iproute2 (ip) is a tool used to manipulate network configurations.

learn more… | top users | synonyms

-1
votes
2answers
1k views

Route forwarded traffic through eth0 but local traffic through tun0

I have a Ubuntu 12.04/Zentyal 2.3 server configured with WAN NATed on eth0, local interfaces eth1 and wlan0 bridged on br1 on which DHCP runs, and an OpenVPN connection on tun0. I only need the VPN ...
0
votes
3answers
252 views

Using DNS in iproute2

In my setup I can redirect the default gateway based on the source address. Let's say a user is connected through tun0 (10.2.0.0/16) is redirect to another vpn. That works fine! ip rule add from ...
0
votes
2answers
1k views

Set up router with 2 WANs and multiple subnets

I'm trying to set up a Debian box as a router for an office. I need to have 3 subnets in the LAN and 2 WAN connections, and I want one of the subnets to ALWAYS use WAN 1 and the other subnet to ALWAYS ...
5
votes
1answer
1k views

Utilize two gateways on the same network same interface with load balancing

My setup is two ISPs on a single interface and single network. I can either set my default gateway to 192.168.0.1 or 192.168.1.250 and either work. Edit: Netmask (as noticed in the comment) is ...
2
votes
3answers
100 views

what's the difference between ICMP prohibited ICMP unreachable?

If I want to forbid a route to response a network, should I use ip route add unreachable 209.10.26.51 or ip route add prohibit 209.10.26.51?
1
vote
1answer
2k views

Iproute2: Routing with multiple networks and multiple gateways

I have a Linux box running Ubuntu 10.04 with three interfaces: eth0, eth1 and eth2. I am planning to use it as a WAN router for 4 public subnets assigned by two different ISP's. Here are the subnets ...
3
votes
1answer
297 views

NAT box load-balancing with iptables and 4 DHCP uplinks

I am trying to configure a router which provides Internet to a couple hundred users. This router has 4 basic cable uplinks at its disposition, which all use DHCP and have a capacity of around 10/1 ...
2
votes
1answer
794 views

iptables asynchronous NAT. packets drop after prerouting table

I have a Centos server acting as a NAT in my network. This server has one external (later ext1) interface and three internal (later int1, int2 and int3). Egress traffic comes from users via int1 and ...
0
votes
1answer
953 views

What's the difference between GRE and IPIP tunnel?

And which one is better for connecting two linux machines?
1
vote
1answer
105 views

Linux networking and routing

I have 3 networks: 192.168.1.0/24 192.168.11.0/24 192.168.50.0/24 192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
2
votes
1answer
131 views

Perform iproute2 actions based on a match criteria

Is there any way to use a wildcard or other matching criteria when using iproute2? I have multiple tunnel interfaces that follow a naming convention. Something like ip tunnel del blah-* (which gives ...
3
votes
2answers
1k views

TC hashing filters - single rule deletion

For traffic shaping I'm currently using a setup that looks exactly like the setup from LARTC, on this page: http://lartc.org/howto/lartc.adv-filter.hashing.html I have a simple problem with that - ...
6
votes
2answers
4k views

How many custom route tables can I have on Linux?

I've been working with custom route tables on Linux, and I'm a bit confused by some of the documentation and behavior of the "ip route" command. It seems that the only valid values should be 0-255 ...
1
vote
1answer
555 views

linux ip route via 2 gateways, 3 interfaces

I have 3 interfaces. I'll replace the public ips with 10.x.x.x. eth0: ips: 10.1.1.64-10.1.1.70 mask: 255.255.255.0 gateway: 10.1.1.1 ip route table: gw1a eth1: ip: 10.1.1.71 mask: 255.255.255.0 ...
3
votes
3answers
3k views

Advanced routing problem

I have 2 internet links using 2 ADSL routers and I need to give access to the Internet for the 192.168.0.0/24 network. I have to route outgoing traffic based on port number, protocol, … using ...
1
vote
1answer
331 views

iproute and nat across devices

I've got the following configuration: vlan123@eth0 - range 1.2.3.0/24, with 1.2.3.4 assigned to it br2000 - range 10.2.3.0/24 In the ip route I see: 10.2.3.0/24 dev br2000 proto kernel scope link ...
4
votes
2answers
636 views

Blackhole route private intranet traffic

I have a private network with a handful of Linux routers all route sharing via OSPF. How do I blackhole private network ranges that I don't have routes for? In other words, I want to be sure I NEVER ...
0
votes
2answers
290 views

set default route interface in iproute2

I have two machines. One runs arch linux and another runs fedora. arch uses iproute2. so i need a conversion for iproute2 from route. this command will set the default interface to ppp0. I have ...
0
votes
2answers
438 views

