[ale] Need help with routes
Boris Borisov
bugyatl at gmail.com
Thu Aug 9 11:44:20 EDT 2012
Sometimes I what to go back to slackware with its simple and
straightforward rc.local file :)
On 8/9/12, Michael H. Warfield <mhw at wittsend.com> wrote:
> On Thu, 2012-08-09 at 10:37 -0400, Chuck Payne wrote:
>> Erik,
>
>> I can't follow. Maybe I should have asked how to you get what is in
>> CentOS/RHEL
>
> Assuming we are talking CentOS/RHEL/SL 6 (use to be different)...
>
> For eth0...
>
> /etc/sysconfig/network-scripts/route-eth0
>
> --
> 172.21.1.0/24 via 10.0.0.254
> --
>
> For eth1...
>
> /etc/sysconfig/network-scripts/route-eth1
>
> --
> 10.1.0.0/24 via 10.1.0.254
> --
>
> Not sure what kind of vpn you are talking about but most vpn's don't
> require special entries there if the system in question is an endpoint
> system for the vpn tunnel itself. The vpn subsystem will build and tear
> down your routes and policies as required by the vpn has it comes and
> goes. Generally, setting up static routes here are almost guaranteed to
> fail unless it's a vpn that's anchored on that gateway. If you're doing
> something like this on the system that's actually setting up the vpn
> then you are almost certainly doing something wrong if it's an OpenVPN
> (routed) or Openswan/IPsec (policy) vpn. Also true of Cisco ASA based
> Anyconnect / OpenConnect type vpns.
>
> Regards,
> Mike
>
>> route-eth0
>>
>> I was told that I could set that up with iproute2. I see from what you
>> have give em this...
>>
>> Setup system's static routes based on the "/etc/network/routes"
>> definition
>>
>> How can I set that up?
>>
>> Chuck
>>
>> On Thu, Aug 9, 2012 at 7:54 AM, Erik Mathis <erik at mathists.com> wrote:
>> > I'm assuming you wanted persistent routes?
>> >
>> > http://www.debian.org/doc/manuals/debian-reference/ch05.en.html
>> >
>> > The quick and dirty to add a route with iproute2
>> >
>> > ip ro add 1.2,3.4/net via ${gateway}
>> >
>> > -Erik-
>> >
>> > On Wed, Aug 8, 2012 at 4:36 PM, Chuck Payne <terrorpup at gmail.com>
>> > wrote:
>> >> Guys,
>> >>
>> >> I am trying to get a proxmox ve server up and running. I am trying to
>> >> get routes working on this server, proxmox ve using debian as it's
>> >> base.
>> >>
>> >> This server is our data center, we can access all server from our
>> >> office via vpn connection. Most server that are running RHEL the
>> >> route looks like this.
>> >>
>> >> # route
>> >> Kernel IP routing table
>> >> Destination Gateway Genmask Flags Metric Ref Use
>> >> Iface
>> >> 10.0.0.0 * 255.255.255.0 U 0 0 0
>> >> eth0
>> >> 10.1.0.0 10.1.0.254 255.255.255.0 UG 0 0 0
>> >> eth1
>> >> 172.21.1.0 10.0.0.254 255.255.255.0 UG 0 0 0
>> >> eth0
>> >> 169.254.0.0 * 255.255.0.0 U 0 0 0
>> >> eth1
>> >> default 10.0.0.254 0.0.0.0 UG 0 0 0
>> >> eth0
>> >>
>> >>
>> >> 10.0.0.0/24 is prod
>> >> 10.1.0.0/24 is backup
>> >> 172.21.1.0/24 is vpn
>> >>
>> >> On the proxmox server I have two nic that are bridge (vmbr0/eth0)
>> >> (vmbr1/eth1)
>> >>
>> >> vmbr0 Link encap:Ethernet HWaddr 00:13:72:66:71:a5
>> >> inet addr:10.0.0.61 Bcast:10.0.0.255 Mask:255.255.255.0
>> >> inet6 addr: fe80::213:72ff:fe66:71a5/64 Scope:Link
>> >> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
