[Vyatta-users] Want to use Vyatta for our main BGP router - but what about traffic tracking?

2007-11-07 Thread Dominic Williams
Hello all, My company is very keen to try a Vyatta solution, as we are about to move our hosting rack to a BGP solution and a 7204VXR with 1GB seems inordinately expensive!! But... we need to be able to monitor and track bandwidth to each individual IP address that we serve. This is a

Re: [Vyatta-users] Want to use Vyatta for our main BGP router - butwhat about traffic tracking?

2007-11-07 Thread Nick Davey
I know it's common to export Netflow graphs for billing purposes, however at my current company we use SNMP data gathered from our distribution switches for billing/monitoring purposes. If for some reason you encounter difficulty getting a NetFlow substitute working, or don't want to tack extra

Re: [Vyatta-users] Vyatta VPN and NAT

2007-11-07 Thread Dave Roberts
Adrian, I'm putting an article on my website about how to create a site-to-site connection between Vyatta and ISA 2006. Once you get this completed, please add a link to it on the community wiki page that points to documentation such as this:

Re: [Vyatta-users] Want to use Vyatta for our main BGP router - butwhat about traffic tracking?

2007-11-07 Thread Dominic Williams
Many thanks for your response. What we need to generate is a traffic graph for each IP that we serve i.e. At 4.20.00pm some IP was using 7Mbps, at 4.20.15pm it was using 5.2Mbps, at 4.20.30 it was using 6.3Mbps and so on. We need this data is used to understand how sites (which run on IPs)

Re: [Vyatta-users] Vyatta Stateful Firewall Issue

2007-11-07 Thread Robyn Orosz
Hi Adrian, What rules have you placed in your firewall and what options are you using to send ACK segments with nmap (specific ports etc?) Thank you, Robyn Adrian F. Dimcev wrote: I've been testing with vc2.2 too. Same problem regarding the ACK segment. Everything else seems to work just

Re: [Vyatta-users] Vyatta VPN and NAT

2007-11-07 Thread Robyn Orosz
Hi Adrian, You can workaround this in iptables by adding jump rules in the nat table that send your VPN packets directly to the forward table. Then you can add a third rule that NATs source network 192.168.40.0/24 to every other destination. The rules are operated on in sequence so as long

[Vyatta-users] Can't connect to SMTP Host

2007-11-07 Thread David Marrow Jr
I created a NAT Rule that forwards all traffic on port 25 from the external ip address of xx.xx.xx.xx to the internal ip address of 10.10.30.xxx on port 25. My problem is that all workstations on the internal network 10.10.30.X connect resolve mail.domain.com to port 25 on the external ip

[Vyatta-users] Re: Public to Public NAT

2007-11-07 Thread David Marrow Jr
Does any one have any suggestions? How would I go about configuring a Public IP to Public IP NAT configuration? I'm in the ne st phase of my setup and one of my servers can not function in a DMZ Zone or a NAT Zone, the ip address due to software licensing has to be a Public IP. Please

Re: [Vyatta-users] Public to Public NAT

2007-11-07 Thread Justin Fletcher
There really shouldn't be any difference when you NAT with a public address; it'll just be that your inside address is in public address space instead of private. Best, Justin On Nov 7, 2007 3:17 PM, David Marrow Jr [EMAIL PROTECTED] wrote: Does any one have any suggestions? How would I go

Re: [Vyatta-users] Want to use Vyatta for our main BGP router - butwhat about traffic tracking?

2007-11-07 Thread Aubrey Wells
This sounds very interesting. Have you noticed any performance impact to running it? -- Aubrey Wells Senior Engineer Shelton | Johns Technology Group A Vyatta Ready Partner www.sheltonjohns.com On Nov 7, 2007, at 10:15 PM, Alain Kelder wrote: Hello Dominic, Out of the

Re: [Vyatta-users] installation

2007-11-07 Thread David Pearce
You use the VC3 live cd, login as user=root/password=vyatta to enter normal linux mode. type install-system If you already have linux partitions on your hard drive, installation may fail. You can remove them first with cfdisk David -Original Message- From: [EMAIL PROTECTED] on

Re: [Vyatta-users] Want to use Vyatta for our main BGP router - butwhat about traffic tracking?

2007-11-07 Thread Alain Kelder
Hello Dominic, Out of the various tools I've tried, netacct-mysql is currently my favorite. It collects bandwidth data through libpcap and stores in a MySQL DB. It comes with a PHP front end, but to me the real power is that it stores the stats in MySQL. Through SQL SELECT statements, I'm

Re: [Vyatta-users] Can't connect to SMTP Host

2007-11-07 Thread Alain Kelder
Hello David, IMHO, this sounds more like a DNS problem than a routing problem. I would ensure that workstations resolve mail.domain.com to the internal IP rather than external. Typically, you'd just add the necessary entries in your DNS server, but if you're not running an internal DNS