search for: supernet

...st traffic which should be forwarded via the "external" interface (for example all traffic send to a node itself). To achieve this, each node have to add manually a route to the routing table for each vpn-subnet, pointing to the tun device. Currently this is easily done with a so called supernetting configuration. But this is only working, if all subnets coming out of the same address range. If a node adds a subnet coming from a complete different address range, than every node has to change there routing table manually (Initially done via the tinc-up script). So the question is, is...

Hi there, I have a question with regards to cascading multiple HTB qdiscs. Assume that I want to build the following hierarchy: (qdisc htb 1:0) -> (class htb 1:1) -> (qdisc htb 2:0) -> (class htb 2:1) -> (class htb 2:2) I want to attache aggregate u32 filters at 1:0 for supernets, then at 2:0 (and 3:0, 4:0, etc), I attach the more specific u32 filters for say HTTP and SMPT shaping. so I attach the following filters: tc filter add dev eth0 parent 1:0 protocol ip u32 match ip dst 172.16.1.0/24 classid 1:1 so that all the class c traffic is directed to 1:1 then for that c c...

...rhrk.uni-kl.de/~nissler/tuntap/, and compiled tinc myself. The only confusing part was figuring out the tinc-up bits to make everything happy on MacOS. Here's the trick: ifconfig $INTERFACE <mac client ip> <the same ip again> netmask <netmask of whole vpn> route add <vpn supernet>/<cidr notation of netmask> <mac client ip> I'm sure this is obvious to some people, but it took me a few minutes to grok. You're setting up a tun interface that tunnels from your ip address to the same ip address, and then you add a static route for your vpn supernet to tha...

...hoping to draw some extra attention because I got NO reply whatsoever to the original posting :( I would really appreciate if someone could comment om which of both strategies as described below is best. I am having some trouble with a samba domain distributed over 2 subnets (192.168.0.0/23 (supernetted) & 192.168.4.0/24). These subnets are linked over the internet through a IPSec gateway to gateway (network to network) connection (i.e. all machines can reach/ping each other on both subnets). The samba PDC (with LDAP backend) has IP 192.168.0.4 and there is a BDC (LDAP slave) in the oth...

Hi! I am having some trouble with a samba domain distributed over 2 subnets (192.168.0.0/23 (supernetted) & 192.168.4.0/24). These subnets are linked over the internet through a IPSec gateway to gateway (network to network) connection (i.e. all machines can reach/ping each other on both subnets). The samba PDC (with LDAP backend) has IP 192.168.0.4 and there is a BDC (LDAP slave) in the oth...

Hi, I believe the issues raised by this message are the same as mine, more on a commercial sense than for self use, but mostly the same. I've seen posts where real-life installations are mentioned, but not a reference to how Asterisk is working on production (and productive) environments. Any experiences would be very welcome I believe, not only on pure technical, but wider, sense. Thanks

Good Evening, I am trying to forward packages on an internal device using iptables: /sbin/iptables -A FORWARD -i eth0 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT but the packages are still blocked, e.g.: Feb 6 20:58:28 firewall kernel: DROP-TCP IN=eth0 OUT=eth0 SRC=192.168.100.177 DST=172.28.2.184 LEN=40 TOS=0x00 PREC=0x00 TTL=127 ID=16609 PROTO=TCP SPT=7166 DPT=3590 WINDOW=0

While I was tying down a supernet to the discard interface, the box crashed on me. Its a STABLE box from June 4th. I was in zebra at the time and thought I would route a /24 to ds0 instead of to the IP on ds0 (which I had done for a number of other aggregate routes). The only other "strange" thing about the box is t...