Re: Dual NIC routing (?) problem
On Fri, Jun 20, 2008 at 4:50 AM, Yuri Pankov [EMAIL PROTECTED] wrote: The MadDaemon wrote: On Tue, Jun 17, 2008 at 3:47 PM, Yuri Pankov [EMAIL PROTECTED] wrote: The MadDaemon wrote: List, I'm having a problem with a dual-homed host running 7.0-RELEASE with regards to traffic on one of the interfaces that I'm hoping someone knows something about. The goal of this box is to run Nessus on bge0 only (which is plugged into a trunk port on a switch), keeping fxp0 free as the admin interface and for serving web pages on my LAN. Here's ifconfig: bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM ether 00:19:b9:22:a8:22 inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255 media: Ethernet autoselect (100baseTX full-duplex) status: active fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=bRXCSUM,TXCSUM,VLAN_MTU ether 00:02:b3:bb:59:17 inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255 inet 10.20.10.28 netmask 0x broadcast 172.20.10.28 inet 10.20.10.29 netmask 0x broadcast 172.20.10.29 media: Ethernet autoselect (100baseTX full-duplex) status: active /etc/rc.conf section: # Created: Mon Jun 9 09:32:52 2008 defaultrouter=10.20.10.254 hostname=darkhorse.mydomain.local ifconfig_fxp0=inet 10.20.10.24 netmask 255.255.255.0 ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255 ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255 ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0 Try using ifconfig_bge0=up in /etc/rc.conf instead of assigning bogus (probably) address. Tried that as well and it didn't work. I found a few different things regarding VLAN setup, so my new (and not working) configuration is this (in part): ## # VLAN Configuration # ## cloned_interface=vlan2 ifconfig_vlan2=inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev bge0 cloned_interface=vlan5 ifconfig_vlan5=inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev bge0 So 10.20.8.245 is in tagged vlan 5. Yes.. cloned_interface=vlan6 ifconfig_vlan6=inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev bge0 (I got the VLAN IDs straight from the router, so they are correct for each VLAN.) [EMAIL PROTECTED] [~]# ifconfig bge0 inet 10.20.8.245 netmask 255.255.255.0 and here you are trying to set 10.20.8.245 on parent bge0 without 802.1q tagging, how do you expect it to work? I didn't, actually - lack of sleep = brainfart :( [EMAIL PROTECTED] [~]# ifconfig bge0 up [EMAIL PROTECTED] [~]# ifconfig bge0 bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM ether 00:19:b9:22:a8:22 inet 10.20.8.245 netmask 0xff00 broadcast 10.20.8.255 media: Ethernet autoselect (100baseTX full-duplex) status: active [EMAIL PROTECTED] [~]# ping -c 2 10.20.8.4 PING 10.20.8.4 (10.20.8.4): 56 data bytes --- 10.20.8.4 ping statistics --- 2 packets transmitted, 0 packets received, 100.0% packet loss Sorry if I understood you incorrectly. No problem.. I believe if fixed it by setting this in /etc/rc.conf: cloned_interfaces=vlan2 vlan5 vlan6 vlan7 vlan107 vlan201 vlan212 ifconfig_vlan2=inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev bge0 ifconfig_vlan5=inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev bge0 ifconfig_vlan6=inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev bge0 ifconfig_vlan7=inet 10.20.253.245 netmask 255.255.255.0 vlan 7 vlandev bge0 ifconfig_vlan107=inet 10.21.7.245 netmask 255.255.255.0 vlan 107 vlandev bge0 ifconfig_vlan201=inet 10.20.1.245 netmask 255.255.255.0 vlan 201 vlandev bge0 ifconfig_vlan212=inet 10.21.2.245 netmask 255.255.255.0 vlan 212 vlandev bge0 ## # Bring up bge0 manually to make sure it's up: ifconfig_bge0=up ## ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Dual NIC routing (?) problem
(Sorry, I replied to Yuri only by mistake) On Thu, Jun 19, 2008 at 10:49 AM, The MadDaemon [EMAIL PROTECTED] wrote: On Tue, Jun 17, 2008 at 3:47 PM, Yuri Pankov [EMAIL PROTECTED] wrote: The MadDaemon wrote: List, I'm having a problem with a dual-homed host running 7.0-RELEASE with regards to traffic on one of the interfaces that I'm hoping someone knows something about. The goal of this box is to run Nessus on bge0 only (which is plugged into a trunk port on a switch), keeping fxp0 free as the admin interface and for serving web pages on my LAN. Here's ifconfig: bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM ether 00:19:b9:22:a8:22 inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255 media: Ethernet autoselect (100baseTX full-duplex) status: active fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=bRXCSUM,TXCSUM,VLAN_MTU ether 00:02:b3:bb:59:17 inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255 inet 10.20.10.28 netmask 0x broadcast 172.20.10.28 inet 10.20.10.29 netmask 0x broadcast 172.20.10.29 media: Ethernet autoselect (100baseTX full-duplex) status: active /etc/rc.conf section: # Created: Mon Jun 9 09:32:52 2008 defaultrouter=10.20.10.254 hostname=darkhorse.mydomain.local ifconfig_fxp0=inet 10.20.10.24 netmask 255.255.255.0 ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255 ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255 ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0 