Questions tagged [iproute2]

iproute2 (ip) is a tool used to manipulate network configurations.

Filter by
Sorted by
Tagged with
0
votes
1answer
39 views

Routing between two networks

Basically I would like to know what should I do to connect two PCs in different networks and make them to see each other. The diagram is like the following linux-pc-1-1 (192.168.0.2 eth0) <---> (...
0
votes
0answers
15 views

Interactions between iptables and ip route configurations

I started learning routing under Linux and confused about configurations that are done using iptables and ip route. I saw a diagram here and here that are about stages that iptables chains and rules ...
0
votes
1answer
96 views

Unable to Configure WireGuard to Use Secondary IP Address Instead of Main IP Address of the Server

The Setup The main ethernet interface of my server is enp8s0, has one public IP address (116.202.221.254—server's main IP address), and here's how it is set up. # ip addr show enp8s0 2: enp8s0: <...
0
votes
0answers
13 views

netem loss when netem is attached to a another class

I have been trying to use netem to simulate packet delay, loss, corruption and duplication. So far I only was able to successfully run delay. All the other operations only worl when netem is the root ...
0
votes
0answers
40 views

how to apply TC htb class to each of IPs in an IP range separately?

I use HTB for TC and mark packets with iptables. First I mark a range of IPs (like 192.168.1.0/24). Now I want to apply a htb class to each of these IPs separately. If I add a class and a filter for ...
0
votes
0answers
23 views

IP Routing - Multiple Interfaces

I am using Elastix 2.5 (CentOS 5.11) with 4 NIC's (1 for WAN and 3 For SIP Trunk using IP Authentication) eth0 - WAN IPADDR=75.XX.XX.162 NETMASK=255.255.255.240 GATEWAY=75.XX.XX.161 eth1 - SIP ...
0
votes
1answer
48 views

OpenVPN Server on a Multi-WAN Router

I have a OpenVPN Server on a MultiWAN Router (Ubuntu Based). The Problem is, that incoming packages not leaving the same WAN interface where they entered. I tested already with iptables MARK rules in ...
0
votes
0answers
29 views

Multiple NAT GRE tunnel linux issue

I have a problem with my configuration of GRE Tunnels, it is very strange because the transfer of packets works without problems ICMP, TCP but when I try to send UDP the tunnel only works for an ...
0
votes
1answer
46 views

gretap tunnel return traffic not being handled

I'm using iproute2 to add a GRE layer 2 tunnel with a vlan tag as shown below. ip link add name gre1 type gretap local 10.0.0.2 remote 8.8.8.8 ip link add name gre1.100 link gre1 type vlan proto 802....
1
vote
1answer
282 views

Response packet on the same interface as incoming in LAN

Currently, I'm struggling with the following scenario: I have a server with 2 interfaces in 2 separate LAN subnets. IF1, IF2 I have a laptop which has an IP address from the first subnet When I try ...
4
votes
1answer
292 views

How is Netflix tracking that I'm behind a VPN?

Disclaimer: This is not a "I need VPN to surf Netflix". Surfing without VPN at this site allows Netflix. The question is instead the other way around: "There is a PC that needs to Internet through ...
0
votes
0answers
24 views

Unable to change link-local address for tunnel with iproute2

I have a couple of HE sit tunnels on Ubuntu 18.04 box. Only first one works as expected and I suppose the reason is almost same link-local addresses (generated from same MAC). What I'm trying is to ...
0
votes
1answer
120 views

IPsec tunnel between 2 remote host

I'm using mininet, I have created a ESP tunnel between two machine such that if I ping from one machine to other then I am seeing ESP packets, and everything works fine. Here below the commands used: ...
0
votes
0answers
52 views

Source policy-based routing to couple of sit tunnels. Works only first one

At Ubuntu Server 18.04 I want to have this behavior: curl -6 --interface 2001:470:e09f::3 ifconfig.co/ip 2001:470:e09f::3 curl -6 --interface 2001:470:c160::4 ifconfig.co/ip 2001:470:c160::4 But,...
1
vote
1answer
443 views

Ping does not work on TAP interfaces with bridge

I am trying to understand the linux bridging and local ip rules, I have following topology on my linux laptop. br0 ___________|__________ | | |tap0 ...
0
votes
0answers
146 views

ip rule lookup table one, then table two

all ISP and network comminity! Now I trying setting up soft-router on Linux # ip rule 0: from all lookup local 32760: from all iif lo lookup rt2 # for local programs like whois,ping.. 32761: ...
1
vote
0answers
103 views

How to group interfaces for the purpose of using ip-rule's suppress_ifgroup feature?

