Hot answers tagged

36

If the ISP won't give you more than a /64, then that ISP sucks. If it is any relief I can tell you that I have to deal with ISPs that suck even more than that. Around here it is perfectly normal to take public IPv4 addresses away from customers and put them behind a CGN. And if you ask them for IPv6 addresses, they will tell you that they are not offering ...


29

Default route (aka gateway address) has to be owned by something that is capable of forwarding packets to the rest of the internet, and which is willing to do so. It doesn't have to be the "principal" IP address of the thing that owns it (whatever that means). It can be a logical address that floats between two or more devices, and in high-availability ...


26

If you need a temporary dirty workaround to a single or a handful known server ips, the simplest solution should be the static client side routing option. In my case I added my desired destination server (192.168.1.100) to my routing table on my linux client via: route add 192.168.1.100 dev tun0 Afterwards, remove this static route with the route delete ...


25

You need to be able to log in on another host on the same network segment. Some of the ways to get access to the misconfigured host requires root on the intermediate host, but there also is one easy way to get access without needing root on the intermediate host. The easy way to access the host using IPv6 ssh -o ProxyCommand='ssh -W [fe80::42:ff:fe:42%%...


24

It is possible to solve this using NAT; it's just not very elegant. So under the assumption you couldn't solve this by having internal nets which have so uncommon network numbers as to never actually come into conflict, here's the principle: As both the local and remote subnet have identical network numbers, traffic from your client will never realize it ...


24

You should know three things about class-based-routing: Class-based routing was a simpler system that was abandoned (in 1993) long before most people ever heard about the Internet. In all likelihood, nobody you will ever know has used it. And if any of your network equipment is that old, you should seriously consider alternate employment. The system used ...


23

The only people I have ever met who use the terms "Class A/B/C" are people who are using them incorrectly to mean a /8 or a /16 etc (except for just one person who used "Class A" to be the first octet, "Class B" to be the second octet, etc. But he was an idiot who refused to change his phrasing even though it led to so much confusion). So go ahead and learn ...


19

An ip address consists of four numbers separated with a dot between each. You read it from left to right, and each dot adds a level of detail. This is very similar to a real address, think about: Country.City.Street.Housenumber I'm sorry, but this is simply wrong. The dots do not have any significance. They are only there to make a 32-bit binary number (...


15

The IP address of the gateway can be any valid host IP address in the subnet, i.e. not the network address itself nor the broadcast address. This IP address does not need to belong to a single computer or router, it can be a "floating" IP address used by several gateways. Check out the Wikipedia articles on HSRP, VRRP, GLBP, or CARP. For example, when the ...


14

In a word, yes. People will often talk about it in the same way that the course material does. Nobody uses classful networking, or at least nobody I've encountered; during infrastructure/architecture planning people will often say things like "we'll set them up with two class C's here." It's easier than saying "we'll give them a /23" or "172.16.0.0-172.16....


13

Those ranges you list are described in this RFC 1918 - Address Allocation for Private Internets The title gives away their use case: "... for Private Intranets". All IP Address ranges are technically routable including those listed in the RFC. But they are often referred to as non-routable. That's because they are not meant to be routable or ...


13

A NAT Gateway (as well as a NAT Instance, for what it's worth) must be in a public subnet because only devices on public subnets can actually use a public IP address. That's what makes a public subnet a public subnet. The pedantic definition of a public subnet is a subnet whose associated VPC route table has at least one route pointing to the Internet ...


13

You can use CloudFormer to export your existing AWS infrastructure into CloudFormation template. Alternatively you can use terraforming ruby gem to export your infrastructure as Terraform files.


12

The best start is to refer to VPC and Subnet Basics which explains the VPC addressing and sizing reqirements. Not sure if you are familiar with CIDR addressing? Essentially the bigger the number after / the less hosts and subnets you can fit inside such network. For example: Your VPC CIDR is 172.22.130.0/28 where /28 means that out of the 32 bits in the IP ...


11

Yes, pressuring your ISP to not suck is the preferred option. RIR allocation policies assume that the ISP is giving each customer a /48; there is absolutely zero reason for the ISP to not do that. IPv6 is not a fan of smaller subnets, however the only thing that is supposed to break, that I'm aware of, is SLAAC. You'll have problems with bugs and ...


11

I guess I'm going to be the contrarian on this one. IMO, too many people make too much of a fuss trying to correct people when they talk about class-full ip addressing. The RFC 1918 reserved addresses were carved out of what was at the time the class-full address space. In fact, every piece of documentation I've ever read about the RFC 1918 addresses refers ...


