similar to: HTB/IMQ with GRE bug

I am attempting to setup an IPSec protected GRE tunnel with a Cisco router. I believe the IPSec association is up, however I cannot move traffic over the tunnel. It is not clear how to integrate the tunnel interface (gre1) with firewall-cmd; adding the interface to trusted does not appear to 'stick'. [root at aqueduct ~]# firewall-cmd --add-interface=gre1 --zone=trusted The interface

Hi List, FYI. We have been using CentOS 6.4 and have 2 vpn/gre tunnels to separate cisco rtrs using ospf. with kernel 2.6.32-358.23.2 We have upgraded to 6.5 bit using kernel 2.6.32-431.5.1 and the exact same configuration scripts for our vpn/gre tunnels. What I see is the first gre tunnel works great and I get an ospf neighbor. The second tunnel comes up and I can ping across it and I see

Hi Guys, Here is our patch to allow broadcast packets over a GRE tunnel. Hopefully it might be accepted into the source someday. You need to enabled bridging and GRE tunnels in your kernel. No other options are required. The gre patch determines what type of protocol type to put in the GRE header based on the whether the packet is forwarded from a bridge or not. To use the patch: # Create

Hi stef; imq patch of 2.2.17 form http://luxik.cdi.cz/~devik/qos/imq.htm diff against 2.2.17 Can you tell me how imq work with ipchains? thanks for your help regards, haipe _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

hi all, i want to try htb3 with imq downloaded & patched imq & htb3 with kernel-2.4.18 on rh7.2 but got STUCK on step 1 :( this are what i did can anyone guide me what went wrong on the first step itself !! [root@cab1 root]# modprobe imq numdevs=1 modprobe: Can''t locate module imq [root@cab1 root]# [root@cab1 root]# tc qdisc add dev imq0 handle 1: root htb default 1 Cannot find

hy, devik said that "iptables -j IMQ" don''t do the actual jump but it mark the pachets to do the jump at the end of the table, but for my information, it makes the mark where in the pachet? C

I want to send a multicast packet to multiple gre tunnel, but the packet only went to where the routing table configured to. ex. when use ip route add 224.0.0.0/4 via gre0 then the packet go to gre0 when use ip route add 224.0.0.0/4 via gre1 then the packet go to gre1 when use ip route add 224.0.0.0/4 nexthop via gre1 nexthop via gre0 then the packet go to either gre or gre1

Martin Devera wrote: > If you read the manual, the algorithm will not work correctly > with {,c}burst < MTU ... > devik > I just tried to change {,c}burst to 1600, or leaving them by default but no visible result. here is the latest tc -s -d class show dev eth0 class htb 1:101 parent 1:1 prio 0 rate 40Kbit ceil 40Kbit burst 1599b/8 mpu 0b cburst 1599b/8 mpu 0b quantum 512 level

I''ve followed this list for quite a long time and have even posted a couple of times. I used the early versions of IMQ from Devik (I think that was his name), and it worked well. I only ever got the chance to implement it in my test environment. I now need to implement it in my production environment. My Linux core router has nine interfaces and has a 27 megabit connection to the

On 12/29/2017 3:59 AM, Wojciech ?ysiak wrote: > firstly check which zone are your interface in : > > bash> firewall-cmd --get-active-zones > > then all you have to do is add a service to the firewall > > firewall-cmd --zone=<INSERT YOUR ZONE> --add-service=openvpn --permanent > > assuming that your Openvpn is running on standard port 1194/tcp|udp, > If not

mdew:~# tc qdisc add dev imq0 handle 1: root htb default 12 r2q 1 Cannot find device "imq0" mdew:~# lsmod Module Size Used by Not tainted ipt_REDIRECT 728 0 (autoclean) ipt_MARK 728 2 (autoclean) iptable_mangle 2100 1 (autoclean) ipt_REJECT 2712 4 (autoclean) iptable_filter 1672 1 (autoclean)

Hello All Its first time i posting to this mail list :). I have done something (maybe) important. I write new IMQ device driver based from Martin Devera and Patrick McHardy implementation with device EOS support. My current implementation supporting only egress trafic shaping and kernel 2.4.25. For more details, source and examples have look at my page http://hyperfighter.jinak.cz/qos Ill

Devik, Can you send Htb to Marcello Please? Its only a module, but its about time it went mainstream. Maybe its too late for 2.4.19, but 2.4.20 will come. Same comment for IMQ also. Regards John

Hello! I have a quite complicated setup. In my network on each interface there is bandwidth limitation for each user. Booth outgoing (on interface itself) and incoming (attached IMQ) traffic. There is main HTB class which limits bandwidth for whole interface and HTB subclasses for each user. Filtering is done with hashing filters. This setup was working correctly. But now in the network I

I would like to differentiate incoming traffic streams to guarantee minimum bandwidth to some services. However, as per the Adv-Routing-HOWTO it appears that only outgoing traffic can be shaped. Is this correct or is there a way of shaping incoming traffic? The problem could possibly be overcome if there is a way of routing traffic through a virtual host. Any tips on how to go about that? --

Hello ALL, is there a way to have a device independent qdisc, or a qdisc on some kind of virtuall interface? Background: I have a 5-Interface-Router with one Internet-Uplink. The Router should connect the clients on the other Interfaces to the Internet and to each other client. As i understood the hole TC stuff i can only get influence of outgoing traffic. In my case i can reduce the traffic of

Hi! I have successfully set up traffic shaping at our site using your and others howtos. I have a linux firewall (gateway), two leased lines. I shape only the incoming traffix now. I use HTB+SFQ and sort the packets using iptables with the CLASSIFY patch. It works very well. eth1----ISP2-\ eth2----ISP1--LINUX--internal network eth0 My problem is, that i can not shape my VPN (PPTP)

Hello, I use HTB with linux-2.4.20-ac1 and iptables-1.2.7a (pathced for IMQ). I configured one HTB qdisc on an IMQ device. This qdisc has some classes (about 5) and all of the classes has qdisc pfifo. I sometimes got out from my linux (while I was working) and I found in logs: Dec 4 11:49:27 core kernel: HTB init, kernel part version 3.7 Dec 4 11:49:28 core kernel: HTB: quantum of class

>Hi everyone, and thanks for your help so far. > >I have been playing around with tc and htb for a couple of weeks now, and >while I am nowhere near understanding everything here, I am beginning to >know more about packets than I ever wanted to know. > >I have two university buildings with a 1mb connection to the Internet. The >two buildings (on either side of town) are

I''ve just started to recently look at CBQ and HTB, but I''ve been wondering whether or not something like the following is possible: I''ve got two external links: +--+ | |-----ISP1 |FW| | |-----ISP2 +--+ One link has a bandwidth cap, and the other doesn''t. What I want to do is, punt all outbound traffic out via ISP1