I found out about ip-rule's "suppress_ifgroup X" feature which seems to allow me to tell the kernel to ignore a route from the given table with an outgoing interface that belongs to that group X. But ...
0
votes
1answer
31 views

Filter ss process output without using grep

ss -p can give the process name, process id (PID) and the file descriptor associated with the connection. Example: ss -tuanp [...] tcp ESTAB 0 0 x.x.x.x:59594 x.x.x.x:993 users:(("...
0
votes
0answers
59 views

How to connect to OpenVPN client on my own VPN Server [ Proxy two times ]

I have written a proxy app with Go. Here is how it works: At first My app is listening on a port for UDP connections. When it receives a new connection, it creates a tun interface pointing to a NAT ...
0
votes
1answer
43 views

tc filter … ht HANDLE … does not allow buckets of 8 bits

TC-u32 man page states that HANDLE is: HANDLE := { u12_hex_htid:[**u8_hex_hash:[u12_hex_nodeid]** | 0xu32_hex_value } so the size of the bucket should range from 0x00 to 0xff as it is a u8 value. ...
1
vote
0answers
113 views

Use iptables to load balance between multiple AWS elastic network interfaces

Environment: Amazon EC2 m4.4xlarge, running Amazon Linux 2 AMI 2.0 I would like to use iptables to load balance https requests between a set of elastic IPs that are assigned to multiple Amazon ...
1
vote
1answer
381 views

Netplan: Route multiple parallel internet connections with port forwarding to a single server with 1 network port

Here's my network diagram: 56.56.56.56 192.168.0.1/24 MAC:AA:BB:CC:DD:EE:01 ___________ ---| Modem 1 |------- | ___________ ...
0
votes
1answer
70 views

How to swap(with yum) two rpms on fly?

I'm trying to install MPTCP(Multi-Path TCP) enabled kernel and tools on a CentOS7 box according to the installation doc. It needs 3 rpm packages to be installed. I encounter a trouble when I ...
1
vote
1answer
295 views

hostapd not working anymore

I had a working hostapd file and a functioning wifi hotspot (device is busybox, iMX6 board). While the hotspot was up and running, I was doing manual routing connected to the device via ssh (I'm able ...
0
votes
1answer
115 views

Need to create route to bypass VPN which allocate full traffic as default route

I have 2 VPNs: utun0 and ppp0. ip r s default via 175.15.105.123 dev utun0 default via 192.168.0.1 dev en0 127.0.0.0/8 via 127.0.0.1 dev lo0 169.254.0.0/16 dev en0 scope link 10.0.15.0/24 via ppp0 ...
1
vote
1answer
589 views

Linux bridge_slave changes automatically to forwarding state

I'm trying to change the state of bridge slaves on Linux brigde system and It has very weird behaviour, changing all the time the port state to forwarding. I.E: Create a bridge with dummy interface ...
0
votes
1answer
41 views

iptables: Marked packets not routed via configured route

I need to configure a firewall server with two internet lines (A on eth1, B on eth0) and an internal network (C on eth2). Additionally to the default routing table (via A / eth1), I have two routing ...
-1
votes
1answer
248 views

How to understand this output of ip route list table 255 [closed]

broadcast 100.125.71.152 dev rmnet_data1 proto kernel scope link src 100.125.71.153 local 100.125.71.153 dev rmnet_data1 proto kernel scope host src 100.125.71.153 broadcast 100.125.71.155 dev ...
0
votes
1answer
390 views

How to multiple incoming from interface[s]

I have 3 interface(2 wan, 1 local) and enabled forward, but only one incoming interface(ppp0) can to local destination, the following is my iptable command: iptables -t nat -A PREROUTING -i ppp0 -p ...
0
votes
1answer
224 views

How can I add (not replace!) a default route upon OpenVPN connection?

When I run sudo openvpn foo.conf I do not yet have a default gateway defined. Once the connection is established, I run sudo ip route add default via X.X.X.X, where X.X.X.X is the local IP of the ...
-1
votes
1answer
156 views

Linux route policy based on tos returning wrong gateway

I have a simulated ad-hoc network running on Docker, using Ubuntu 16.04 as a base. I have a number of routing tables. The table in question, table 102, appears as: root@b22e0eafe06d:~# ip route show ...
1
vote
0answers
281 views

iproute2 routing through multiple networks with rt_tables

This question is similar to many others I've consulted while seeking an answer, both on ServerFault and elsewhere, but I'm stuck because as far as I can see I've set this up correctly but I'm have no ...
0
votes
1answer
2k views

“ip rule to” works but “ip rule fwmark” fails - why?

