OK Jeff. Your routing table looks OK (assuming your use of "x.x" hasn't concealed a misconfiguration ... but that's obviously something you need to check without help from here).
You say you *can* ping the laptop from the router and *both* router interface addresses from the laptop. So the laptop is probably configured correctly. You don't say whether you did these latest tests with NAT turned on or off. If it is *off* (you can check this by looking at the forward-chain rules; NAT'ing rules include the word "MASQ"), then you should make sure that any relevant hosts on network x.x.150.0/24 (especially gateway host x.x.150.254) know that host x.x.150.253 is their gateway to network x.x.153.0/24 . Otherwise, non-NAT'd packets from hosts on x.x.153.0/24, including the gateway, won't return to the LAN for reasons having nothing to do with the LEAF router's configuration. The next step, as Matt already suggested, is to check your firewall ruleset. The command "ipchains -L -n -v" will list this in hard-to-read but complete form. There are a lot of possibilities here for causes (a rule actually DENYing the packet; a NAT error in the forward chain; etc.), so it's hard to tell you exactly what to check for. If you don't want to post the output here (because it includes more address info than you want to reveal to us), then I suggest you read the Ipchains HowTo at www.linuxdoc.org for help interpreting these results. You might also check your LEAF router logs (in /var/log) to see if they show any ping (icmp) packets being DENY'd or REJECTed by the firewall ruleset. As to the "which image" question, what you should tell us is the name of the image file you used to make the floppy, and where you downloaded it from. If memory serves, Matthew Grant, the original (and long gone from the scene) developer of Eiger used the 3.1.0 notation ... but it is not a good way to distinguish among images. At 11:38 AM 11/14/01 -0800, Jeff Groetsema wrote: >Ray, > >1. In the network.conf file, I changed eth1_IPADDR-192.168.1.254 to x.x.153.254. eth1_MASKLEN= was left at 24 (appropriate for the address I'm using), same as eth0 and eth1_BROADCAST= was set to x.x.153.255 > >netstat -nr reports the following > >Kernel IP routing table >Destination Gateway Genmask Flags MSS Window irtt Iface >x.x.150.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 >x.x.153.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 >0.0.0.0 x.x.150.254 0.0.0.0 UG 0 0 0 eth0 > >>From the router I can ping the laptop (x.x.153.20), eth1 (x.x.153.254), eth0 (x.x.150.253), Internet gateway (x.x.150.254), and other hosts on the Internet. > >2. I could ping these from a laptop with IP address of x.x.153.20 and gateway of x.x.153.254, connected to a switch connected to eth1. I tried to ping several other devices on subnet x.x.150.0, including the Internet gateway router x.x.150.254, again from the laptop and none responded. > >On boot up my image says LRP 3.1.0. If this is not the number you are looking for, how else can I discover it. > >Please be patient with me, I'm new to the whole Linux/LRP/LEAF thing. [old stuff deleted] -- ------------------------------------"Never tell me the odds!"--- Ray Olszewski -- Han Solo Palo Alto, CA [EMAIL PROTECTED] ---------------------------------------------------------------- _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
