Debian Configuration :: KVM / One Interface / Multiple IP Addresses
Dec 27, 2015
I'm renting a server which comes with 5 IP addresses, but only one network device. From what I can understand I'm able to create aliases by adding entries to /etc/networks/interfaces, I haven't tried I'm in the planning stages. Hypothetically, 192.168.22.30 is my primary IP and I want to set eth0:1 to have 192.168.22.31, and then after that I want to create a virtual machine (using kvm/qemu) that is able to communicate bidirectionally to the internet over eth0:1, and leave eth0 strictly for administrating (not for VM traffic).
The qemu guides I'm finding seem to assume that I want to use TAP or VDE, what I want to use is a sub-ip/alias. One guide I saw had me eliminate everything from eth0 and put it under br0. That would leave me unable to ssh into my server (and unable to administrate). Is there a way I can do something along the lines of: qemu [options] -net [option] -netdev=eth0:1 ?
View 1 Replies
ADVERTISEMENT
Apr 4, 2016
I am having some troubles using iptable rules on two Servers that act as Gateways pointed to one backend server with only one interface.
To be more exact, i have 3 Servers, 2 of those have a public and a private interface, with different public ips but common private interface ( they connect to the same switch ), the last one only has 1 private interface and is connected to that same switch.
Those 2 servers also act as a gateway and a firewall for the private network.
My problem is that i cannot seem able to route traffic from both of those to the third one and back to the same public ip that the request came from ( effectivly using two gateways on the machine with only one interface ).
As a testing scenario i am using ferm for applying iptable rules that forward ssh traffic ( for example ) to the backend server, and it works well when i do it with one gateway.
When i apply something like this in /etc/network/interfaces on the backend server though:
Code: Select allauto eth0:0 eth0:1
# The primary network interface
allow-hotplug eth0
iface eth0:1 inet static
address 192.168.9X.XXX
netmask 255.255.255.0
broadcast 192.168.9X.255
network 192.168.9X.0
[Code] ....
Even though forcing selection of an interface from the backend server ( like curl --interface ) seems to work well, meaning that the request to the curl appear to happen from the correct public ip, i can still only use one of the public ips to access the server with the ferm rules. Ideally i should be able to ssh to the backend server from both public ips using their ferm rules for forwarding traffic to the backend server.
I feel like i am missing some details on routing that should happen on the firewalls as the backend server seems to be able to use both gateways to access the internet and receive replies from it.
View 2 Replies
View Related
Jul 23, 2015
I want to configure multiple virtual ethernet interfaces over a single physical ethernet interface (eth0) and for each virtual interface the MAC address must be unique and the IP address must be Static.Finally all the virtual interfaces must be able to communicate both internally and externally and the traffic should be captured using wireshark.
I need to have such kind of setup to communicate devices individually using one physical ethernet device.
Because I was fiddling with few kernel modules like MACVLAN and MACVTAP and successfully enabled those modules and rebuild kernel. Using macvlan and macvtap I can configure virtual interfaces with unique mac address and static IPs but while capturing packets using wireshark interfaces behave weirdly.
For example say on HOST machine I have 1 physical interface and created 3 virtual interfaces as shown below.
Interfaces :
eth0 (physical ethernet interface)
IP: 192.168.A.A
MAC: aa:aa:aa:aa:aa:aa
[Code] ....
First from above interfaces I started pinging eth0 internally from host machine in which it worked as usually.
Second I did same externally from other machine which is connected to the same network of Host machine, and this did work as usually.
Third I pinged first virtual interface veth0 both internally and externally and this also works and after that I did check source and destination MAC address using wireshark tool-where both showed up there respective MAC address.
Now triggers the issue, where I pinged second virtual interface same like I did for first one, but this time ping was success and where as in wireshark tool the MAC address for veth0 is picked by veth1. This is where I got stuck and this issue happened for all the remaining virtual interfaces.
I couldn't see any virtual interface showing their respective MAC address, as of the remaining except the first virtual interface has been picking the first veth0 mac address.
View 5 Replies
View Related
Mar 31, 2011
I have a CentOS5 server with dual ethernet adapters + Webmin installed as my Router / Firewall / DHCP server working successfully with 1 static IP from my ISP. I also have 7 additional static IP addresses from my ISP needing to configure to individual servers inside my network. I have configured the additional virtual interfaces, but am lost on how to route data specifically from additional ISP address to specific internal network address.
