technology Infrastructure Mainframe Design Development, Linux servers Dept 4352 DA1S SE-405 08, Gothenburg Sweden Telephone: +46-31-3233569 E-mail: tore.agb...@volvo.com http://www.volvo.com/volvoit/global/en-gb/ -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Amir Glaser Sent: den 14 juli 2010 12:54 To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 I've noticed that sometimes in various version of SuSE it is not enough to turn the firewall off. For some unknown reason (I haven't had the time to look deeper into it), when you have several interfaces you have to add them all to the internal zone, and only then turn the firewall off (or keep it on if you wish). I'm not sure this issue still exists in SLES11 (as I've said - I haven't had the time to fully investigate this), but I definitely experienced this on SLES9 and SLES10. Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Tuesday, July 13, 2010 4:21 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 Yes , we took the easy way and turned the firewall off. No luck :( My current suspicions is that somewhere a config default value specify
Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1
I've noticed that sometimes in various version of SuSE it is not enough to turn the firewall off. For some unknown reason (I haven't had the time to look deeper into it), when you have several interfaces you have to add them all to the internal zone, and only then turn the firewall off (or keep it on if you wish). I'm not sure this issue still exists in SLES11 (as I've said - I haven't had the time to fully investigate this), but I definitely experienced this on SLES9 and SLES10. Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Tuesday, July 13, 2010 4:21 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 Yes , we took the easy way and turned the firewall off. No luck :( My current suspicions is that somewhere a config default value specify that if two interfaces, use one as current and the other as backup Haven't verified that one yet, for the moment I'm preparing to clone a new server in our ip zone to verify it doesn't work here as well. Thank's anyway :) ___ Tore Agblad Volvo Information Technology Infrastructure Mainframe Design Development, Linux servers Dept 4352 DA1S SE-405 08, Gothenburg Sweden Telephone: +46-31-3233569 E-mail: tore.agb...@volvo.com http://www.volvo.com/volvoit/global/en-gb/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1
Hi, Have you tried looking in the local firewall definitions (via Yast - Security - firewall)? Sometimes SLES11 tends to stick the new interface in the External Zone and therefore SSH access is prohibited. Thanks, Amir Glaser CSL-WAVE Development MGR Tel: +972 9 9540470, ext. 105 www.csl-int.com Fax: +972 9 9541452 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Agblad Tore Sent: Monday, July 12, 2010 3:58 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Strange problems adding network adapter no 2 (eth1) in SLES11 SP1 Hi again. I'm in contact with a network person here and is trying to explain what's it all about. He is somewaht confused and he says the problem is in VIO. Is there anybody else having had this problem and succeeded in explain what to do ? We have a SLES10 maxhine with three network adapters and that works fine, but that is not in the same zone. The firewall hardwre and software is the same but obviously something differ here. Can I add the MACID statement for the NICDEFs and try that ? Do I need to fix that VMLAN MACPREFIX, or make sure it is set? Hmm, I have to dig into some manuals here it seams Cordialement / Vriendelijke Groeten / Best Regards / Med Vänliga Hälsningar Tore Agblad Volvo Information Technology Infrastructure Mainframe Design Development SE-405 08, Gothenburg Sweden E-mail: tore.agb...@volvo.com http://www.volvo.com/volvoit/global/en-gb/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Workload move from z/OS to z/Linux
Hi, I would think that WebSphere for example is a great candidate. Installation of WebSphere on the zOS is very cumbersome, while on linux it's very easy. The only draw back to this is if you have ZAAPs on your machine. I don't think that zLinux currently dispatches Java workload on ZAAP. Amir Glaser zSeries Operating Systems and Communication Expert CSL Interntional LTD Office +972-9-9540470 ext 105 Mobile +972-54-2254100 FAX +972-9-9540470 www.csl-int.com -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Mark Post Sent: Wednesday, January 30, 2008 5:39 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Workload move from z/OS to z/Linux On Tue, Jan 29, 2008 at 7:45 PM, in message [EMAIL PROTECTED], Alan Ackerman [EMAIL PROTECTED] wrote: I have been asked by my management to find workloads that we can move from z/OS to Linux on zSeries. The idea is to take advantage of the lower prices IBM charges for IFL engines as opposed to standard engines. Has anyone done this? If so, what workloads and/or products are good candidates for such a move? In your case, you're limited by what you're already running on your z/OS system(s) (or might be planning on running). The usual caveats don't necessarily apply here, since the workload is already on the mainframe. Find the biggest CPU hog you've got, that has an analog for Linux on System z, and go with it. You'll get the most reduction in z/OS cycles that way. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.16/1250 - Release Date: 1/29/2008 10:20 PM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.16/1250 - Release Date: 1/29/2008 10:20 PM -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Workload move from z/OS to z/Linux
I would think it's a question of demand. I think that if IBM sees a significant increase in zLinux use, they might support it in the future. Obviously (to me at least), the pricing of the IFLs is commensurate with the demand for them, so there might be a time where IFLs could be the equivalents of regular CPs today, and then IBM might decide to support ZAAPs and ZIIPs in zLinux. Amir Glaser zSeries Operating Systems and Communication Expert CSL Interntional LTD Office +972-9-9540470 ext 105 Mobile +972-54-2254100 FAX +972-9-9540470 www.csl-int.com -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Wednesday, January 30, 2008 8:50 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Workload move from z/OS to z/Linux On Wednesday, 01/30/2008 at 01:31 EST, Amir Glaser [EMAIL PROTECTED] wrote: I would think that WebSphere for example is a great candidate. Installation of WebSphere on the zOS is very cumbersome, while on linux it's very easy. The only draw back to this is if you have ZAAPs on your machine. I don't think that zLinux currently dispatches Java workload on ZAAP. No, Linux doesn't dispatch work on zAAPs, and I don't expect it ever will. zIIPs and zAAPs are engines specifically created to help z/OS pricing. Linux runs on IFLs. Alan Altmark z/VM Development IBM Endicott -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.16/1250 - Release Date: 1/29/2008 10:20 PM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.16/1250 - Release Date: 1/29/2008 10:20 PM -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Appology
Hi guys, I apologize profusely to anyone who has been offended by my last Email. In retrospect maybe it was a little to ad-y for this forum. My intentions were simply to arouse awareness to the fact that something like this exists. If this was perceived differently, I apologize. Friends again? Amir Glaser No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.13/1246 - Release Date: 1/27/2008 6:39 PM -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
CSL-WAVE
Hello all, I wanted to take this opportunity and forum to ask if any of you heard about a new product named WAVE. WAVE (or Web Administration of VM Environment) is a new product from CSL International, which enables the zLinux administrator as well as the zVM System Programmer to view and interact with the VM in a very simple and intuitive way. The product is based on a very strong and durable GUI engine, and simplifies most zLinux oriented zVM administrative tasks (Cloning zLinux users, connecting/disconnecting from Guest LANs, adding storage and much more). Please feel very free to contact me for mote information at [EMAIL PROTECTED] Also, you are more than welcome to visit our website www.csl-int.com. CSL Interntional LTD Office +972-9-9540470 ext 105 Mobile +972-54-2254100 FAX +972-9-9540470 HYPERLINK http://www.csl-int.comwww.csl-int.com No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.12/1245 - Release Date: 1/26/2008 3:45 PM -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
