similar to: network question

I''m working with LEAF boxes as gateway machines. I''m trying to implement Proxy-ARP to build a bandwidth manager for my network. I''ve gone as per the lartc howto to implement a transparent bridge in an existing network and plan to put in my tc script after this. I''m configuring the box as a standalone one before plugging it into the network. I''m getting

I have two internet lines and I want to do equal cost loadbalancing on the two uplinks to the internet. This is what I do: ip route add 200.200.200.0/24 dev eth2 table 200 ip route add default via 200.200.200.254 dev eth2 table 200 ip route add 100.100.100.0/24 dev eth1 table 100 ip route add default via 100.100.100.254 dev eth1 table 100 ip route add 200.200.200.0/24 src 200.200.200.1 dev eth2

Hi, I have a linux box connected to two leased lines as follows: _/\__/\_ / \ +--------+ +------------+ ( Internet )----+ Router | | SMTP server| \_ __ _/ +----+---+ +------+-----+ \/ \/ | 200.200.200.254 | 100.100.100.2\ -+-------+----- ... ---------+-- 100.100.100.1\ | 200.200.200.1 +-+--+--+ | Linux | +---+---+ _/\__/\_ 192.168.1.1 |

Solution is really simple. Since this server is dual-homed ( 2 nic's ), i suggest setup advanced routing tables. The short version of howto setup. edit /etc/iproute2/rt_tables and Add : 10 OfficeLan 20 InternetWan Lookup the routing tables: ip route show table OfficeLan ip route show table InternetWan The default gateway's is to the internet. ( change ethX to you network interface

Hello, I''m using htb3 with kernel 2.6.13 on debian testing release. I have a hierarchy consisting of 10 parents clas each with 2 to 20 childs and every child use sfq. The problem is when the default class become congested, the system start to drop packets for 2 seconds all traffic is blocked, another 3 to 5 minutes all goes all and so on. Anyone have any ideea about this ?

This is a much delayed update to the iproute2 command set. It can be downloaded from: http://developer.osdl.org/dev/iproute2/download/iproute2-2.6.18-061002.tar.gz Repository: git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/iproute2.git For more info on iproute2 see: http://linux-net.osdl.org/index.php/Iproute2 The version number includes the kernel version to denote what

As suggested on the netfilter list, I''m posting here too: Current network layout: Internet | ----100.100.251.217---- / (router) \ Internet | | | 100.100.251.220 100.100.251.218

Hello all. I am not 100% familiar with the Linux advanced routing capbalieties yet, so I thought , after reading source code, documentation and more that I might be better off asking the experts on this list. I am not using this ina production environment, but at home, as a test case. First of all, here is the network topology. Internal LAN <--> Switch <--> [NAT/FIREWALL/INTERNAL LAN

I am sharing out ZFS ISCSI luns to my Mac. When copying large files, the network will hang in the middle of the transfer and the LUN will become unavailable until I plumb the NIC. This issue appears to only occur only when I am reading files (ie..syncing an ipod) and not writing (I''m not 100% sure though). When I snoop the interface I notice a bunch of ARP lookups. Any ideas? Thanks in

Hello everyone, Please excuse these basic questions but I am new to Linux and I am getting desperate for answers. We are running redhat linux and after many hours of investigation I am unable to get a certain ip rule and ip route command combination to work. These are the software versions installed. [root@c1b04a01 linux-2.4.21-15.EL]# uname -a Linux c1b04a01 2.4.21-15.ELsmp #1 SMP Thu Apr

Is anyone using user sets? I''m considering dropping support for them in 2.0 in favor of just listing individual user/groups in the rules file. Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

I''ve been reading about multipath routes and found something that no howto I saw mentioned so far: multipath algorithms. The kernel has the followings: # zgrep MULTIPATH_ /proc/config.gz CONFIG_IP_ROUTE_MULTIPATH_CACHED=y CONFIG_IP_ROUTE_MULTIPATH_RR=m CONFIG_IP_ROUTE_MULTIPATH_RANDOM=m CONFIG_IP_ROUTE_MULTIPATH_WRANDOM=m CONFIG_IP_ROUTE_MULTIPATH_DRR=m CONFIG_DM_MULTIPATH_EMC iproute2

This is some ramblings on why using proxy ARP (on a host in a DMZ) is a good or bad thing. The good is that a computer X retains a public IP address which makes it easy to connect it directly to the net if the firewall has to be taken down for extended periods. Thus, if computer X is a mail server for example, it can still function in a reduced capacity until the firewall is restored. The bad

Hello all, I need a virtual firewall/router solution. I''m thinking of a netscreen 1000 but I want to know if it can be done in Linux. Here is my idea: 1 Linux box 2 GigE interfaces 1 interface setup with a public IP address ($PUBIP) 1 interface setup with 802.1q VLAN trunking with 100 vlans assigned ($VLAN1-$VLAN100) a /25 subnet routed to $PUBIP from my core routers All $VLAN

I`m trying to setup interface aliases in domU (eth0:1-5) but when I do ifconfig eth0:1 1.2.3.X , DomU sends the following arp to the world: 16:17:33.585940 arp reply 1.2.3.Y is-at 00:16:3e:3d:35:28 (quote from tcpdump on eth0 on the DomU) where 1.2.3.Y is the IP of the eth0. So when I try to bring the 5 aliases at boot time I send 5 arp replies, all saying that my eth0 IP is at my hw address

HI All. I have a linux box connected to a switch network with 2 network interfaces, how would I able to ''trunk'' these 2 interfaces? options I can see are: - ethernet bonding - iproute2? - teql Which one are the best to use? I''m curretly having problem with ethernet bonding, my setup are as follow: ip add: 192.168.10.30/24 I do: # modprobe bonding # ip addr add

Hi, I have the my gateway with load balancing traffic going out over two providers. Web browsing is fine...working great. But, my clients (office staff) complains that MSN keeps disconnecting (in 5 mins). Why? Please help me... Regards, ro0ot

Would it be considered normal that a system behind a shorewall box that was setup for proxyarp and able to be reached from the trusted side of the net just fine on the proxyapr ip address would if it were to talk out to the world show as traffic not from the proxyarp address but the firewall''s own address or the masquerading ip used by other zones? We had not really noticed this as an

Hello, I assign IP 172.25.0.1 and 172.25.1.1 on one interface of my router. This interface is connected to local LAN switch. If I ping from my box on lan with IP 172.25.0.22 I get icmp reply, but if I assig to my box IP 172.25.1.22 I don''t get icmp reply. My setup: ip addr add 172.25.0.1/24 brd + dev eth0 ip addr add 172.25.1.1/24 brd + dev eth0 kernel 2.4.3, iproute2-current,

I'm attempting to configure source-specific routing so that my servers can exist on multiple subnets from multiple upstream providers. A rough diagram of the network layout: ISP1 router (blackbox, routes subnet A, address on subnet A) \ -----------eth0(firewall)eth1---((servers)) / ISP2 router (blackbox, routes subnet B, address on subnet B) The aim is to allow the servers to use