I need some advice on setting up VPN. The situation is as follows:
Server => Centos 5.5
Clients => Fedora, Ubuntu, Win XP, Win 7 (and possibly mac)
The flow could be as follows
Code:
Client=>10.x.x.x=========>10.x.x.1<=VPN Server=>192.168.x.1<=========192.168.x.x<=Server in LAN
A bit of explanation of the above. I would like to allow any client (be it any Linux version or Windows), to connect to the VPN server, obtain an IP Address and then function as if it is in the LAN and be able to access all the servers in the LAN. So the connection between an external client and the VPN server will be through the 10.x.x.x ip range and the server and the internal machines will be through the range 192.168.x.x. After going through the internet, I have decided to deploy OpenVPN client/server, with bridged tap interface in the server and the client.
I am trying to setup a network bridged Server on Centos 5 like belows,
Broadband Router (NAT mode) ---> Bridged server (with t Proxy)--> Client PC .
after installing and configuring bridge, client can browse. But, i want to make this server working as a transparent proxy.But, my bridged proxy is not working. i need to use iptables command to make it properly.
I am trying to setup an OpenVPN server in bridged mode (Ubuntu 10.04 Lts). The goal is for the clients to be able to reach all the servers behind Openvpn server's lan. I have followed the official OpenVPN guide for Ubuntu 10.04.
My network setup is:
Private lan: 10.90.90.0-255 255.255.255.0 Gateway: 10.90.90.1 Openvpn server ip: 10.90.90.8 Gateway public ip: 79.xxxxxxxxx
I have forward port 1195 to the Vpn server through my gateway firewall.Besides that no other firewall is running.I can connect and ping the server both from windows and ubuntu clients. The difference is that from windows I can reach the private lan but not from ubuntu clients.
I'm using a Debian box as a gateway. I'm planning on bridging my DLink 604T modem/router so that traffic on the LAN goes to my gateway (which only has one NIC). The Debian box is running a PPPoe application which I'm hoping to log into the ISP through the DLink. I plan to configure the box as a squid transparent proxy. Most Howtos I've seen use NAT with 2 NICs, eth0 for the LAN and eth1 for the Internet. Any step-through to set up NAT for this?
Im trying to setup multiple domU through the default bridge setup. I am able to access only one of them through the network at a time. If you ping one of the domU it works perfectly but you cannot ping any of the others until you stop pinging the one and even then it takes a bit before you can. Ive looked around for a while and seen similar problems but nothing ever seems quite the same. Im probably missing something really stupid. Or is this the way the bridge is supposed to behave? Do i need to use a routed virtual network?
Newbie Question: How do I setup networking on openSuSE 11.4 on an HP Proliant DL385 G7 with 4 NICs to host Windows 2008 R2 on Xen? I've installed openSuSE 11.4 with all the patches (and most of the server patterns - Mail and News, LAMP, LDAP, Samba, etc.), and I've installed Windows 2008 R2 in a Xen virtual machine. I'm having problems configuring the 4 NICs eth0, eth1, eth2, eth3 are "bound" without an ip_address as br0
eth0 connects to my ISP - currently through a private LAN - It connects directly to the router with static IP 192.168.0.105 Eventually, one of the other NICs will serve ip_addresses via DHCP to a separate LAN (for use in an office setting), and eth0 will be set with a static IP from the ISP That means, eth0 will be static to the ISP, and the other NICs will attach to a switch serving private ip_addresses in the 192.168.0.xxx range.
Currently, I have br0 unconfigured and eth0 static. I have configured eth0 in the External Zone and br0 in the Internal Zone in the firewall, and all the correct ports are opened (afaik) I have enabled masquerading. Hostname, Domain (workgroup), DNS Server addresses and IPv4 Gateway are configured.
Windows 2008 R2 (Guest VM in Xen) "sees" the other machines on the network, and "browses" the internet, although it will not download patches except intermittently. I have not tried connecting to it from the LAN Eventually, I wish to run Windows Terminal Server. openSuSE cannot "browse" the internet, though it initially did. What am I missing? I "think" I need routing or NAT, or I may have my bridge setup incorrectly, although I've tried almost every combination. Google says Xen should be setup with either NAT or a Bridged Network.
I virtualised backtrack on windows 7, and set up the network connection to bridged mode, but my networking still fails. dhclient eth0, outputs many DHCPDISCOVER but no DHCP offers.
is it possible to setup a DHCP server using the loopback or a virtual interface? I installed Sun VirtualBox on my fedora system and want to try and kickstart them from within the same box on a virtual network. Is this possible and has anyone done it? I only have a single NIC in the box and it is on my public network.
Just something that struck me while working on our virtual servers today.
I have bonded 3 NICs at the host in Ubuntu Server 8.04 LTS. They are using mode 0 for Round-robin. Point is to increase the speed/performance of all the servers, but mainly the fileserver. The fileserver is a virtual server running Ubuntu Server 8.04 LTS on VMware Server 2.0.