11

Route Print on my local machine shows: 192.168.10.99 255.255.255.255 On-link 10.168.10.154 26 That is why, the On-link routes are accessible locally without any gateway, many times they are created when you connect via dial-up (to Avaya device maybe). You have to find out why this route is being created. Maybe it was just a left over or was added ...


10

Based on the combination of an IP and a subnet mask the OS can figure out if a destination IP that it's user space application wants to contact is in it's local network or needs to be sent via some router. If it needs to be sent via a router, it does a routing table lookup to determine which router to use.


10

The best algorithm is to start blocking separate addresses. Then when multiple addresses are blocked in the same /64 you block the whole /64. Repeat that for bigger aggregates. Prefixes are usually given out on nibble boundaries (multiples of 4, or one hexadecimal digit). Do you might want to scale from /64 to /60, /56, /52 and /48. A /48 is usually the ...


9

I’ll pose and answer a few related questions along the way: Why do you see 255.255.255.0 so often? Why 192.168.0.1? Why 127.0.0.1? Why such weird numbers — 255, 192, 168, 127? 8+8+8+8-bit dotted decimal Internet addresses like 194.60.38.10 use dotted-decimal notation to split 32 bits up into 8+8+8+8 bits. Dotted-decimal means converting† each number to ...


9

kasperd posted a great answer detailed enough for me to learn how I can recover from situation in the question. This answer is the exact step-by-step of how I did it. SSH to server on same physical network Using arp -a or ip neighbor list as root find the MAC address of misconfigured server. Using MAC to link-local converter find link-local for ...


9

"Logical entity" in your usage is a tiny bit confusing. But I'll try to answer it best I can. From my experience, a gateway in an IP configuration is usually a physical device. While it doesn't have to be a computer in the traditional sense (it can also be a network appliance) it does have to be device. As you may know, the purpose that a default gateway ...


8

It is not possible to change the CIDR block for a VPC. So if you have created the VPC with 192.168.0.1/24, then that's as big as the VPC can get. You'll have to re-create the VPC to get more space. Also, it's not possible to change a VPC subnet. You can only delete it and re-create it differently. On top of that, it's not possible to delete a VPC subnet ...


8

I'm not sure that there is an official definition of "netblock", but in common usage, I've most frequently heard it used in reference to an IP address allocation assigned by an RIR to another organization. "Subnet", on the other hand, is a more broad networking concept, used when referring to a portion of the IP addresses that are part of a larger network ...


8

You can always try to ping to the broadcast address of your subnet. It depends on your local network setup, but you can find it out with $ ifconfig wlp4s0 | grep Bcast inet addr:192.168.199.47 Bcast:192.168.199.255 Mask:255.255.255.0 Pinging from Linux requires the -b commandline switch, which is kind of a precaution of the command. However, this ...


8

You don't need even that detail. Simply treat them as magic values: Short answer: An IP address has four blocks of digits. There is a standard notation called CIDR where if you put /24 at the end it means every IP address that starts by the same three numbers. So if you put 192.168.120.0/24 that means that access is allowed from every IP address from 192....


7

You more likely want to create a bridge with the 8/9 interfaces and then assign an IP address to that bridge (bridge-utils packet, command 'brctl add'). This way the bridge will act like as a switch and can have an IP address into your subnet.


7

I still don't understand why /22 instead of /23 Because you have calculated your subnets wrong, and you are trying to use IPs from two different subnets. Or to put it a different way, if you use a /23 bit mask your starting address for the range, must be the first address for that range. 192.168.1.1 is not a starting address for any network described by a ...


7

STILL WONDERING Why doesn't the provided AWS DNS Server work in this case? PROBLEM The problem was that DNS names weren't resolving via the local DNS server than Amazon provided when originally creating the VPC. I discovered that I could make outgoing HTTP/HTTPS connections to IP addresses, which didn't need to contact a DNS server to resolve. SOLUTION ...


7

IPv6 usually uses a /64 per subnet. Routers send a Router Advertisement or RA to the LAN. This RA contains the basic settings for the LAN like which prefixes (often a single /64) to use, whether the router can be used as a default gateway, whether hosts are allowed to auto-configure themselves and whether there is a DHCPv6 server on the LAN (and what kind of ...


Only top voted, non community-wiki answers of a minimum length are eligible