On 10/21/2011 08:53 AM, Hoot, Joseph wrote:
> I attempted to do this in the Oracle VM 2.2.2 world and was unsuccessful. I
> attempted to set this up using a non-EqualLogic iSCSI target (I used IETF)
> and was still NOT able to get this to behave the way one would expect. The
> results are always the same-- namely, discovery works just fine in the dom0
> nodes (so my routing tables should have nothing to do with this), but when I
> actually go to log into the targets at the OVM server, I am unable to. Its
> almost like there is something in the bridge-utils packages or iscsiadm
> kernel modules that are not allowing this to occur properly.
>
The iscsi tools/kernel modules just open tcp/ip sockets. When doing
iface binding they just do the SO_BINDTODEVICE sockopt. So iscsi just
relies on the network layer to do the right thing.
Also when doing discovery in older tools we do not do iface binding. We
just use the default route. We just set things up so when you do the
normal session login to the targets found we will do iface binding. In
newer tools we do try to use the iface for discovery (this code is still
in git so you probably have not used it).
Can you ping the iscsi portal through the network interface?
ping -I eth2 192.168.x.y
?
If not in new kernels you might need to change the rp_filter settings.
>From the iscsi README:
The iface binding feature requires the sysctl setting
net.ipv4.conf.default.rp_filter to be set to 0 or 2. This can be set
in /etc/sysctl.conf by having the line:
net.ipv4.conf.default.rp_filter = N
where N is 0 or 2. Note that when setting this you may have to reboot
the box for the value to take effect.
rp_filter information from Documentation/networking/ip-sysctl.txt:
rp_filter - INTEGER
0 - No source validation.
1 - Strict mode as defined in RFC3704 Strict Reverse Path
Each incoming packet is tested against the FIB and if the
interface
is not the best reverse path the packet check will fail.
By default failed packets are discarded.
2 - Loose mode as defined in RFC3704 Loose Reverse Path
Each incoming packet's source address is also tested against
the FIB
and if the source address is not reachable via any interface
the packet check will fail.
--
You received this message because you are subscribed to the Google Groups
"open-iscsi" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/open-iscsi?hl=en.