Below is my desired configuration.
98.173.159.xx1 = eth0 physical interface ==> eth1 192.168.1.1
98.173.159.xx2 = eth0:1 virtual interface ==> 192.168.1.10 ==> CentOS Server 2
98.173.159.xx3 = eth0:2 virtual interface ==> 192.168.1.20 ==> CentOS Server 3
98.173.159.xx4 = eth0:3 virtual interface ==> 192.168.1.30 ==> CentOS Server 4
98.173.159.xx5 = eth0:4 virtual interface ==> 192.168.1.40 ==> Mac OS X Server 1
98.173.159.xx6 = eth0:5 virtual interface ==> 192.168.1.50 ==> Mac OS X Server 1
98.173.159.xx7 = eth0:6 virtual interface ==> 192.168.1.60 ==> Network Attached Storage Server 1
98.173.159.xx8 = eth0:7 virtual interface ==> 192.168.1.70 ==> Windows 2008 Server 1
View 2 Replies
View Related
Jun 17, 2010
I am working on a Debian 2.6.26-19 Distribution with exim4 as MTA. After a system restart a problem occurred with delivering emails to local addresses. These local addresses use a 1and1 mailserver for email. The MX records for the local domain are set correctly but exim does not use a DNS lookup for these addresses because it identifies them as local addresses. I figured this out by executing the exim4 -d -bt command. The dns lookup part of the result looks like this (I replaced the actual address with placeholders):
[Code]....
The eventual result of the exim4 -d -bt command is: [user]@[domain.ext] is undeliverable: Unrouteable address How can I make sure, that exim4 makes a DNS lookup for the local addresses instead of skipping it? I know that I have to edit a exim4 configuration file, but I could not figure out which and how.
View 1 Replies
View Related
Dec 21, 2010
Related to my last post in that it is another email issue, but something else I am having a problem with.
Debian Lenny on virtual KVM (32-bit, v5.0.7)
With Postfix it is necessary to have an alias for root, eg: root: someuser
In theory, and as far as I am aware, this can also be something like: root: someone@someaddress.tld
When I use the latter, though, the following happens whenever my system tries to redirect root email messages, but not when I use the root: someuser method in the aliases file (and, yes, I do know to use newaliases after amending the file).
The firewall is not an issue (tested with and without the firewall), nor are the resolvers, and the DNS for accounts on the box is all okay and fully propagated. Also, changing the email address to something like this.address@google.com does not work, either, - same error message.
View 2 Replies
View Related
Jun 6, 2011
Debian Testing host, Winduhs XP guest. Winduhs is not allowed to directly access The Internets, and I am not setting up bridging as that makes it possible for the guest to mount layer 2 attacks on the LAN. I need for the guest to tunnel through the host without being able to see anything on the host, so it can then get access to The Internets, while being protected by iptables (Shorewall).
Used to be with VMware I had host-only set and the guest in a different class c (192.168.2.1) from the host (192.168.1.1) I turned on ipforwarding, set Shorewall rules, and it all worked. Now I have everything set with VirtualBox, and it does not work. Guest can ping its interface but not host. Host can ping vboxnet0. Host is supposed to masquerade guest's 192.168.2.1 through to the default out at 192.168.1.1, but it's not. I think a clue is in routing, but I don't know what's wrong.
[code]....
View 2 Replies
View Related
Apr 14, 2010
The subject has the big question. I've read answers both ways.The kernel has documentation that says the IP addresses belong to the system. Yet the configuration works as though they belong to the interface.Shouldn't we have it just one way and stick with it ... and make everything work that way?
If IP addresses truly belong to the system, then a command to configure an IP address should not need (and not even accept) the name of an interface. The only exceptions would be link-local addresses (which by their nature do suggest being interface specific ... and they should be autoconfigured by the kernel, anyway). Interfaces would only need to be brought up or down.
View 14 Replies
View Related
Jan 31, 2016
Is is possible, via iptables or something similar, to bind a service running on a specific port to a specific interface? My case: I use a VPN service for privacy. I would like to have all traffic except ftp and ssh to run over tun0. Ports 21 and 22 will need to be accessible to the outside world (eth0) while the VPN is running.