1) I noticed the NIC in the slave OS reported link speed as 1000 and Im unable to change it as the NIC (virtual one) doesnt support it. Does this not really matter, as the NIC doesnt exist, and it will run at higher speeds anyway? Or do I have to remove the bond on the host, bridge all 3 interfaces from the host to the slave OS, and then make a bond in the slave OS?
2) While at it, does mode 0 only increase performance on data being sent from the host or does it also increase the available incoming bandwidth?
I currently have one of our clients set up to use a routed VPN for their 5 laptops to connect to the server remotley. And this works brilliantly. They are about to bring on a remote office that will need a VPN connection back to the main office, so I was going to set up a bridged connection between the two sites (and possibly more sites in the future).
So my question is whats the best way to go about this? Can I have one instance of OpenVPN running with tun0 set up for a routed connection to the laptops and add a second tun (tun1) to the config that will be for the bridged connection between the sites? Or am I going to have to run multiple instances of OpenVNP, one for the routed and another for the bridged?
If routed and bridged have to run in seperate instances, will I have to add another instance for each new remote site that needs a connection? Can a bridged config connect to multiple sites, or have multiple tuns in the one config?
I'm trying to setup nagios, and I've looked at several guides but none of them seem to address my problem.Here's the clearest guide that I followed URl...I followed all the instructions on that basica guide, except disabling SELinux. I changed SELinux rules based on URL...I'm not getting any AVC Denials, so that's not the problem. Nagios and Apache both start fine. If I go to my local IP, I get the standard Apache test page. URl...(address from all the guides I read) doesn't resolve.I know that Nagios is at least running from "service nagios status," and I have gotten two alerts emailed to me: swap alert (I don't have swap configured) and disk space.
In previous releases 11.2 and lower it was possible to load the dummy network module using modprobe dummy0. But this module is not available for 11.3. So how to setup a dummy network interface?
All rc.inet1 an rc.wireless scripts work well if a wireless extension is on wlan(x). My notebook has Intel Pro 2100 wireless adapter (the ipw2100 module). By the system the card is marked as eth1. If you have a look at rc.inet1(.conf) you see that by default an eth1 has no wireless extensions. how to set up my network.
I want to configure multiple virtual ethernet interfaces over a single physical ethernet interface (eth0) and for each virtual interface the MAC address must be unique and the IP address must be Static.Finally all the virtual interfaces must be able to communicate both internally and externally and the traffic should be captured using wireshark.
I need to have such kind of setup to communicate devices individually using one physical ethernet device.
Because I was fiddling with few kernel modules like MACVLAN and MACVTAP and successfully enabled those modules and rebuild kernel. Using macvlan and macvtap I can configure virtual interfaces with unique mac address and static IPs but while capturing packets using wireshark interfaces behave weirdly.
For example say on HOST machine I have 1 physical interface and created 3 virtual interfaces as shown below.
First from above interfaces I started pinging eth0 internally from host machine in which it worked as usually.
Second I did same externally from other machine which is connected to the same network of Host machine, and this did work as usually.
Third I pinged first virtual interface veth0 both internally and externally and this also works and after that I did check source and destination MAC address using wireshark tool-where both showed up there respective MAC address.
Now triggers the issue, where I pinged second virtual interface same like I did for first one, but this time ping was success and where as in wireshark tool the MAC address for veth0 is picked by veth1. This is where I got stuck and this issue happened for all the remaining virtual interfaces.
I couldn't see any virtual interface showing their respective MAC address, as of the remaining except the first virtual interface has been picking the first veth0 mac address.
We are trying to set up a NIS server on a CentOS system. We need to have a NIS server which can provide NIS authentication to a couple of clients. We are practically new to all this stuff.
Just googled to find some ideas about installing ypserv and ypbind and portmapper. We did all that and also started them successfully. But now the clients are not able to join to the NIS domain . The error log states "YP_DOMAIN NOT BOUND".
I guess we have not entered the /etc/yp.conf, /etc/hosts files properly. Please let us know the detailed steps to setup a NIS server .
Also, please let us know what entries should go into the different /etc/<file_names>? What is meant by HOSTNAME in the /etc/hosts file?
Is there any other files which need to be changed? Are we missing any steps?
Also to add-on, while executing the ypinit command we faced the following error:
At this point, we have to construct a list of the hosts which will run NIS servers. localhost.localdomain is in the list of NIS server hosts. Please cont inue to add the names for the other hosts, one per line. When you are done with the list, type a <control D>. next host to add: localhost.localdomain next host to add:
I want to setup a FAI server for which I was looking for the best method of mirroring the Debian Lenny. I want to setup a local mirror with the best method available for mirroring. If it is ftpsync, please provide me some best ways of doing it. I tried ftpsync mirroring but that was not getting properly working due to insufficient I want this mirror to be accessible in my FAI setup so that I can start the installation on multiple machines and start the updates and package installation to be done from the same local mirror.
I am running a NFS share on a Debian Lenny server with to network interface.
Sometimes when booting the server the following messages i shown in syslog:
Code:
If the system is rebooted then NFS is functional again. I would like to know way this happens somtimes so i can repair it, anyone with an idea? Another thing is that i would like to bind the NFS service to a specific interface e.g eth1 is this possible?
