I'm using Fedora 9 and has finished the DHCP for my eth2 and static on eth0. I would like to add a route so that the 192.168.22.x eth0 and 192.168.26.x eth2 can communicate to each others,.
View 3 RepliesI have 3 network interfaces on my Linux Router :
Interface - Gateway - Type
Code:
br0 - 192.168.0.1 - Internet
eth2 - 192.168.1.1 - LAN
tun0 - 10.0.0.2 - VPN (via br0)
What I'd like to do is to route all TCP packets coming from eth2 to tun0 where a VPN client is running on 10.0.0.2. If I delete all default routes and if I add a new route to tun0 like :
Code:
route del default
route add default gw 10.0.0.2
Everything is fine, and everyone on eth2 can reach the Internet using the VPN access. Now the problem is that my VPN client does not allow any other protocols other than TCP. And I also want to allow VPN access only to eth2, no other LAN nor the router itself. use iptables to filter any TCP packets and mark them, so they can be sent to tun0, while any other packets can reach the Internet via br0 (192.168.0.1). I found on the Internet that we can mark packets before they get routed. Using the following commands :
Code:
iptables -t mangle -A PREROUTING -j MARK --set-mark 85 -i eth2 -p tcp --dport 80
ip route add table 300 default via 10.0.0.2 dev tun0
ip rule add fwmark 0x55 table 300
First of all, --dport 80 never work... :/ I wanted to filter TCP 80 packets coming from eth2, but none of them seems to be HTTP packets... oO (very strange...). Nevermind, I decided to forget about the --dport option. I use the "iptables -L -v -t mangle" command to see how many packets are marked, and it is working fine, all TCP packets coming from eth2 are marked. Now the problem is that none of them are routed to tun0 they are all respecting the "route -n" rules... and not the "table 300" rule I have created.
I would like to add a static route, however I do not understand what is meant by the Address setting below
GATEWAY2=10.241.58.62
NETMASK2=255.255.255.224
ADDRESS2=10.241.57.32
Does this mean any addresses beginning with 10.241.57.32 are routed over the gateway 10.241.58.62 an address range
I got this definition:"a process that replaces a series of related, specific routes in a route table with a more generic route." honestly I found it not so clear.. I want to know if this definition is correct and also more details about this subject..
View 1 Replies View RelatedHaving trouble getting my Netgear WNA1000 working thru wireless router. Have tried lots of suggestions from other threads to no avail. Someone suggested that th routing table isn't set correctly, so have been trying to use the follwing to make the proper entry in the routing table: sudo route add -net 192.168.0.1 netmask 255.255.255.0 dev wlan0
Result: error message stating with:
"route: netmask does not match route address"
followed by "Usage" instructions which tell me to do what I just did. Any ideas on how I can populate my routing table with correct entry for my wireless card? Not to complicate matters, but I temporarily turned off encryption on my router to eliminate that as a possibility until I get connected. So maybe it'still trying to connect via encrypted mode - do I need to turn off encryption on my (client) end?
How can I get two ip addresses to communicate with each other which are not in the same 255 range?
Like:
192.168.0.1
and
192.168.1.1
I am testing with Suse Linux Enterprise Server 10 in a VMWare environment. I've installed two SLES10 servers, named sles1 and sles2. I can't get the two servers to communicate, even a simple ping won't work. The "Network Adapter" in VMWare is set to "bridged", a setting which has worked fine when installing WinXP in VMWare and connecting to the Internet.Even if I ping sles1 from sles1 (= "pinging myself"), I get the same error message.Only if I ping localhost, I get a proper ping result.What did I do wrong? Did I forget to configure something?
View 2 Replies View RelatedI downloaded and installed a new copy of Fedora 11 last week onto a new computer (hereafter "proximate"). I also have a remote computer without a monitor running an outdated version of Red Hat Linux (hereafter "remote"). To manage the processes on remote graphically, I ssh from proximate into remote; this connection succeeds without incident in transmitting text (including commands) between the two computers; however, the command "gnome-session" returns: (gnome-session:15789): Gtk-WARNING **: cannot open display:
(The numbers apparently represent the process identifier and vary from instance to instance.) A similar warning (and no accompanying graphics) occurs whenever I attempt to start any graphical user interface from remote via ssh from proximate. The issue almost certainly lies with proximate; remote successfully communicated graphics to the ancient box that proximate replaces.
Interestingly, I cannot communicate via ssh from remote to proximate (within a secure shell from proximate to remote). If I execute /usr/sbin/sshd on proximate as root, then I can login, but even then I cannot execute any commands.
Consider the following output:
If I execute ssh -vvv proximate from remote to proximate, then I get a lengthy output that ultimately ends with "debug1: Exit status 254."
What must I do to communicate both text and graphics among my computers?
I have two computers...Ubuntu server and Windows XP client. Both are connected to the internet using Ethernet. I have them connected directly using 1394 to increase speed of large transfers. The internet network and 1394 have different IP address scemes. Internet 192.168... 1394 10.0.0...
I am having problems getting the two computers to communicate with each other. I can ping the server's ip address and and it loops back. Same with the XP's IP address. I can't ping each other.
ifconfig shows my eth0 and eth1 connections are up. The eth1 Link Encap says UNSPEC.(Don't know if that means anything.)