View 3 Replies
View Related
Apr 3, 2010
I'm facing a strange networking problem here. I'm running Debian Lenny in an OpenVZ container and my network setup is as follows:
link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
[code]...
View 4 Replies
View Related
Apr 18, 2010
After updating and subsequently restarting today, I can no longer bring up my wireless interface:
ifup wlan0
SIOCSIFFLAGS: Unknown error 132
Could not set interface 'wlan0' UP
SIOCSIFFLAGS: Unknown error 132
SIOCSIFFLAGS: Unknown error 132
Failed to bring up wlan0
iwconfig
lo no wireless extensions.
eth0 no wireless extensions.
wlan0IEEE 802.11abg ESSID: off/any
Mode: Managed Access Point: Not-AssociatedTx-Power=off
Retry long limit:7RTS thr: offFragment thr:off
Encryption key:off
Power Management:off
lsmod | grep iwl
iwl3945 77904 0
iwlcore127432 1 iwl3945
mac80211 180929 2 iwl3945, iwlcore
cfg80211 142905 3 iwl3945, iwlcore, mac80211
View 1 Replies
View Related
Jan 29, 2011
Suppose I have both a hardwired and a wireless network connection active on the same system at the same time. Can I tell my browser which one to use? Can I tell other programs which one to use? Or do they choose for themselves> Or does some automatic system protocol select which one to use for them?
View 5 Replies
View Related
Mar 15, 2016
Is this a problem of systemd or network-manager however when I started to see this alert I noticed the nm-applet doesn't start automatically anymore.
Code: Select allsystemctl status network
networking.service network-online.target network.target
network-manager.service network-pre.target
zagor@Debian-635:~$ systemctl status networking.service
● networking.service - Raise network interfaces
Loaded: loaded (/lib/systemd/system/networking.service; enabled; vendor prese
[Code] ....
View 5 Replies
View Related
Apr 30, 2010
I tried installing the driver following the instructions in the link given below.
viewtopic.php?t=7949
But now also its now working either. After installing the outputs are given below.
[Code].....
View 7 Replies
View Related
May 25, 2011
i am wanting to turn my Debian box into a wireless AP, but for some unknown reason the wireless card won't switch into master mode when i run the command #iwconfig wlan1 mode master i get this Error for wireless request "Set Mode" (8B06): SET failed on device wlan1 ; Invalid argument. what does this mean and what do i need to configure/install to get it to work my wirless card is supported i checked it's a zydas chipset using the zd1211rw driver SMC EZ Connect SMCWUSB-G [URL]
View 14 Replies
View Related
Jul 27, 2011
I have a ppp0 entry with post-up options like this
mapping ppp0
map none photon-plus motorola
map timeout: 12
## map init-time: 12 # for slow drivers
[code]...
If I comment those off then no such problem, hence some how ppp0 executed automatically and there is no [auto ppp0] any where. How can I stop this forcefully ?
View 2 Replies
View Related
Jul 30, 2011
I am running Debian Squeeze on an old pc (AMD K62-500) which serves as my multiwan router and torrent box. Internet uplink is provided via a dsl line and 2 wireless canopy modules.
Setup has been generally fine except when connecting/downloading as free user from sites like rapidshare, hotfile, filesonic, etc. The problem arises when I am connected to these sites using the wireless uplinks because of the shared public ip. I don't really download that much using direct download methods so I don't really see myself being a premium user from these sites.
If these sites are on a specific ip or ip range, an entry on the static routing table would have been fine but when I tried using ping, a different ip would appear to reply each time.
I wonder if there can be a solution like using iptables where in traffic to and from these sites will only use the NIC connected to the dsl line.
View 1 Replies
View Related
Dec 9, 2010
I have been trying to get my wireless interface work but i am unable to find a driver for the wireless interface.
View 1 Replies
View Related
Mar 8, 2010
My Linux gateway has multiple address to internet:
eth0 = 76.148.200.3
eth0:0 = 76.148.200.4
eth0:1 = 76.148.200.5
and it's own gateway which is 76.148.200.2 (probably not relevant) and I also have which is not internet, but local:
eth0:2 = 192.168.0.1 netmask 255.255.255.0
They all work fine and tested. Now I am sharing the internet through eth0 (76.148.200.3) to 192.168.0.1/24 and that's working fine. The script I use to do that is here...
