New answers tagged

0

The problem had to do with my router not getting the correct arp information. I fixed the problem by giving my router static arp entries.


0

Connection issues in VPN gateways in Azure are generally related to key refresh times and who initiates the refresh. It is always best to allow Azure to initiate the refresh as required. Ensure that you are meeting the parameters shown on this link


1

The above answer is for older models (4.0). For newer models (5.0-5.4), look here From the article: The Switch Port Analyzer (SPAN) feature is now available for hardware switch interfaces on FortiGate models with built-in hardware switches (for example, the FortiGate-100D, 140D, and 200D etc.) To enable SPAN on a hardware switch via the GUI, go to System ...


1

Layer 2 segmentation refers to VLANs, or Bridges that connect different Layer 2 (data link layer of the OSI reference model) segments. nTier references within Cisco speak - i.e. Core layer, Access layer, Distribution/Aggregation layer are informal and have no direct association to the OSI reference model at all.


5

You've fallen victim to a bad decision made by whoever set up your AD environment internally. More discussion here. Windows Active Directory naming best practices? But the gist is that internally, your AD owns the name example.com in DNS. That name will always and forever (unless you rename the domain) point to your domain controllers. So the only way to ...


0

make sure you don't have WinGate proxies bound unsecured to external interfaces that are reachable from the internet. If you do, then you will be picked up by port scanners, and unless you require authentication, used as an open proxy. Specifically it looks like the WWW proxy is accepting connections from the Internet and performing proxy requests for ...


0

I found out how to do this: docker network create -o "com.docker.network.bridge.host_binding_ipv4"="114.176.98.13" network1 this way exported ports are available at this IP but not on other IP addresses of the host.


1

ipconfig /release ipconfig /renew You could use the above two commands to release and renew the given dynamic IP address. For further information open a windows-shell and type ipconfig --help In the past they where commandline commands, but you can use them in powershell as well. If you want to renew the IP regularly you need to write a cronjob which ...


0

So, for anyone reading, i have managed to solve this. Zebra's Static Routes which allows me to have 2 routes for the one subnet. I had to remove the original route on the cloud box, and then zebra took over and all traffic is sent between those 2, equally... happy days!


0

Begin my imagining a VLAN like a VPN for your LAN. By tagging VLAN on traffic it's as if it's on a different LAN. Now to your specifics: Create the VLAN on the UniFi wireless so the traffic will be tagged based on the SSID they connect to. Then create the VLAN on the Sophos firewall you can segment the traffic and pass/or/block (your choice) traffic to ...


0

I. iptables Did you add the log line after your existing rules ? If you did, there is what I think about your issue. -j ACCEPT end the path of the packet in the rule. So a log line means your 6 rules didn't match. The FORWARD default policies is ACCEPT, so packets are accepted anyway when they hit the end of the FORWARD chain. You should change this ...


1

The problem is now at least partly solved (I'm fine with this). I was testing the network with Windows clients in the beginning, and both PCs had got the Windows 10 upgrade lately. The problem itself was really stupid: Windows didn't response to pings since there is some new security enabled by default in Windows 10. When I added one Linux laptop to the ...


1

First, your default policy in the FORWARD chain is ACCEPT, so you're not actually denying any traffic. This explains why the 20 -> 50 forwarding works. You can fix this with iptables -P FORWARD DROP. As far as the other pings, notice that in your log entries, the TTL is either 127 or 63, indicating the firewall has already made its routing decision and ...


0

localhost is loopback only. It is internal in the machine, private, and not related to localhost on any other machine. If you want to serve on the wired interface, it has to listen on that interface. So you either listen to that one, or * (all), or a list that includes localhost if you need it, plus the wired interface. (in config, sometimes you put an ip, ...


1

10.0.1.1/24 is a private address on your LAN. 70.88.182.1/24 looks like a public-facing address. It looks like you're trying to route your traffic internally and externally at the same time. If your router is a 10.0.1.1/24 (as noted by the netmask 255.255.255.0) everything else needs to be on the same subnet to connect, unless you have a vlan set up (very ...


2

Just code what you need. Something pre-built won't work because you need to identify message boundaries. Otherwise, messages may get interleaved, causing the server to be unable to understand them.


0

We were using Dell blade servers where this problem appeared. After working with the Dell support it seems that we are using IGMPv3 EXCLUDE filtering when joining the multicast group. Apparently exclude mode is not supported by the switch in the blade server. We are recommended to switch to IGMPv3 INCLUDE filter mode. However, we have now stopped using ...