Chili555 where are you?
I am running Ubuntu Release 10.04 (lucid), Kernel Linux 2.6.32-26-generic-pae, GNOME 2.30.2.
I have installed the ASUS USB-N13 according to your advice in previous posts, specifically, in your advice to 828688 Ben.
The dongle seems to be operating as it should. The LED does its flashing at what appears to be the correct time. Wicd also looks correct. Networks are found with good signals shown. Everything looks correct. But when I attempt to connect, "validating authentication" runs for quite some time, and eventually results in a dialogue window stating the communication failed. The required WEP password is entered in the RT2870STA.dat file, and again in the wicd window.
I have entered as much detail in the RT2870STA.dat file as I dare, and believe it to be correct.
ndiswrapper is not installed. Network Manager is uninstalled. Only wicd remains.
I am trying to set up an NIS client on a Fedora Core 12 64-bit system. The ypbind daemon is running via the /etc/init.d/ypbind script. However, whenever I run the ypwhich command, the following error message appears on-screen:
[code]...
The client has been configured so the domain is set, and the client will broadcast for the first available nis server. The client is on a subnet where there is one nis slave server, so it should bind to that server. One thought that came to mind was the fact the client in question is 64-bit, while the nis slave is 32-bit. Could that cause this problem?
I am testing with Suse Linux Enterprise Server 10 in a VMWare environment. I've installed two SLES10 servers, named sles1 and sles2. I can't get the two servers to communicate, even a simple ping won't work. The "Network Adapter" in VMWare is set to "bridged", a setting which has worked fine when installing WinXP in VMWare and connecting to the Internet. I have configured the Network Settings as follows:
SLES1:
-Statically assigned IP Address
-IP-address: 192.168.0.20
-Subnet: 255.255.255.0 (/24)
-Hostname: sles1
Hostname/DNS tab:
-Hostname: sles1
-Domain Name: local
-Name server: blank
Routing tab:
-Default Gateway: 192.168.0.1 (= my router connected to the Internet)
SLES2: same as sles1, with IP 192.168.0.22 and Hostname sles2
With these network settings, the two servers seem totally unable to communciate.
-When I ping sles2 from sles1, I always get the error message: connect: Network is unreachable
-Whatever way I ping, either ping sles2, ping sles2.local, ping 192.168.0.22, whatever, the error message is always the same.
-Even if I ping sles1 from sles1 (= "pinging myself"), I get the same error message.
-Only if I ping localhost, I get a proper ping result.
given my computer is in a network consisting of multiple subnetworks, i.e. there are groups of computers: {192.168.1.1, 192.168.1.2, 192.168.1.3 etc.}, {192.168.2.1, 192.168.2.2, 192.168.2.3 etc.},..., {192.168.254.1, 192.168.254.2, 192.168.254.3 etc.}. My computer is 192.168.1.1. So I can communicate with 192.168.1.2, 192.168.1.3 etc. To communicate with other people I have manually switch to the proper subnetwork and take a new ip, e.g. 192.168.2.1. My question is: Is there any way to be member of all groups and communicate simultaneously with ALL computers? And if not, is there a way to find out (without manually changing the ip address) if computers of other subnetworks are online, so one does not have to change the ip and then look for other computers in the new subnetwork?
View 3 Replies View RelatedOne problem has led to another.. I had notebook version 9.10 and it worked OK. I Downloaded 10.04 onto USB and all seemed fine. After upgrade - disaster. I have as Asus Eee PC901.
1. I am in Italy and bought a TIM USB mobile broadband modem - Ubuntu can see the device but nothing happens except a bizzare message with no information at all 'Unable to Open Archive'. I have no idea what that meant nor what I should do to resolve whatever it is, so I went back to my older USB modem which worked under 9.10 - Now even that device does nothing.
2. as a result, Ubuntu software centre does not work, Synaptic Package manager is the same; also update manager.
3. Limited communications are available via the university wireless network. That network requires me to work through their own proxy;port address (with username and password) which I have set up using proxy manager including the username and password. This allows me to carry out web surfing and point to point downloads.
4. Firefox works fine, and it obeys the requirements for registering with the proxy. Thunderbird, evolution, Synaptic, Update manager, Software centre etc all fail because they failed to authenticate with the proxy. They all have been set up to use system proxy. (Also tried direct proxy address;port in each package but no go)
5. The ultimate frustration has come from the direct download of Skype (.deb). Double click and it starts to install then crashes because of numerous dependencies (things like libqtgui4).
I have been trying to set up a network bridge for the 2 virtual machines installed on my Fedora 14 host PC. I want the VM's to be able to ping each other and have their own "network" in which they can operate/communicate. What is the simplest way to accomplish this? Most of what I have read revolves around turning off NetworkManager, and the following config files:
[code]...
Once these files are configured and the network is restarted, the bridge should work. Is this true? I have been encountering problems with this process, specifically when I try to link a VM to a bridge.
