Virtualni adresa a problem s pingem

Ahoj, mam takovou otazecku ....

mam sit:

eth2      Link encap:Ethernet  HWaddr 00:0E:2E:5B:4B:B4  
          inet addr:192.168.4.1  Bcast:192.168.4.255  Mask:255.255.255.0
          inet6 addr: fe80::20e:2eff:fe5b:4bb4/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:394926794 errors:0 dropped:0 overruns:0 frame:0
          TX packets:434301682 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:282794238 (269.6 MiB)  TX bytes:2657254542 (2.4 GiB)
          Interrupt:20 Base address:0xd400

k tomu mam vytvorenou virtualni IP:

ifconfig eth2:2 192.168.3.1 netmask 255.255.255.0 up

vysledek je pak takto:

eth2:2    Link encap:Ethernet  HWaddr 00:0E:2E:5B:4B:B4  
          inet addr:192.168.3.1  Bcast:192.168.3.255  Mask:255.255.255.0
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          Interrupt:20 Base address:0xd400

sit 192.168.4.0/24 propojim se siti 192.168.3.0/24 a firewallu ... :

iptables -A FORWARD -i eth2 -o eth2 -s 192.168.4.0/24 -d 192.168.3.0/24 -j ACCEPT
iptables -A FORWARD -i eth2 -o eth2 -s 192.168.3.0/24 -d 192.168.4.0/24 -j ACCEPT

Tak a ted vse funguje skvele .. servery jsou na 4.0/24 a DHCP klienty mam na 3.0/24, funguje surfovani, sdileni souboru, funguje Citrix, RDP .... atd ..

Nefunguji pouze dve veci: problem s pingem a "zamrzajici ssh" jde o to, ze kdyz se z klienta ze site 192.168.3.0/24 pripojuju na nejaky stroj, treba 192.168.4.2, tak pokud pingam, dostavam toto:

Macintosh:~ gmork$ ping 192.168.4.2
PING 192.168.4.2 (192.168.4.2): 56 data bytes
64 bytes from 192.168.4.2: icmp_seq=0 ttl=64 time=2.298 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 f159   0 0000  3f  01 01fb 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=1 ttl=64 time=2.370 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 4e31   0 0000  3f  01 a523 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=2 ttl=64 time=2.966 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 6e01   0 0000  3f  01 8553 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=3 ttl=64 time=2.317 ms
64 bytes from 192.168.4.2: icmp_seq=4 ttl=64 time=1.831 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 ab19   0 0000  3f  01 483b 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=5 ttl=64 time=2.387 ms
^C
--- 192.168.4.2 ping statistics ---
6 packets transmitted, 6 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.831/2.361/2.966/0.330 ms

pokud se pripojim na ten server z ty trojkovy site pres ssh tak mi ssh session zmrzne ...

myslim si, ze mam nejakou chybu v routovani, ci co, napada nekoho neco ???

routovaci tabulka:

192.168.4.0/24 dev eth2  proto kernel  scope link  src 192.168.4.1 
192.168.3.0/24 dev eth2  proto kernel  scope link  src 192.168.3.1

Diky ..

Never give up ! Stay ATARI !

Zapomel jsem napsat, ze tento problem se tyka pouze systemu linux -> linux Pokud jdu ze ze site 3.0/24 na 4.0/24 a opacne z win -> win nebo win -> lin

problem neni, treba ping z meho unix maca na windows server:

Macintosh:~ gmork$ ping 192.168.4.210
PING 192.168.4.210 (192.168.4.210): 56 data bytes
64 bytes from 192.168.4.210: icmp_seq=0 ttl=127 time=1.705 ms
64 bytes from 192.168.4.210: icmp_seq=1 ttl=127 time=1.707 ms
64 bytes from 192.168.4.210: icmp_seq=2 ttl=127 time=3.183 ms
64 bytes from 192.168.4.210: icmp_seq=3 ttl=127 time=1.608 ms
64 bytes from 192.168.4.210: icmp_seq=4 ttl=127 time=2.110 ms
64 bytes from 192.168.4.210: icmp_seq=5 ttl=127 time=1.963 ms
64 bytes from 192.168.4.210: icmp_seq=6 ttl=127 time=1.772 ms
64 bytes from 192.168.4.210: icmp_seq=7 ttl=127 time=1.511 ms
64 bytes from 192.168.4.210: icmp_seq=8 ttl=127 time=2.015 ms
64 bytes from 192.168.4.210: icmp_seq=9 ttl=127 time=1.355 ms
^C
--- 192.168.4.210 ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.355/1.893/3.183/0.483 ms

Never give up ! Stay ATARI !

Dotaz: Virtualni adresa a problem s pingem

Odpovědi