I've started facing the weirdest problem. I have to restart the ethernet interface a couple of times a day and everytime i do that the server locks up completely and i have to hard reboot it.info: recently shifted to a new server, all new components and new installation, OS version CentOS 5.6
My brother has a Ubuntu server attached to a LAN with Windows PCs. I set up an openVPN tun service on the server, let's call this VPN1, so that I can connect remotely from my Ubuntu desktop. The server has one NIC and the LAN has a router that is the gateway to the internet.
My brother would like to remotely access his windows network when roaming with his Windows laptop.
Therefore, I would like to set up a second VPN service, this time tap, that is bridged with his LAN. Let's call this VPN2.
The LAN subnet is 192.168.1.0/24. The internet gateway is 192.168.1.1
The NIC has a fixed IP set by the router of 192.168.1.150
How do I set up VPN2 so as not to trash VPN1? That is, if I bridge eth0 with tap0 how will that impact VPN1's tun0 that is using eth0? Do I need a separate NIC for the VPN2 bridge?
I am trying to get a bridged connection to work in centos
Here is the network diagram [url]
There are two interfaces in linux system , they are bridged and connected to the windows system I am not sure if I need to enable STP in the bridge or not?
I have two eth interfaces bridged in CentOS, one of these interface is connected to a Windows Server, I can do a ifconfig down on both these interfaces and there is no change of status at the windows side, I don't get the message that 'network cable has been unplugged'
Is this behavior normal ? I think when you shut an interface than you get the interface down message at other end ? And what becomes the status of the bridge if I shutdown one of its interface ?
I have virtual box installed which automatically installed bridges for my network adapters. This has always worked fine. I'm attempting to set up a static IP for this machine now. I use NetworkManager, and the physical connection (eth0) is set to static IP of 0.0.0.0, and the bridge (br0) attached to eth0 was set to DHCP. I changed br0 to my desired static IP and lost net connectivity (I'm talking about the host, not the virtual machine - I'll get the host working first). Re-enabling DHCP restores connectivity. So I don't know what the problem is, but I am unable to assign a static IP to the bridged connection. Do I have to do this differently? Do I need to remove the bridge so I am using just eth0 again, assign the static IP to eth0, and then re-install the bridge? I haven't tried that yet because a) I don't know how to remove & reinstall the bridge, because it was done automatically by Virtual Box installation, and b) I could probably do that if I had the time figure it out but right now I don't.
I set up a static IP on wlan0 on another machine using Network Manager and it works fine. That machine also has Virtual Box installed but for some reason doesn't have the bridged connections. (Perhaps because it runs Ubuntu, not OpenSUSE, if that makes any difference)
how to configure a bridged connection in where we are required to enter username and password.I am currently using PPOE type connection of my modem(A Nokia siemens ADSL modem).
Im using fedora 13 x64 install from DVD. Has anyone else found problems using vmware 7.0.1 or 7.1. My bridged networking will not pickup a dhcp address, and even if I configure static my network will still not work, yet NAT works fine. Even configuring bridged to use a dedicated device doesnt work. Workstation worked fine on Fedora 12 but this seems to be a reoccuring problem in every other release.
Bridged successfully but cannot access the Internet.I installed VMware in my Fc13,and installed XP sp3 in the VMware.I can access the Internet in XP,I set the network as Bridged with Fc13,but Fc cannot open a page,but I ping google.com,it can display: Code: Pinging google.com [64.233.183.104] with 32 bytes of data: then nothing.I still cannot access the Internet in my Fc13.
I have been trying to set up bridged networking, but I keep failing. I am using Fedora 14 x86_64 KDE as host with qemu-kvm and SPICE. The plan is to install a windows server, a few windows clients and then rawhide as guests on that. Naturally I want to use bridged networking for the windows guests.[URL]..But those both leave the guest without internet access. Is it really this difficult, or am I doing it wrong(tm)?
I've set up bridged networking so that I can have KVM virtual machines that are accessible from outside the host. I can access both the Host and my VM from other machines on the local network, and from the VM I can access the internet but from the Host I can only access my local network. Since I can access the local network and the same issue applies regardless of whether I use host names or IP addresses I suspect it's not picking up the gateway properly.
How do I go about allowing the VM host to access the internet while still having bridged networking so I can access my VMs?
What I've checked so far: Ping Google DNS (8.8.8.8 ) From Host: Destination Host Unreachable From VM: Suceeds
[Code].....
The issues are only with accessing things outside of my subnet. I can access other machines on the same subnet from the Host just fine.
I have a load balancer with 2 web servers behind it. The web servers rsync with cloud storage to update their apache directories 1 time every hour. Apache is just running php pages that pull/push data to a DB so they dont need to be updated that often. However I need to figure out how to implement a Master/Master MySQL setup to have my web servers point to for the PHP stuff. I need to implement it without having a single point of failure. The Load balancers are useless for failover as they only detect availability based on Ping request. So putting a master/master setup behind a Load Balancer is out. what is the best way to setup the master/master mysql in a HA setup without the use of a load balancer provided by the host?