0

SOLVED: I must have installed something which enabled secure ftp, and this somehow disabled the un-encrypted connection on port 21 In the proFTPD.conf file, at the very end, there was a directive to enable modules in conf.d folder in the conf.d folder, there is sftpd.conf, asking to run secure ftp on port 2222 before making any changes I run lsof -i ...


1

Following the suggestion of user228273 i could find configuration that solved the problem: First I created a tap interface named tap0, and I brought it up: ip tuntap add mode tap tap0 ip link set tap0 up if one of the previous command fails, it is probably because you already have a tap0 interface. Use the command ip link show to assess the situation, ...


0

I had a similar issue, which appears to have been caused by a timeout of the xdebug remote connection. If your page is using php with xdebug, perhaps that is causing your issue.


2

You're making life very hard for yourself, I've been dealing with Virtual Connects since pretty much day-one and use them extensively now - what I think you should do is this; Create two VC 'Ethernet Networks', both pretty identical, set preferred to 10Gbps, enable VLAN passthrough and Smart Mode, point one at VC 1 port 1 (or whatever is your main trunk on ...


0

I have taken a very quick look at your last capture file. We can immediately see that the RTT on the end-to-end TCP session is around 50ms or worse. Your client is advaertising a window around 3MB (not 300MB as I originally typed). Put those together and you have an absolute maximum 480Mbps assuming infinitely fast hardware at each end of the TCP ...


0

This is a very interesting topic, as a few years back i had a similar issue with a large corporation that has data centers across the world, most of its data was company oriented and was on private networks. But to the topic at hand, most large networks that require both, network engineers and network administrators. Network engineers and network ...


1

You need to set DHCP Options List for the host. Like this for standard DHCP: host **foobar** { hardware ethernet c0:18:85:e3:13:31; fixed-address 10.1.1.129; option domain-name "**example.org**"; option host-name "foobar"; ddns-hostname "**foobar.mydomain.com**"; } EDIT Like this for libvirt: Please note you must have the patch for libvirt as this Bug ...


1

You need to setup a private network between all your machines. An Azure virtual network (VNet) is a representation of your own network in the cloud. Windows Azure virtual networks are deployed as an overlay network in the Windows Azure cloud and can be configured as isolated, cloud-only networks. Optionally you can easily extend your on-premises network to ...


1

Hi I'm late but in the event you're still curious... The quote from R Steenbergen's NANOG slide is correct. The behaviour is defined in Section 4.3.2.4 of RFC1812, which states: the IP source address in an ICMP message originated by the router MUST be one of the IP addresses associated with the physical interface over which the ICMP message is ...


1

Network transfer speeds vary. Infrastructure - This limits what you can do on the network. LAN will be more stable than WiFi and a Gigabyte connection will have more capacity to transfer files over a local connection than a 10/100Mbps connection. The routing also matters. The more hops there is from client to server would cause delays. Client Device - The ...


0

Not an advertisement - check out a trial of Acronis Access Connect (used to be called Acronis ExtremeZ-IP). From my research, Microsoft frequently changes it's SMB implementation and even if you get it to work at a sane speed it could 'break' at a later release. Acronis stays on top of this for you, for a hefty cost. ...


0

Turns out, configuring my svn client with any proxy solves the problem. This can be done either on the command line (as in @bahrep's answer) or in the servers configuration file. The proxy can be a free public proxy like 50.97.88.2. P.S. I did also contact visualsvn support as suggested in the below answers. They were prompt and helpful just like here, and ...


2

Formula to calculate optimal TCP window size (source): Bandwidth-in-bits-per-second * Round-trip-latency-in-seconds = TCP window size in bits / 8 = TCP window size in bytes In your case: 100 000 000 * .088 = 8 800 000 bits or 1 100 000 bytes This is configurable in the Windows registry in the TcpWindowSize key in a valid range of 0–0x3FFFFFFF (1 073 ...


0

Check Any port blocking from Antivirus running on Host machine or VM's, Also try disabling Antivirus once.


0

This sounds like a routing loop. Do your instances happen to have multiple vNICs attached? Also, check you local routing table on each host. You should see something similar to this: $ route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 0.0.0.0 255.255.255.0 U 0 ...


0

The most secure method would be to not connect them directly to the internet at all. You can use a firewall (either external or the system's), only allowing the ports strictly needed to be accessed by the public internet access through the firewall. Set the default to Deny on the public-facing ports.


1

I have a working setup running on 16.04 (linux 4.4.0-22) that is very similar. Apart from LACP rate and 1G (eno1+) vs 10G SFP+ (eno49+) the biggest difference seems to be the use of auto bond0. # /etc/modprobe.d/bonding.conf alias bond0 bonding options bonding mode=4 miimon=100 lacp_rate=1 Some of these options may be redundant. # ...


