similar to: ARP limit ?

For anyone to answer that clearly, we''d need a bit more information. Firstly, what is connected to router1 and router2? In other words, does the router box you want to use have enough ports (and of the right type) to actually handle all of the connections? Secondly, can we assume that you have enough access to the box you want to use to be able to install the software and configure it?

Hello list, Here is a setup of my network: eth0 <-> router1 <-> eth2 --- wifi --- eth2 <-> router2 <-> eth0 | | eth1 eth1 Router1: eth0 - Internet connection eth1 - Local network (network 10.1.1.0/24) eth2 - Wireless AP (network 10.1.10.0/24) Router2: eth0 - Internet

> I've been having troubles getting cross subnet browsing working in > existance with a WinNT domain master (hey, it's not my machine). > Basically what is happening is that I am trying to setup a VPN (which > shouldn't complicate things) that browsing will work across. The idea is > this: > > There is an office in my local city that I'm connecting San

I have this kind of network: /==========\ /==========\ /==========\ | ROUTER 1 |---| FIREWALL |---| INTERNET | \==========/ \==========/ \==========/ | | /==========\ /==========\ | LAN | | ROUTER 2 | \==========/ \==========/ The firewall allows only ports 80 and 443 to the internet and 22 to the ROUTER 2. It also allows everything from ROUTER 2 to the

Hi, The network topo looks like this: the original network: router1 router2 | | |----------------OSPF------------| the target network: (we need to insert a transparent firewall between these 2 routers, so a proxy arp is set up on firewall to bridge router1 and router2) router1 firewall router2 |

I have had Shorewall 2.0.8 up and running for a month or so. Now I need to change some things around. Currently I am running on a private IP scheme and Shorewall is setup based on the 3 interface guide. Now I want to change to a public scheme on my "loc" zone. I have a /24 block of public IP''s. I need my private scheme and public to co-exist so I currently have is eth1 (local)

So this is a little off topic but this list is so helpful!! Is this the correct way to split our /24 block up? Tom suggested something like this in an earlier post but that did not work either. So what should I change to make this work? Internet<===Shorewall Box===>router1<++++T1 Line++++>router2<==LAN I need a /28 on the Shorewall side of things and the rest on the LAN side of

Hi folks, I have 2 firewalls, setup with Centos 5.2. They are also routers, connected to 2 upstream routers. I have some cases where connections from servers to the internet leave my network via router2 and answers come back via router1. So I added conntrack tools to both routers/firewalls to synchronize the session tables (using ftfw procotol). That works as expected. If e.g. I ping from

Dear tinc community, I am using tinc in switch mode. I have three nodes. Two nodes reside on routers, vpn-eth is bridged with internal lan, each router has several machines connected to it's internal lan. Third node is the roadwarrior - "endpoint" linux PC. When the roadwarrior is off - everything works perfectly, machines on both sides can communicate without a problem in any

Hi, I am trying to set up a VPN that allows mobile users to access multcast information from an information vendor. Hence Tinc is configured as a switch. Internet --[ router1 ]------[eth0 VPN eth1]--------------[ router2 ]--------- mobile users VPN server is running Ubuntu 10.04 and is also configured as a dhcp server that hands out IP address to connecting mobile users. A bridge (br0) is

Hi, With kernel 2.4 I was able to use equalize to send our outgoing packets to two different routers (our isp supports this setup), like this: ip route add default src ip.a.dd.rr equalize nexthop via <router1> weight 1 nexthop via <router2> weight 1 The two routes were used equally on a per packet basis, not per flow or per cached route, but per packet, each line has 800k upload

Unless the bridge keeps stateful inspection data and can reply back to the session''s origin, not it route then its fine. The only way I can see this working is either putting the FTP/.. DMZ behind the firewall giving true firewall protection for all services involved, or if you just want to kludge the current solution, you can perform a DNAT/SNAT interface bounce like the following: #

Hello everybody, sorry for bothering you, but after some hours, I''m stuck. I''m living in a student''s foundation where I want to connect lots of people to a tiny DSL link. We have exactly four types of traffic. We want a really hard PRIO solution (as I promised to someone that group X will only use the link capacity which isn''t used by group Y). I could make a

Hi all, I have noticed that the "CONFIG_NETLINK" has been removed since kernel version 2.4.17, does this mean that we cannot use "arpd" with kernel versions 2.4.17 onwards. vishy _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

I have managed to get it set up so that I can now use net commands to mount shares from my linux box onto my windows box. But I still don't see an icon for my linux box on the network niehborhood. I have waited and waited and tried what seems like everything but can't get that stupid icon to come up. Any ideas??? Scott

Dzien Dobry Is there some error witch iproute2-050929.tar.gz becouse when i compile I don''t get tc I have kernel 2.6.12.3 this is my log with compile # make make[1]: Entering directory `/home/src/a/04102005/iproute2-050929/lib'' gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -I../include -DRESOLVE_HOSTNAMES -c -o ll_map.o ll_map.c gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes

Hello, I have configured a load balancing router using Julian''s patches and as described in "nano.txt" for two ISP links as shown below. ISP 1 ISP 2 . . | | | | | | | WAN

I''ve got a linux router pushing 600-1000 pppoe connections through it. I''m getting a screen error "Neighbor Table Overflow" after this box has been up for between 1 week and 1 month. When this is happening, routing slows to a crawl if at all. Then dies. I''ve added: # Added to stop "neighbor table overflow" messages in the kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I thought I would separate this out into a separate mail since it's not comment specific stuff -- There seem to be a couple of inconcistanies in the Ogg spec as regards to lacing values: *) "The raw packet is logicaly divided into [n] 255 byte segments and a last fractional segment of < 255 bytes." However, in the wild, I've

Folks, I''m so surprised what happened to my box just in the few weeks lately. Here is my setup: INTERNET <----------> [eth0] SHAPER-BOX [eth1] <----------> USER-FARM both eth0 & eth1 got public ips (202.x.x.x) Why traffic monitored at eth0 is bigger than eth1 ? eth1 shaped just exactly the same as rate i defined in HTB. I just have 1024Kbps from my ISP and i defined the