Try using ifconfig_bge0=up in /etc/rc.conf instead of assigning bogus (probably) address. Tried that as well and it didn't work. I found a few different things regarding VLAN setup, so my new (and not working) configuration is this (in part): ## # VLAN Configuration # ## cloned_interface=vlan2 ifconfig_vlan2=inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev bge0 cloned_interface=vlan5 ifconfig_vlan5=inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev bge0 cloned_interface=vlan6 ifconfig_vlan6=inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev bge0 (I got the VLAN IDs straight from the router, so they are correct for each VLAN.) [EMAIL PROTECTED] [~]# ifconfig bge0 inet 10.20.8.245 netmask 255.255.255.0 [EMAIL PROTECTED] [~]# ifconfig bge0 up [EMAIL PROTECTED] [~]# ifconfig bge0 bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM ether 00:19:b9:22:a8:22 inet 10.20.8.245 netmask 0xff00 broadcast 10.20.8.255 media: Ethernet autoselect (100baseTX full-duplex) status: active [EMAIL PROTECTED] [~]# ping -c 2 10.20.8.4 PING 10.20.8.4 (10.20.8.4): 56 data bytes --- 10.20.8.4 ping statistics --- 2 packets transmitted, 0 packets received, 100.0% packet loss -- It said use Linux 2.4 kernel or better so I installed FreeBSD. Now everything runs better. Why didn't they just tell me to do that to begin with? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Dual NIC routing (?) problem
List, I'm having a problem with a dual-homed host running 7.0-RELEASE with regards to traffic on one of the interfaces that I'm hoping someone knows something about. The goal of this box is to run Nessus on bge0 only (which is plugged into a trunk port on a switch), keeping fxp0 free as the admin interface and for serving web pages on my LAN. Here's ifconfig: bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM ether 00:19:b9:22:a8:22 inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255 media: Ethernet autoselect (100baseTX full-duplex) status: active fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=bRXCSUM,TXCSUM,VLAN_MTU ether 00:02:b3:bb:59:17 inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255 inet 10.20.10.28 netmask 0x broadcast 172.20.10.28 inet 10.20.10.29 netmask 0x broadcast 172.20.10.29 media: Ethernet autoselect (100baseTX full-duplex) status: active /etc/rc.conf section: # Created: Mon Jun 9 09:32:52 2008 defaultrouter=10.20.10.254 hostname=darkhorse.mydomain.local ifconfig_fxp0=inet 10.20.10.24 netmask 255.255.255.0 ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255 ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255 ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0 I'm not sure what other changes need to be made or where, but when I assign an IP/netmask to bge0, bring up the interface, and try to ping the gateway (or anything else), I get 100% packet loss. I've even tried to assign a new default route, but I get an error stating there's already a default route. I know I'm completely missing something here, but I just can't figure out *what*. Any help would be most appreciated. -MD -- It said use Linux 2.4 kernel or better so I installed FreeBSD. Now everything runs better. Why didn't they just tell me to do that to begin with? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Dual NIC routing (?) problem
The MadDaemon wrote: List, I'm having a problem with a dual-homed host running 7.0-RELEASE with regards to traffic on one of the interfaces that I'm hoping someone knows something about. The goal of this box is to run Nessus on bge0 only (which is plugged into a trunk port on a switch), keeping fxp0 free as the admin interface and for serving web pages on my LAN. Here's ifconfig: bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM ether 00:19:b9:22:a8:22 inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255 media: Ethernet autoselect (100baseTX full-duplex) status: active fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=bRXCSUM,TXCSUM,VLAN_MTU ether 00:02:b3:bb:59:17 inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255 inet 10.20.10.28 netmask 0x broadcast 172.20.10.28 inet 10.20.10.29 netmask 0x broadcast 172.20.10.29 media: Ethernet autoselect (100baseTX full-duplex) status: active /etc/rc.conf section: # Created: Mon Jun 9 09:32:52 2008 defaultrouter=10.20.10.254 hostname=darkhorse.mydomain.local ifconfig_fxp0=inet 10.20.10.24 netmask 255.255.255.0 ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255 ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255 ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0 Try using ifconfig_bge0=up in /etc/rc.conf instead of assigning bogus (probably) address. I'm not sure what other changes need to be made or where, but when I assign an IP/netmask to bge0, bring up the interface, and try to ping the gateway (or anything else), I get 100% packet loss. I've even tried to assign a new default route, but I get an error stating there's already a default route. I know I'm completely missing something here, but I just can't figure out *what*. Any help would be most appreciated. -MD HTH, Yuri ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]