Administrace komentářů

Ahoj, mam takovou otazecku ....

mam sit:

eth2      Link encap:Ethernet  HWaddr 00:0E:2E:5B:4B:B4  
          inet addr:192.168.4.1  Bcast:192.168.4.255  Mask:255.255.255.0
          inet6 addr: fe80::20e:2eff:fe5b:4bb4/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:394926794 errors:0 dropped:0 overruns:0 frame:0
          TX packets:434301682 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:282794238 (269.6 MiB)  TX bytes:2657254542 (2.4 GiB)
          Interrupt:20 Base address:0xd400 

k tomu mam vytvorenou virtualni IP:

ifconfig eth2:2 192.168.3.1 netmask 255.255.255.0 up

vysledek je pak takto:

eth2:2    Link encap:Ethernet  HWaddr 00:0E:2E:5B:4B:B4  
          inet addr:192.168.3.1  Bcast:192.168.3.255  Mask:255.255.255.0
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          Interrupt:20 Base address:0xd400 

sit 192.168.4.0/24 propojim se siti 192.168.3.0/24 a firewallu ... :

iptables -A FORWARD -i eth2 -o eth2 -s 192.168.4.0/24 -d 192.168.3.0/24 -j ACCEPT
iptables -A FORWARD -i eth2 -o eth2 -s 192.168.3.0/24 -d 192.168.4.0/24 -j ACCEPT

Tak a ted vse funguje skvele .. servery jsou na 4.0/24 a DHCP klienty mam na 3.0/24, funguje surfovani, sdileni souboru, funguje Citrix, RDP .... atd ..

Nefunguji pouze dve veci: problem s pingem a "zamrzajici ssh" jde o to, ze kdyz se z klienta ze site 192.168.3.0/24 pripojuju na nejaky stroj, treba 192.168.4.2, tak pokud pingam, dostavam toto:

Macintosh:~ gmork$ ping 192.168.4.2
PING 192.168.4.2 (192.168.4.2): 56 data bytes
64 bytes from 192.168.4.2: icmp_seq=0 ttl=64 time=2.298 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 f159   0 0000  3f  01 01fb 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=1 ttl=64 time=2.370 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 4e31   0 0000  3f  01 a523 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=2 ttl=64 time=2.966 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 6e01   0 0000  3f  01 8553 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=3 ttl=64 time=2.317 ms
64 bytes from 192.168.4.2: icmp_seq=4 ttl=64 time=1.831 ms
92 bytes from 192.168.3.1: Redirect Host(New addr: 192.168.4.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 ab19   0 0000  3f  01 483b 192.168.3.2  192.168.4.2 

64 bytes from 192.168.4.2: icmp_seq=5 ttl=64 time=2.387 ms
^C
--- 192.168.4.2 ping statistics ---
6 packets transmitted, 6 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.831/2.361/2.966/0.330 ms

pokud se pripojim na ten server z ty trojkovy site pres ssh tak mi ssh session zmrzne ...

myslim si, ze mam nejakou chybu v routovani, ci co, napada nekoho neco ???

routovaci tabulka:

192.168.4.0/24 dev eth2  proto kernel  scope link  src 192.168.4.1 
192.168.3.0/24 dev eth2  proto kernel  scope link  src 192.168.3.1 

Diky ..