Code:
#!/bin/sh
echo 1 >/proc/sys/net/ipv4/ip_forward
echo 1 >/proc/sys/net/ipv4/ip_dynaddr
iptables -t nat --flush
iptables -A FORWARD -i eth0 -d 192.168.0.1/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 192.168.0.1/24 -o eth0 -j ACCEPT
iptables -A FORWARD -j LOG
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
Now all I want to change in the script is to share it through 76.148.200.4 (eth0:1) instead of what is already sharing through 76.148.200.3 (eth0). I am sure this is easy but can't work it out and iptables doesn't accept 'aliases'. How I can do this by modifying this script?
View 5 Replies
View Related
Jan 26, 2011
I have a Debian server that had only one onboard NIC (1000 Gbps) but now I've added two PCI Intel Pro 1000 NIC's into the system to bump up the total # of NIC's to three. My question now is can I specifically assign or force Debian which interface to configure as ethx? I would always like my onboard NIC to be 'eth0' and the two additional NIC's to be 'eth1' and 'eth2'. For some reason Debian loads the modules at random and sometimes what was my
View 2 Replies
View Related
Dec 29, 2010
Is there a way to configure apt to use different proxies for different repository servers?
View 1 Replies
View Related
Jul 23, 2011
I want to set multiple IP addresses onto my server and I can then put under an alias.
But is it possible to somehow create a script in perl example that can do this for or is it only possible manually?
View 1 Replies
View Related
Jan 27, 2010
I have run into a problem that I've tracked down to being a conflict between the "Upstart" init system, and how it handles multiple (alias) IP addresses per physical interface. The summary of the problem is that the interfaces are being configured in the background in parallel with the starting of daemons. One "feature" of this (apparently intended for pluggable devices that would add or remove an interface) is that the network daemons are restarted each time an interface is added (and presumably deleted). But this is a disaster when applied to alias IP addresses.
I first saw the effects of this when during booting Ubuntu Server, the screen showed a message about OpenSSH daemon being restarted ... several times a few seconds apart each. At the time I didn't know what was causing that, but didn't worry because it ultimately was running when I needed it.
But now that I am deploying these servers for specific duty with many IP addresses per system (per network interface), the symptoms are becoming serious, and I need a solution.
1. The IP addresses are coming online too slowly. Apparently the time it takes to restart each daemon is being added to each address being configured.
2. It appears to be disrupting some daemons sometimes. Occaisionally, some daemon just ends up being hung somewhere, or dies. Too many restarts.
3. Sometimes few or even no alias addresses get configured. This might be due to a daemon getting hung, and the whole sequence just not finishing.
4. The "nsd" name server as packaged by Ubuntu doesn't deal well with this at all. It needs all its IP addresses to be up when it starts, or else it won't start. The Ubuntu package of it doesn't including any if-up script at all, although I'm not sure that would do any good.
What I need is a way to configure all these alias IP addresses so they are all configured immediately when the point in time is reached to bring up network interfaces for the first time. These are all static, and all are aliases on ethernet NIC cards plugged into PCIe cards, or integrated in the mainboard. None of them are pluggables. I did run a manual test of "ifconfig" in a loop configuring 2540 alias IP address on eth0 and it only took 2 seconds (no if-up triggers or daemon restarts here). So I know it's fast if nothing else is done between these steps.
Even for pluggable physical interfaces, I see no reason to even try to step through every alias (if it has aliases) with a daemon restart. If an alias IP address is added on later, then I can understand doing it. But if you have a list of 100 aliases for a physical interface, they really should all be done ... or at least attempted ... at once, and do any triggers needed after that.
So, how can I configure or modify Ubuntu Server 9.10 to do that?
I have each alias listed in the "/etc/network/interfaces" file with a separate "auto" and "iface" section for each one, with sequential sub-interface numbers appended to the interface name. I tried it without those sections (e.g. just "address" and other items in sequence) and that prevents the system from even coming up (bootable CD to the rescue to undo that). At least cntrl-alt-del did reboot it.
I tried to attach the /etc/network/interfaces file, but I don't know if it worked because I see no confirmations about it. if it didn't attach and you need to see it, say so, and I'll just paste it in a followup.