My necat (nc) doesn't listen! It means when I write "nc -l 3333", I can't communicate data with "nc 127.0.0.1 3333" in another terminal! Also after writing "nc -l 333", I don't see port 333 between the ports which are listening, by "netstat -ln | grep 3333".
View 1 Replies View RelatedI have a server in the office and when I need to connect via cable I have to start up a root terminal and type in:
route add -net 0.0.0.0 gw 10.0.1.10 dev eth0
Is there a way to have this saved so I don't have to re-type it every time ? I already tried adding the command in /etc/rc.local and also in /etc/network/interfaces but it doesn't.
I've succesfullly connected to my vpn with kvpnc, but none of my traffic is going through the vpn! I dont know how to route traffic to the vpn. for instance, when I go to whatsmyip.com it still has my previous ip.
View 1 Replies View RelatedI use linux.
I have below error, no route to host.
Code: route add -net 192.168.98.0 netmask 255.255.255.0 gw 192.168.99.1 -net 192.168.98.0 , is it for ip address of the client/host? man route says , "target is a network".What does it mean?
View 1 Replies View RelatedWhat does it do? Any examples on how I use it?
View 2 Replies View RelatedHow can I add this to Ubuntu so that I can effectively use both networks connected to my machine. All I do in WinXP is run this from the command prompt: route -p add 10.0.0.0 mask 255.0.0.0 10.15.122.9
View 3 Replies View RelatedHow would I go about re-routing the audio of a Jaunty PC, to another on the same LAN?
View 3 Replies View RelatedI have 3 computers on a local home network. Computer 1 is not receiving incoming anything from other computers on the network, and I don't know why. The regular internet works fine.
Computer 1 can ping and ssh into either 2 or 3. 2 can ping and ssh into 3 and vice versa. But nothing can ping OR ssh into 1. Trying to do so says "no route to host".
All computers are running Ubuntu Karmic.
I have two NIC's interfaces on my linux machine(eth1 and eth2). Each have different IP addresses(10.0.0.1, 10.67.7.1). These two interfaces are connected together through hub. Here is the my question?
1) If I 'ping 10.0.0.1', it should go out through network interface eth2 and through hub and enter on eth1 and response also travel through similar direction.
2) If I 'ping 10.67.7.1', it should go out through network interface eth1 and through hub and enter on eth2.
How can setup routing table for this,I have tried setting up routing and iptables, etc.. nothing helped.
If any one good router/networking guy, you should know this one.I am doing a project, I want this way to handle this.
I have some CISCO,Linux related problem with 2 Class C subnets:
192.168.64.0 -> PC5
192.168.65.0 -> PC6
Here's a picture of my situation: [URL]
HQ has to have 2 STATIC routes in order those 2 "PCs" mentioned above to have end to end connectivity with NETWORK A and NETWORK B. Now I try with
route0 -> network: 0.0.0.0, mask: 0.0.0.0, nexthop: Serial 0/0/0
route1 -> network: 0.0.0.0, mask: 0.0.0.0, nexthop: Serial 0/0/1
And it seems to work but I don't think it's proper! I feel it's kinda wrong ... but all my other attempts to set another couple of static routes ends in "Request timed out" and thus connection lost.
I'm trying to troubleshoot some networking issues I'm having between my Linux servers connecting to a server at another location after a Cisco ASA firewall has been installed at my location. I can make the connection work if I lower the mtu on the NIC (ifconfig eth0 mth 1000) - however that supposedly can break the local network if I don't set everything else's mtu to match. Supposedly I can use the iproute package (debian etch) to lower the mtu on a per-route basis, but it doesn't seem to work for me.
Code:
ip route delete default
ip route add default via X.X.X.X mtu 1000
I have a server that I can ping, and I can connect remotely with ssh to it. But when I try to connect to apache (port 80) I get "no route to host". But I can connect to localhost It's not just my client system that is having this problem but also systems that are on the same subnet There is no firewall running on the server route on the server
[Code]...
I have an Asterisk-server with 2 interfaces, a WAN-interface (eth1) and a LAN-interface (eth0).
SETUP : IAX-provider(internet) --> firewall --> Asterisk-server --> switch --> clients_on_LAN
So everything coming from the IAX-provider on port 4569 is forwarded to the Asterisk-server's WAN-interface (eth1). This needs then be routed to an internal SIP-phone (an IVR-system will define which one) via eth0. When a call is initiated from an internal SIP-phone (they register to the IP-address assigned to eth0) it needs to be routed via eth1 to the gateway (192.168.4.250). Asterisk will setup an IAX-channel on WAN-interface (eth1) to the IAX-provider (via gateway). So... will this work :
Code:
route add -net ip_IAXprovider netmask 255.255.255.0 gw 192.168.4.250 dev eth1
Code:
route add -net 192.168.4.0 netmask 255.255.255.0 dev eth0 (no gateway needed for the LAN-interface, communications to the gateway need to go via the WAN-interface !)
We have a Red Hat Linux server that sends email out daily. It points to and Exchange server for smtp. It works fine, however, at least once a day, an email will fail and in the maillog I see "No route to host". After a few minutes, everything is working fine. The Linux server and Exchange are on the same VLAN and IP subnet.
View 2 Replies View Related