0

It still looks like that the problem is related to your firewall or proxy. Most likely, the problem is caused by some transparent proxy that could be setup by your ISP. You say that you've tried using port 443, but did you use HTTP or HTTPS traffic then? Please enable true HTTPS and see whether it makes any difference. svn status -u makes use of PROPFIND ...


2

You mention you are running VisualSVN v3.3.1. Is there a reason you are using such an old version of VisualSVN? That version is now over a year old and could be missing the bug fix associated with the problem you are having. I'd suggest upgrading to v3.5.3 and then seeing if you still have the issue. VisualSVN is a product you need to be very diligent in ...


1

Cat5 and Cat6 have different AWG specs. While they -can- overlap in size, their specs allow different ranges, causing one scenario of "It worked before, why not now." Cat5e: 24-26 AWG Cat6: 22-24 AWG The other side of this is the difference between RJ45 connectors intended for Solid wire vs connectors intended for Stranded wire. Solid: The 8 crimp pins ...


0

One possible reason for this issue is when the machine account password gets out of sync with the domain controller. This can happen, for example, if the computer account in Active Directory is manually removed and re-added. What worked for me was to reset the machine account password by executing Reset-ComputerMachinePassword in an elevated(!) PowerShell: ...


1

The shortest answer: Yes, don't use NAT. Grab a crossover cable, connect the two laptops with the cross over. Setup the network interface cards on the laptops to have static IP addresses on a shared subnet. Change the network type in vmware to bridged mode and bridge on the ethernet adapter. You can't use NAT because NAT creates an "internal" network on ...


2

Rather than doing all this IP address shuffling, consider making all of your instances client on a VPN, each with their own private IP address assigned by you. I think Amazon has something like this in place, but the way I did it was by putting up an instance of the open source Openvpn server ( the Community Edition). My little VPN routed traffic between my ...


0

The problem is the way ethernet negotiates speed and duplex. When both sides are set to Auto, the speed and duplex will be negotiated to the best possible speed and duplex, giving you the best throughput. When you specifically set the speed on one side, negotiation doesn't happen. If the other side is set to Auto, it can detect, not negotiate, the link ...


0

Ephemeral public IP addresses (drawn from a shared pool) are assigned at instance start: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-instance-addressing.html#concepts-public-addresses. On the other hand, elastic IPs (EIPs, to which the said account limit applies) are owned by your account (until released) and are explicitly associated with EC2 ...


0

I came up with an ugly hack for which I'd rather not get any credit, but hopefully it'll help people get started and do more important things while waiting for a proper answer/fix: auto bond0 iface bond0 inet manual pre-up modprobe bonding mode=4 miimon=100 pre-up ifconfig bond0 up pre-up ip link set eno1 master bond0 pre-up ...


-1

For me on Debian 6 squeeze it was as simple as checking the SSH service: sudo service ssh status And finding nothing existed (with the message ssh: unrecognized service) just installing the service: sudo apt-get install openssh-server This also works if you're not getting an SFTP connection, as SFTP is a subset of SSH (whereas FTPS is a subset of FTP). ...


0

You could use one subnet per VLAN to create multiple broadcast domain for multiple ip ranges. And if you want to communication between those virtually separated vlans (ip address ranges) within a switch, use Router on stick and configue trunck to interface which is connected between Router n switch.


0

You can contact support to request a resource limit increase.


0

It looks like i missed that net.ipv6.conf.default.autoconf was set to 1. Adding a file in /etc/sysctl.d to suppress this at boot solved the problem for me: root@wopr:~# cat /etc/sysctl.d/ipv6.conf net.ipv6.conf.default.accept_ra=0 net.ipv6.conf.default.autoconf=0 net.ipv6.conf.all.accept_ra=0 net.ipv6.conf.all.autoconf=0 net.ipv6.conf.eth0.accept_ra=0 ...


1

1800 seconds sounds like a default timeout for a Router Advertisement. My first guess would be that there is a Cisco router on the network that is configured with ipv6 nd ra suppress on the interface. In that mode the router will send out an RA when a host requests one with an RS, but doesn't refresh it regularly. A host sends an RS when bringing up the ...


0

have you checked the host based Firewall on the VM? is it allowing ICMP traffic? this would explain why the VM can ping the host but not the other way round


1

With the assistance of a few friends helping me research this, I was FINALLY able to get it working. Had to run this script in order to properly forward TCP/IP traffic: #!/bin/sh PATH=/usr/sbin:/sbin:/bin:/usr/bin # Primary Connection - 2085426230 IF1=eth0 IP1=172.16.0.2 P1=172.16.0.1 P1_NET=172.16.0.0 # Secondary Connection - 2085420213 ...



Top 50 recent answers are included