Troubleshooting firewall and routing on Linux

Are there any tools or API hooks for troubleshooting iptables or routing on Linux? (besides the obvious -j LOG) In other words: what to do when tables with 200 or 300 firewalling rules after adding a ...
0
votes
1answer
1k views

Mikrotik route syntax to create a new routing table

I want to replace my linux gateway box to Mikrotik. But I never found how to write this linux's iproute2 command in mikrotik's way: ip route add default via 10.1.1.1 table browser ip route add ...
2
votes
1answer
633 views

How to change netmask with iproute2?

With ifconfig we can change the netmask with the folowing: ifconfig eth0 netmask <new netmask> How can we do this with the command ip? I know ifconfig is deprecated and this mostly why I ...
0
votes
2answers
725 views

Reported bandwidth usage differs between iproute2 and ifconfig

My group has a server set up to image our workstations using FOG. I was a bit curious to see how much bandwidth we were using. When I run ifconfig eth0, the TX/RX lines read RX packets:166949376 ...
0
votes
2answers
288 views

How can I reroute heavy traffic using iproute2

I am having two ISP connection (Link1 and Link2), I want to route all downloads traffic which are of size more than 1MB through Link2. I have created a routing table Link2 and routing all packets ...
2
votes
1answer
413 views

Linux route cache shows high RTT for loopback - is it normal?

Here are parts of route cache from three different servers that are NOT under high load. # ip route show cache | grep -B 1 rtt local 127.0.0.1 from 127.0.0.1 dev lo cache <local> mtu ...
0
votes
1answer
251 views

Network interface selection

Suppose I have more than a network interfaces and I want to selectively use them per application. eth0 is the standard interface with the standard gateway in the main routing table eth1 is another ...
1
vote
2answers
164 views

getting linux kernel routing rules into version control

We currently use a number of linux routers, and currently a number of the team tend to jump into servers and change the routing rules when needed, and the auditing is becoming incredibly tedious. For ...
2
votes
1answer
2k views

Linux port based routing : reponse packets discarded

I would like to use port-based routing on my Linux local gateway. Here is my network diagram : 192.168.42.148/24 192.168.42.1/24 192.168.44.2 192.168.44.1 ...
1
vote
1answer
3k views

Linux split access (multiple internet connections w/ load balancing)

Short story: I've got a faulty cisco 1811 on my hands. It's a dual wan fixed configuration router. I had it setup with route maps to do load balancing. It works but every couple of hours it shits ...
0
votes
1answer
119 views

SOCKS4-5 network device driver

There are methods of forcing programs to use SOCKS4-5 proxy's, such as socksify, tsocks and other LD_PRELOAD hijacking methods. Is there a way of having a SOCKS proxy network device, such as one ...
13
votes
3answers
3k views

How do you display the IPv6 NDISC cache in Linux?

Suppose you've configured IPv6 proxy NDP on one of your Linux systems like so: ip -6 neighbor add proxy 2001:db8:1234::5 dev eth1 How do you verify that the configuration took? ip -6 neighbor show ...
2
votes
1answer
1k views

How do I disable multipath route caching in linux?

It seems that there used to be a config option to disable multipath ip route caching in linux, but has since been removed? Is there any workaround for this, or method of disabling this behavior?
1
vote
1answer
3k views

iproute2 rules and iptables NAT… what is the difference?

We have 2 different ISP connections. Our previous "IT guy" setup our firewall like so: When /etc/rc.local was executed on startup, it did a bunch of ip rule add and ip route add commands in order to ...
1
vote
0answers
1k views

Routing only some local IPs through VPN on dd-wrt

Much similar to this entry: http://serverfault.com/questions/94283/using-dd-wrt-to-connect-to-vpn-and-forward-all-traffic-of-certain-devices-through , I have set up my router with dd-wrt + OpenVPN to ...
1
vote
1answer
2k views

Howto redirect all SSDP packets to a specific interface via iproute2?

I have a faulty app which is sending SSDP packets on the wrong interface. I made the dev aware of the problem and it will be fixed in the new release but in the mean time I was hoping I could use ...
0
votes
3answers
2k views

How do I use the `tc` command to give the 1st queue priority?

Lets say I have 3 queues (# indicates data): Q1: (in)[ ###](out) Q2: (in)[ #####](out) Q3: (in)[ #############](out) Lets say I put all my ICMP packets in Q1 and all the ...