Tag Info

New answers tagged

1

Simplified explanation: The ISP routes traffic for the 82.5.167.160 network to the router, the router is connected to the 82.5.167.160 network on it's LAN interface so it accepts this traffic, it knows that the firewall is also connected to the 82.5.167.160 network (on it's WAN interface), it therefore routes traffic for the 82.5.167.160 network to the ...


1

Hmm, since the two subnets are masked and cannot really communicate, I would do a NAT on both routers, then ping will work. So you have to NAT the networks.


1

As this has just been bumped to the front page - you probably didn't need the "use public IP address behind XTM" scenarios, and did want to make new VLAN interfaces. Set Interface 0 as External, allocate the public address as you did. Make new VLAN interfaces, one for each VLAN. Set them as 'optional', give the firewall an internal IP address in each VLAN ...


1

You're asking a lot here, and on some fairly specific hardware, so I'll just give some high-level guidance to keep this reasonable. First, the servers. You want them to have public IPs. That's fine and good. However, they are also part of your internal network; give them internal IPs. Then you need to setup port forward policies on the watchguard to map the ...


0

So what am I missing, is there a better approach to the problem? I want that every host on the network could communicate with any other host on the same network, using as less as possible static routes. You can use a VLAN and bridge your wireless and ethernet segments together. With this configuration you will create a single broadcast domain, no ...


0

You will not be able to do this using standard networking APIs. The Linux network stack uses the so-called weak host model, which implies in particular that any address that is assigned to a local interface is considered as local. If you try to send a packet to a local interface, it will be looped locally, and never hit the network. While you could ...


0

I found that a slash notation mask of /32, implies one single host. Thanks Binary Hex Quad Dec 2ⁿ CIDR Number of addresses 00000000000000000000000000000000 00000000 0.0.0.0 2³² /0 4,294,967,296 4 G 10000000000000000000000000000000 80000000 128.0.0.0 2³¹ /1 ...


0

As you said, you have the default chain policy set to DROP. So, you need to have explicitly ACCEPT rule for each type of traffic you want to allow. The following rule will allow traffic passing through your box coming from lan0 interface and going out of interface wan0. iptables -I FORWARD -i lan0 -o wan0 -j ACCEPT Also, it is a good idea to allow other ...


1

without knowing network prefixes of all the networks that all routers in table are being attached to? What makes you think, there is not a table of all the networks? OSPF is Link State routing protocol. So it has to know. (At least for networks inside an area. There are differences routing across areas.) And by the way, usually (I am sure this is true ...


0

You can set up DHCP server and push routes using it: http://superuser.com/questions/874671/how-can-i-inform-mac-os-and-ios-clients-of-vpn-routes Remove persist-tun and pushing IP to client in VPN server configuration file. I have this setup in a company I take care about, works perfectly. Basic idea of this solution is that Windows will deconfigure VPN ...


1

I've found the solution for this in case you still need it: Right Click on every Interface in the RRAS Console in the General section. Select properties and click on incoming filter click new and add every other vlan with its ip address range as destination network except the one you are currently configuring of course


0

Routerboards come with MikroTik pre-installed. Netinstall is a Windows utility that allows you to 'format' a routerboard and do a clean install of Mikrotik RouterOS on it ( Netinstall ). You would only need to Netinstall Mikrotik onto Routerboard if the installation is broken. Otherwise you could just reset its configuration (Password reset). If you want ...


2

Routing table looks okay, look at metric column. Route with the lowest metric will be preferred. Your routing table contains now two default routes and 10.11.12.13 will be preferred over 192.168.178.1 because of lower metric. About the traffic on physical interface; this is also normal because you have listening services which respond for ...


0

As it turned out, a simple postrouting rule did the trick. iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j SNAT --to 1.2.3.4 I also had to delete a bunch of MASQUERADE postrouting rules that were just creating a big mess.


0

Modify /etc/sysctl.conf and enable ipv4 routing. net.ipv4.ip_forward = 1 Then run sysctl -p to apply the settings. To show the current value of net.ipv4.ip_forward , use : sysctl net.ipv4.ip_forward


0

I needed to run sudo sysctl net.ipv6.conf.all.forwarding=1 sudo sysctl net.ipv4.ip_forward=1 iptables -t nat -A POSTROUTING -s 10.0.3.0/24 -o eth0 -m policy --dir out --pol ipsec -j ACCEPT iptables -t nat -A POSTROUTING -s 10.0.3.0/24 -o eth0 -j MASQUERADE on the host to cause it to route the traffic out. My client C can now see other machines on the ...


0

You better start adding another subnet as you suggest two separate network and a router because the Broadcast domain with more the 200 users are considered unstable and poor performance. You cant manage a /16 on same broadcast network


0

Assuming each router is the default GW for the local computers, yo can connect the two networks simply by having proper routes on the routers so that they can access the other side. I.e.: On Router A: 192.168.0.0/24 => Directly connected 10.0.0.0/16 => Router B default (0.0.0.0/0) => Internet GW On Router B: 10.0.0.0/16 => Directly connected ...


0

No, you do not need a bridging device. A bridging device is something that makes two physical networks appear as one logical network, and since you are running a separate subnet on each network you don't need to bridge them. A bridging device is what you would use if you wanted to use the same subnet at both sites. You just need a means of connecting the ...


0

Since you want to affect the traffic generated on the local machine, you need to edit the OUTPUT target rather than the PREROUTING. (Or maybe keep both of them)


0

This'll not work because this is just an IP alias (the interface does not really exist). Anyway, you would need a specific route for 1.1.1.60 on your router, but I am assuming this IS the same machine. I'd personally go for a virtual interface like this: ip tuntap add dev eth7 mode tap ifconfig eth7 1.1.1.60 netmask 255.255.255.255 ifconfig up And ...


1

I'd be surprised if you need a static route on the RRAS server for 192.168.101.0/24 at all, as it is a "directly connected" network - the RRAS server should know how to get to that network without a static route configured. In any event, setting the gateway for 192.168.101.0/24 as the RRAS server's IP on that network is functional, as you have discovered ...


1

An Elastic IP address is a property of network interfaces. That is, it's bound by VPC to the elastic network interface attached to your instance. Your instance's IP stack is not aware of the Elastic IP address. An Elastic IP address is accessed through the Internet gateway of a VPC. The Internet Gateway VPC object is the logical entity that does ...


1

I very strongly suspect that the problem is this line in the qemu host's iptables -t nat -L -n -v: 76 6384 MASQUERADE all -- * * 10.10.15.0/24 !10.10.15.0/24 This is causing original (ie, not return-half) traffic from hadoop2 to driver to be NATted to 10.10.15.1. You could test this hypothesis by exempting just the traffic ...


2

The routing table is a system-wide thing, and not user-specific. So, it is not really simple. The steps are the following: 1: Create the multiple routing tables with the extensive usage of the ip route and ip rule commands. 2: Set up iptables to mark the outgoing packets based on the UID of the sender process. 3: Set up your routing tables based on the ...


0

Here is a full explanation, which might help you understand it all http://lartc.org/howto/lartc.cookbook.fullnat.intro.html



Top 50 recent answers are included