Re: Dual NIC routing (?) problem

2008-06-20 Thread The MadDaemon
On Fri, Jun 20, 2008 at 4:50 AM, Yuri Pankov [EMAIL PROTECTED] wrote:
 The MadDaemon wrote:

 On Tue, Jun 17, 2008 at 3:47 PM, Yuri Pankov [EMAIL PROTECTED]
 wrote:

 The MadDaemon wrote:

 List,

 I'm having a problem with a dual-homed host running 7.0-RELEASE with
 regards to traffic on one of the interfaces that I'm hoping someone
 knows something about.

 The goal of this box is to run Nessus on bge0 only (which is plugged
 into a trunk port on a switch), keeping fxp0 free as the admin
 interface and for serving web pages on my LAN.

 Here's ifconfig:

 bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500
   options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
   ether 00:19:b9:22:a8:22
   inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
 fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
 1500
   options=bRXCSUM,TXCSUM,VLAN_MTU
   ether 00:02:b3:bb:59:17
   inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255
   inet 10.20.10.28 netmask 0x broadcast 172.20.10.28
   inet 10.20.10.29 netmask 0x broadcast 172.20.10.29
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active

 /etc/rc.conf section:

 # Created: Mon Jun  9 09:32:52 2008
 defaultrouter=10.20.10.254
 hostname=darkhorse.mydomain.local
 ifconfig_fxp0=inet 10.20.10.24  netmask 255.255.255.0
 ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255
 ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255
 ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0

 Try using ifconfig_bge0=up in /etc/rc.conf instead of assigning bogus
 (probably) address.

 Tried that as well and it didn't work.  I found a few different things
 regarding VLAN setup, so my new (and not working) configuration is
 this (in part):

 ##
 # VLAN Configuration #
 ##
 cloned_interface=vlan2
 ifconfig_vlan2=inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev
 bge0
 cloned_interface=vlan5
 ifconfig_vlan5=inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev
 bge0

 So 10.20.8.245 is in tagged vlan 5.

Yes..

 cloned_interface=vlan6
 ifconfig_vlan6=inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev
 bge0

 (I got the VLAN IDs straight from the router, so they are correct for
 each VLAN.)

 [EMAIL PROTECTED] [~]# ifconfig bge0 inet 10.20.8.245 netmask 255.255.255.0

 and here you are trying to set 10.20.8.245 on parent bge0 without 802.1q
 tagging, how do you expect it to work?

I didn't, actually - lack of sleep = brainfart :(

 [EMAIL PROTECTED] [~]# ifconfig bge0 up
 [EMAIL PROTECTED] [~]# ifconfig bge0
 bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:b9:22:a8:22
inet 10.20.8.245 netmask 0xff00 broadcast 10.20.8.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
 [EMAIL PROTECTED] [~]# ping -c 2 10.20.8.4
 PING 10.20.8.4 (10.20.8.4): 56 data bytes

 --- 10.20.8.4 ping statistics ---
 2 packets transmitted, 0 packets received, 100.0% packet loss


 Sorry if I understood you incorrectly.

No problem..

I believe if fixed it by setting this in /etc/rc.conf:

cloned_interfaces=vlan2 vlan5 vlan6 vlan7 vlan107 vlan201 vlan212
ifconfig_vlan2=inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev bge0
ifconfig_vlan5=inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev bge0
ifconfig_vlan6=inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev bge0
ifconfig_vlan7=inet 10.20.253.245 netmask 255.255.255.0 vlan 7 vlandev bge0
ifconfig_vlan107=inet 10.21.7.245 netmask 255.255.255.0 vlan 107 vlandev bge0
ifconfig_vlan201=inet 10.20.1.245 netmask 255.255.255.0 vlan 201 vlandev bge0
ifconfig_vlan212=inet 10.21.2.245 netmask 255.255.255.0 vlan 212 vlandev bge0
##
# Bring up bge0 manually to make sure it's up:
ifconfig_bge0=up
##
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dual NIC routing (?) problem

2008-06-19 Thread The MadDaemon
(Sorry, I replied to Yuri only by mistake)

On Thu, Jun 19, 2008 at 10:49 AM, The MadDaemon [EMAIL PROTECTED] wrote:
 On Tue, Jun 17, 2008 at 3:47 PM, Yuri Pankov [EMAIL PROTECTED] wrote:
 The MadDaemon wrote:

 List,

 I'm having a problem with a dual-homed host running 7.0-RELEASE with
 regards to traffic on one of the interfaces that I'm hoping someone
 knows something about.

 The goal of this box is to run Nessus on bge0 only (which is plugged
 into a trunk port on a switch), keeping fxp0 free as the admin
 interface and for serving web pages on my LAN.

 Here's ifconfig:

 bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:b9:22:a8:22
inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
 fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=bRXCSUM,TXCSUM,VLAN_MTU
ether 00:02:b3:bb:59:17
inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255
inet 10.20.10.28 netmask 0x broadcast 172.20.10.28
inet 10.20.10.29 netmask 0x broadcast 172.20.10.29
media: Ethernet autoselect (100baseTX full-duplex)
status: active

 /etc/rc.conf section:

 # Created: Mon Jun  9 09:32:52 2008
 defaultrouter=10.20.10.254
 hostname=darkhorse.mydomain.local
 ifconfig_fxp0=inet 10.20.10.24  netmask 255.255.255.0
 ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255
 ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255
 ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0

 Try using ifconfig_bge0=up in /etc/rc.conf instead of assigning bogus
 (probably) address.

