On Thursday 13 March 2003 10:08 am, Ken Marshall wrote: > Hello! > > Thanks to the help provided by Ray Olszewski it has become obvious that my > secondary IP addresses on my external interface are not working properly. > > I have a static IP of 206.127.76.231/27 for my primary IP on my Dachstein > box. I have also been assigned the block of 206.127.77.48/28 (14 useable > IP's). They are being routed correctly by my ISP, but my Dach box does not > reply to ping requests on that range of IP's. <snip> > The only thing that I can think of is that I haven't specified a broadcast > address for the secondary network. Is there any way I can add that in the > scripts? If not, could someone give me any help in getting it set up > manually?
Ken, Dachstein has roughly the same limitations here that are seen with any 2.2.x kernel. You are attempting to run 2 seperate networks on the same interface which will _never_ work w/o aliasing the iface. The limitation of the 2.2.x kernel has to do with the %default route. Basically a single-labeled interface can handle requests from one subnet (network) and all traffic that is not implicitly set with a static return path leaves your router with the %default_route, thus making what you are attempting to do impossible. The 2.4.x kernel and iptables allows for target routing of traffic and can deal with the type of return path you desire (though it will require a lot of work on your behalf) AND you will have to seperate the networks at a minimum to seperate interfaces via interface aliasing. I don't have a good single link to refer you to on this, but you'll need to read up on "interface alias'ing" and advanced iptables configuration to make use of what you have to work with. Things would be _much_ different if everything was on the same subnet (and assumably used the same gateway). -- ~Lynn Avants Linux Embedded Appliance Firewall Developer http://leaf.sourceforge.net http://www.guitarlynn.homelinux.org:81 ------------------------------------------------------- This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