>> >> RX packets:23304 errors:0 dropped:0 overruns:0 frame:0
>> >> TX packets:11507 errors:0 dropped:0 overruns:0 carrier:0
>> >> collisions:0 txqueuelen:0
>> >> RX bytes:1946077 (1.8 MiB) TX bytes:1433780 (1.3 MiB)
>> >>
>> >> vmbr1 Link encap:Ethernet HWaddr 00:13:72:66:71:a7
>> >> inet addr:10.1.0.61 Bcast:10.1.0.255 Mask:255.255.255.0
>> >> inet6 addr: fe80::213:72ff:fe66:71a7/64 Scope:Link
>> >> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
>> >> RX packets:5963 errors:0 dropped:0 overruns:0 frame:0
>> >> TX packets:47 errors:0 dropped:0 overruns:0 carrier:0
>> >> collisions:0 txqueuelen:0
>> >> RX bytes:561867 (548.6 KiB) TX bytes:2190 (2.1 KiB)
>> >>
>> >>
>> >> I understand in Debian you need to use iproute2 to make the route
>> >> static, correct? Here what have, but I am not sure if it goes int othe
>> >>
>> >> --
>> >> Terror PUP a.k.a
>> >> Chuck "PUP" Payne
>> >>
>> >> (678) 636-9678
>> >> -----------------------------------------
>> >> Discover it! Enjoy it! Share it! openSUSE Linux.
>> >> -----------------------------------------
>> >> openSUSE -- en.opensuse.org/User:Terrorpup
>> >> openSUSE Ambassador/openSUSE Member
>> >> Community Manager -- Southeast Linux Foundation (SELF)
>> >> skype,twiiter,identica,friendfeed -- terrorpup
>> >> freenode(irc) --terrorpup/lupinstein
>> >> Register Linux Userid: 155363
>> >>
>> >> Have you tried SUSE Studio? Need to create a Live CD, an app you want
>> >> to package and distribute , or create your own linux distro. Give SUSE
>> >> Studio a try. www.susestudio.com.
>> >> See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.
>> >> www.southeastlinuxfest.org
>> >> _______________________________________________
>> >> Ale mailing list
>> >> Ale at ale.org
>> >> http://mail.ale.org/mailman/listinfo/ale
>> >> See JOBS, ANNOUNCE and SCHOOLS lists at
>> >> http://mail.ale.org/mailman/listinfo
>> > _______________________________________________
>> > Ale mailing list
>> > Ale at ale.org
>> > http://mail.ale.org/mailman/listinfo/ale
>> > See JOBS, ANNOUNCE and SCHOOLS lists at
>> > http://mail.ale.org/mailman/listinfo
>>
>>
>>
>> --
>> Terror PUP a.k.a
>> Chuck "PUP" Payne
>>
>> (678) 636-9678
>> -----------------------------------------
>> Discover it! Enjoy it! Share it! openSUSE Linux.
>> -----------------------------------------
>> openSUSE -- en.opensuse.org/User:Terrorpup
>> openSUSE Ambassador/openSUSE Member
>> Community Manager -- Southeast Linux Foundation (SELF)
>> skype,twiiter,identica,friendfeed -- terrorpup
>> freenode(irc) --terrorpup/lupinstein
>> Register Linux Userid: 155363
>>
>> Have you tried SUSE Studio? Need to create a Live CD, an app you want
>> to package and distribute , or create your own linux distro. Give SUSE
>> Studio a try. www.susestudio.com.
>> See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.
>> www.southeastlinuxfest.org
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>>
>
> --
> Michael H. Warfield (AI4NB) | (770) 985-6132 | mhw at WittsEnd.com
> /\/\|=mhw=|\/\/ | (678) 463-0932 |
> http://www.wittsend.com/mhw/
> NIC whois: MHW9 | An optimist believes we live in the best of
> all
> PGP Key: 0x674627FF | possible worlds. A pessimist is sure of it!
>
More information about the Ale
mailing list