it is possible, look at rp filter systctl -- snip -- (borrowed from EQL, this arrays need to have all ifaces on the same subnet net.ipv4.conf.all.arp_ignore=1 net.ipv4.conf.all.arp_announce=2 net.ipv4.conf.all.rp_filter=2
</borrowed from eql configuration> Am 06.02.2015 um 15:49 schrieb Nicolas Ecarnot: > Hello list, > > My setup is described here in details : > https://groups.google.com/d/msg/open-iscsi/ivprFF9hklY/mkVPHo5q1p0J > but now I have another issue. > > I'm trying to connect 2 NICs to a SAN that presents 2 ip, and all that > is on the same subnet and on the same switch. > I read some old comments on old threads (< 2006) that discouraged that, > and one answer of Mike also said the same : > > I think you might hit some issues or at least not get what you expect > with both network interfaces on the same subnet, but using the default > iscsi default iface. > > (though I don't understand the very last part after the comma) > > But I hoped the situation had improved since, and that some limitations > had gone. > Indeed, when re-re-re-reading the doc page of open-iscsi > <http://www.open-iscsi.org/docs/README>, I see nowhere advicing against > having two NICs on the same subnet. > > So I tried and got that : > - both NICs (em3 and em4) can ping the 2 SAN's ip > - With iscsiadm, I'm adding iface0 and iface1, and I specify the MAC > hardware address of the corresponding em3 and em4 > - When discovering, all seems to work well > - When login in, it is failing in a way it seems I'm not allowed to > connect using both ifaces at the same time. > > When trying to log in, I specify the iface0, and the login to the 2 SAN > ip is working well. > But then, doing the same with iface1 is failing, with a kernel errror > message : > iscsid: conn 0 login rejected: target error (03/02) > And after having logout, trying the same way around with iface1 first > results in the same behaviour. > > Is it by design that iscsi does not permit the login from 2 ifaces > concurrently? > I tried to find somewhere in my EMC SAN (Cx3-10) where there would be > some sort of such limitations, but found nothing. > > -- > Nicolas Ecarnot > > -- > You received this message because you are subscribed to the Google > Groups "open-iscsi" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > To post to this group, send email to [email protected] > <mailto:[email protected]>. > Visit this group at http://groups.google.com/group/open-iscsi. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "open-iscsi" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/open-iscsi. For more options, visit https://groups.google.com/d/optout.