View 2 Replies
View Related
Apr 17, 2011
I set-up his mail server for him with Postfix but what he wants I have no idea how to do.
Essentially he wants it so that the mail gateway IP corresponds with the dedicated IP of the domain and I have no idea how to accomplish this.
I found some documentation on the web saying that the fix for this was to run multiple instances of Postfix which I tried doing but each time I try to start the second instance I get the error that postfix is already running.
There has to be an elegant way to make this happen, I really hate to tell a client something can't be done even though the concept is a bit pointless, IMHO. I am hoping I can get some feedback here on if this can be done and if it can the easiest way for me to accomplish doing it.
Here is some of the config files (example.com has been put in place of the actual domain names and the ip of 5.5.5.5 is in place of the actual IPs
Code:
[root@youronlinehosting ~]# cat /etc/postfix/transport
example.com smtp:5.5.5.5
example.com smtp:5.5.5.6
example.com smtp:5.5.5.7
[Code].....
View 1 Replies
View Related
Feb 7, 2016
I'm trying to setup a DHCP server that serves several different VLANs, we have 5 in total. Our network is working correctly, with static IPs, we're able to ping across without any issues.
When I connect my debian box to an interface on VLAN5, statically assign an address in the correct range, it works. Similarly with all other VLANs.
To configure this box as a DHCP, I set one of the ports on the switch as trunk, connect that to the debian box to allow all VLAN traffic to reach my debian box.
I setup DHCP following the steps on [URL] ....
Then I configured different VLANs by following the steps on [URL] .....
However, with the vlans setup, I am unable to ping anything. This is essentially what I did.
Code: Select allSet the port on the switch to trunk with 802.1 encapsulation
disable eth0
vconfig add eth0 5 # to add vlan 5
ifconfig eth0.5 192.168.5.254 netmask 255.255.255.0 up
vconfig add eth0 5 # to add vlan 10
ifconfig eth0.5 192.168.10.254 netmask 255.255.255.0 up
[Code] ....
I do not know why I am unable to get any connectivity through my VLAN interfaces.
View 2 Replies
View Related
Aug 15, 2010
I was wondering if/how it would be possible to compile a kernel package where two featuresets are applied. I notice that xen-vserver seems to have been done and wanted to make a xen-openvz kernel if possible to use VZ containers in a Xen DomU. I've tried reading the metadata files in the debian/ dir of the kernel source but there seems to be a lot "going on" and I couldn't make much sense of it...
View 1 Replies
View Related
Jun 12, 2011
I have a laptop running Debian Squeeze that has one wifi nic - wlan0. The ethernet nic eth0 is faulty.I have configured /etc/network/interfaces to enable wlan0 to access my home wireless LAN. The SSID for this connection is wlan1 and the security used is WPA2.A second SSID configured for the wireless LAN is wlan2 and the security used on this second SSID is WPA.Is it possible to configure wifi networking on this laptop to be able to connect to this wifi network using either SSID - wlan1 or wlan2 - via the laptop's sole network interface, wlan0?
View 12 Replies
View Related
Jul 27, 2011
I have several mails which I want to scan by using spamc and thats the problem.
It works when I use just one mail message as a parameter of spamc. E.g. spamc -c < 17383. BUT when I want to pass several messages on spamc e.g. spamc -c < 17383. 18974.(spamc scan just the first message) OR when I use a whole directory e.g. spamc < ./test/* it doesnt work. (output: -bash: ./test/*: ambiguous redirect)
how to pass multiple files in command line on spamc? I know - I can create a script, but I would be glad if it worked for testing in CLI (command above).
View 1 Replies
View Related
May 6, 2010
I have 4 Ethernet Interfaces. I need Dynamic IP-Addresses for 2 Interfaces. Can anybody help me how can i achieve that
View 3 Replies
View Related
Sep 6, 2010
Ive been trying to give certain clients an IP adres by mac adress. For this I use the folowing code:
host apex {
hardware ethernet 00:00:00:00:00:00;
fixed-address 192.168.250.100;
}
This works perfectly, however when I try to add a second client this way it doesnt. I tried to add the above code multiple times as a whole (2 times the above code) but that doesnt work. I also tried to just add more lines under host apex but this also doesnt work.
So my question is: How do I add more of this mac related IP adress assignments in the dhcp.conf?
View 1 Replies
View Related