I have a CentOS 6 (kernel 2.6.32) router with working OpenVPN client on it, and I want to redirect some traffic via VPN server. Client (192.168.60.159) sends request to router (192.168.60.6:1443), ...
1
vote
3answers
1k views

How to know a virtual NIC's type on Linux?

On a Linux box, I see there exists a lot of virtual NIC's. If I want to know what's the link type when created them using 'ip link add ... type ...', what do I do? Thanks, woody
1
vote
0answers
999 views

Route QEMU VM traffic through hosts VPN

tl;dr Host connects via VPN to the internet and a VM on this host doesn't go through this VPN (but it should). I think the network config isn't quite correct. The host The host (arch Linux) connects ...
0
votes
1answer
848 views

dump all routes of all tables with iproute2

I want to save all routes of all routing tables. I have this script: #!/bin/bash DUMP=dump.log for i in `seq 0 255`; do routes="`ip route show table ${i}`" if [ ! -z "${routes}" ];then ...
0
votes
1answer
3k views

Not able to add static IP with Netplan on Ubuntu 18.04

so I have the following problem. There is dedicated Ubuntu 18.04 host, that is supposed to be assigned a static ip address. There are two interfaces, eth0 and eth1. eth0 ist getting its address via ...
0
votes
1answer
425 views

How do I load balance outgoing connections with iptables and iproute2?

I have a server behind two public facing gateways INTERNET | | GW1 GW2 | | SERVER GW1's IP is 192.168.w.x, MAC aa:bb:cc:dd:ee:ff GW2's IP is 192.168.y.z, MAC ff:ee:dd:cc:bb:aa # note: w != y ...
0
votes
1answer
596 views

ip route and rule on boot

I'm trying to have the following rule and route added automaticaly on boot. Adding them manually make things work. I'm running CentOS. ip rule add from 10.1.10.10/10 dev my-tun table my-table ip ...
1
vote
0answers
173 views

Setting up classless static routes manually in GCE

In GCE, the DHCP server return the IP address with mask of 32 bits. Making the instance the only one in its subnet. It also return couple of static routes (RFC3442) that need to be configured. Example ...
1
vote
1answer
1k views

Where to save ip rule, ip route and iptables commands on Debian Stretch?

To make an SSH server work properly while still maintaining an OpenVPN connection, I have a small mixture of ip-related commands I need to persist and run on startup on a Debian Stretch (actually ...
2
votes
2answers
767 views

Secondary IP in its own netns namespace

Is there a way I can move a secondary IP into its own namespace while keeping the primary IP on the original device? If I have 10.0.0.1 and 10.0.0.2 on device eth0, but I want 10.0.0.2 to be in its ...
2
votes
1answer
1k views

iproute2 interface statistics seem wrong

For some reason, ip -s link does not show the same numbers as /proc/net/dev, specifically the overrun count. For a given interface, ip shows no overrun packets: $ ip -s link show eth-ext1 7: eth-...
0
votes
0answers
542 views

Packets routed through wrong interface

This is a follow up on ip rule shouldn't beat ip route. I've configured everything as per my last question. But... Running: $ ip route get 10.10.10.10 from 10.0.0.13 iif test-interface 10.10.10....
1
vote
0answers
969 views

Bidirectional NAT with iptables

In short, I have a cluster system at my hands, for which I have to route traffic through its master. Routing traffic from the nodes to the outside world works, but routing traffic from our department'...
0
votes
0answers
49 views

Mystery persistent /8 on routing table

I have the below route listed, that is persistent over restarts. "route -n" 69.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 eth0 and "ip route" 69.0.0.0/8 dev eth0 proto ...
0
votes
0answers
3k views

how to add multiple default routes ubuntu 16.04 lts

I have the following commands and outputs Here are my current commands (this work fine on RHEL system but not on ubuntu) ip route add default via 10.1.1.1 dev eth0 tab 1 ip route add default via 10.1....
0
votes
1answer
878 views

Linux routes for point-to-point Ethernet network in presence of a default route

SOLUTION: There's a typo in the IP address on my laptop Ethernet interface (see the accepted answer). The following writeup is most probably proper setup. I'd like to communicate with Raspberry Pi (...
1
vote
1answer
305 views

iproute2 mark vs manual rule in table

I have a problem! So, I have two providers and a routing server on CentOS7. I can not get the marking to work through the second provider. The essence is this: With the first provider everything is ...
0
votes
2answers
92 views

Split access from multiple uplinks

Our setting is as follows: +---------+ +------------+ / | | | Modem | / +------...