 Tried that as well and it didn't work.  I found a few different things
 regarding VLAN setup, so my new (and not working) configuration is
 this (in part):

 ##
 # VLAN Configuration #
 ##
 cloned_interface=vlan2
 ifconfig_vlan2=inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev bge0
 cloned_interface=vlan5
 ifconfig_vlan5=inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev bge0
 cloned_interface=vlan6
 ifconfig_vlan6=inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev bge0

 (I got the VLAN IDs straight from the router, so they are correct for
 each VLAN.)

 [EMAIL PROTECTED] [~]# ifconfig bge0 inet 10.20.8.245 netmask 255.255.255.0
 [EMAIL PROTECTED] [~]# ifconfig bge0 up
 [EMAIL PROTECTED] [~]# ifconfig bge0
 bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:b9:22:a8:22
inet 10.20.8.245 netmask 0xff00 broadcast 10.20.8.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
 [EMAIL PROTECTED] [~]# ping -c 2 10.20.8.4
 PING 10.20.8.4 (10.20.8.4): 56 data bytes

 --- 10.20.8.4 ping statistics ---
 2 packets transmitted, 0 packets received, 100.0% packet loss




-- 
It said use Linux 2.4 kernel or better so I installed FreeBSD. Now
everything runs better. Why didn't they just tell me to do that to
begin with?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Dual NIC routing (?) problem

2008-06-17 Thread The MadDaemon
List,

I'm having a problem with a dual-homed host running 7.0-RELEASE with
regards to traffic on one of the interfaces that I'm hoping someone
knows something about.

The goal of this box is to run Nessus on bge0 only (which is plugged
into a trunk port on a switch), keeping fxp0 free as the admin
interface and for serving web pages on my LAN.

Here's ifconfig:

bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:b9:22:a8:22
inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=bRXCSUM,TXCSUM,VLAN_MTU
ether 00:02:b3:bb:59:17
inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255
inet 10.20.10.28 netmask 0x broadcast 172.20.10.28
inet 10.20.10.29 netmask 0x broadcast 172.20.10.29
media: Ethernet autoselect (100baseTX full-duplex)
status: active

/etc/rc.conf section:

# Created: Mon Jun  9 09:32:52 2008
defaultrouter=10.20.10.254
hostname=darkhorse.mydomain.local
ifconfig_fxp0=inet 10.20.10.24  netmask 255.255.255.0
ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255
ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255
ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0


I'm not sure what other changes need to be made or where, but when I
assign an IP/netmask to bge0, bring up the interface, and try to ping
the gateway (or anything else), I get 100% packet loss.  I've even
tried to assign a new default route, but I get an error stating
there's already a default route.

I know I'm completely missing something here, but I just can't figure
out *what*.

Any help would be most appreciated.


-MD
-- 
It said use Linux 2.4 kernel or better so I installed FreeBSD. Now
everything runs better. Why didn't they just tell me to do that to
begin with?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dual NIC routing (?) problem

2008-06-17 Thread Yuri Pankov

The MadDaemon wrote:

List,

I'm having a problem with a dual-homed host running 7.0-RELEASE with
regards to traffic on one of the interfaces that I'm hoping someone
knows something about.

The goal of this box is to run Nessus on bge0 only (which is plugged
into a trunk port on a switch), keeping fxp0 free as the admin
interface and for serving web pages on my LAN.

Here's ifconfig:

bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:b9:22:a8:22
inet 0.0.0.0 netmask 0xff00 broadcast 0.0.0.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=bRXCSUM,TXCSUM,VLAN_MTU
ether 00:02:b3:bb:59:17
inet 10.20.10.24 netmask 0xff00 broadcast 172.20.10.255
inet 10.20.10.28 netmask 0x broadcast 172.20.10.28
inet 10.20.10.29 netmask 0x broadcast 172.20.10.29
media: Ethernet autoselect (100baseTX full-duplex)
status: active

/etc/rc.conf section:

# Created: Mon Jun  9 09:32:52 2008
defaultrouter=10.20.10.254
hostname=darkhorse.mydomain.local
ifconfig_fxp0=inet 10.20.10.24  netmask 255.255.255.0
ifconfig_fxp0_alias0=inet 10.20.10.28 netmask 255.255.255.255
ifconfig_fxp0_alias1=inet 10.20.10.29 netmask 255.255.255.255
ifconfig_bge0=inet 0.0.0.0 netmask 255.255.255.0


Try using ifconfig_bge0=up in /etc/rc.conf instead of assigning bogus 
(probably) address.




I'm not sure what other changes need to be made or where, but when I
assign an IP/netmask to bge0, bring up the interface, and try to ping
the gateway (or anything else), I get 100% packet loss.  I've even
tried to assign a new default route, but I get an error stating
there's already a default route.

I know I'm completely missing something here, but I just can't figure
out *what*.

Any help would be most appreciated.


-MD



HTH,
Yuri
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]