Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
hello family first i show you my topology
topology
I have 4 frame relay switchs.
Frame-relay-switch1switch1
Frame-relay-switch2switch2
Frame-relay-switch3switch3
Frame-relay-switch4switch4
here is the configuration of the routers
router1
no ip address
encapsulation frame-relay
serial restart-delay 0!
interface Serial1/0.1 multipoint
ip address 192.168.1.1 255.255.255.0
snmp trap link-status
frame-relay map ip 192.168.1.3 102 broadcast
frame-relay map ip 192.168.1.2 101 broadcast
frame-relay interface-dlci 101
router2
interface Serial1/0
no ip address
encapsulation frame-relay
serial restart-delay 0!
interface Serial1/0.1 point-to-point
ip address 192.168.1.2 255.255.255.0
snmp trap link-status
frame-relay interface-dlci 103
router 3
interface Serial1/0
no ip address
encapsulation frame-relay
serial restart-delay 0!
interface Serial1/0.1 point-to-point
ip address 192.168.1.3 255.255.255.0
snmp trap link-status
frame-relay interface-dlci 101
the link between router 1 and router 2 is working but between router 1 and router 3 is not working
and i don't know why !!! help me please
hello Tang Li try this topology I hope it will help you
Related
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 1 year ago.
Improve this question
I saw a video in which a person scanned a public IP(it was his SOHO network) using nmap. It showed all the open ports and other info but I don't understand how can nmap scan ports and tell which are open when there are multiple devices on that network. Is it that nmap scans all the devices on that network using that public IP and then shows a collective result or is it something else?
Link for that video
at 7:43
When NMAP scans an IP, it, in theory only scans the device who is running on that IP.
But there is a catch, if the IP that the NMAP scans is a device with port forwarding, it will forward the scan for that port to the device that the port forwarding is directed at.
To give you an example, I will define few stuff
You have 3 devices, 1 router that has a public IP, 2 servers that are
behind the router.
We will be scanning 4 ports, 10, 20, 30, 40
Port 10 is open on the router itself, its used for public communication
Port 20 is not opened on the router and its not being port forwarded
Port 30 is being port forwarded to Server 1, who has that port open
Port 40 is being port forwarded to Server 2, but that server doesn't have that port open
In the results on NMAP, you will get the following result.
Ports 10 and 30 will show up as open, while ports 20, 40, will show up closed or maybe filtered
So while we only scanned the one public IP and one device on that IP, we can see the device that is behind the router.
But that is only possible because when we try to connect to a port on a router, the router is saying:
"Okay, this connection is trying to go to port 30, I have a configuration here that says that port 30 should go to Server 1 on that port, I will redirect the traffic to that server and then when I get the response from the server, I will redirect to the device that made the request"
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 5 years ago.
Improve this question
I use NetworkManager to connect to VPN servers. My VPN has multiple servers, so I configured a dozen or so profiles. NetworkManager allows you to connect to multiple VPNs at once; if I do this, the routing table can end up with multiple default routes.
What does Linux do in this situation?
Is there any way to configure it so that it'll pick faster gateways?
Example (partial table):
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.8.8.1 0.0.0.0 UG 50 0 0 tun0
0.0.0.0 10.7.7.1 0.0.0.0 UG 51 0 0 tun1
0.0.0.0 10.8.8.1 0.0.0.0 UG 52 0 0 tun2
0.0.0.0 10.7.7.1 0.0.0.0 UG 53 0 0 tun3
0.0.0.0 10.8.8.1 0.0.0.0 UG 54 0 0 tun4
0.0.0.0 192.168.50.1 0.0.0.0 UG 100 0 0 enp0s31f6
Your extra gateways have different metric (and possibly have different tables, post ip rule show and ip route list table TTT where TTT are all tables mentioned by ip rule show). Metric is documented in man 8 route http://man7.org/linux/man-pages/man8/route.8.html
metric M
set the metric field in the routing table (used by routing
daemons) to M. If this option is not specified the metric for
inet6 (IPv6) address family defaults to '1', for inet (IPv4)
it defaults to '0'. You should always specify an explicit
metric value to not rely on those defaults - they also differ
from iproute2.
Metric The 'distance' to the target (usually counted in hops).
Rules are https://serverfault.com/questions/648276/routing-selection-specificity-vs-metric:
Single routing table... In this case, the kernel chooses:
the most specific route;
if there are multiple equally specific routes, the one with the smallest kernel metric.
So, when there are no multiple routing tables, linux will use only one reachable gateway with lowest metric (it probably will not use gateway from offline network interface).
Is there any way to configure it so that it'll pick faster gateways?
No, when the gateway is not used, you can't check how fast it is. Also you can't afford personal computer to have own AS to legally have several gateways which can connect your single IP to the internet. (So, picking different gateway will break all your TCP and UDP connections, as you will use different IP address in the internet).
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 4 years ago.
Improve this question
In Lab we have two hosts say A and B.
host A has two NIC and host B has single NIC (see below diagram for network topology)
NIC-1 of host A is connected to lab network and
NIC-2 of host A is connected directly (end-to-end) to host B
----------
| | -> NIC1 ------> Lab Network (10.203.194.0/24)
| | (eth0 - 10.203.194.247/24)
| host A | ----------
| | -> NIC2 -------> NIC1 | host B |
----------- (eth1 - 10.203.209.230/24) -----------
(eth0 - 10.203.194.163/24)
From host A, I was able to ping 'lab network' whereas I couldn't connect/ping host B (10.203.194.163). I find a routing table of host A has default gw to lab network.
What changes were required to connect Lab network and host B FROM host A.
I can go for a bridge connection connecting both eth0 and eth1 interface in host A; but I don't prefer that option because host B should not recieve any packet specific to lab network and that is the reason I did not connect host B directly to lab network.
I am looking for some routing option that is specific to the destination/source and the interface has to be decided based on that.
Finally, I was able to resolve the issue by simply adding the rule in the route table.
$>route add –host 10.203.194.163 dev eth1
and now my routing table looks like:
Destination Gateway Genmask Flags MSS Windows irtt Iface
10.203.194.163 0.0.0.0 255.255.255.255 UH 0 0 0 eth1
10.203.194.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 10.203.194.1 0.0.0.0 UG 0 0 0 eth0
and when I ping from host B to host A and running tcpdump on eth0, I won't get any ICMP packets and in eth1 I can see all ICMP packets from host B :)
Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I have a linux machine Iam using as a router with multible interfaces and multible internet connection
say eth0--isp1
eth1--isp2
eth2--isp3
the gateway is eth0 throw isp1
and eth3--local1 10.0.0.x
eth4--local2 192.168.1.x
i need local1 ip 192.168.1.10 to go throw isp3, eth2
thanks
You need to use policy routing for this. You create a new routing table and use it when the source IP is 192.168.1.10.
ip route add ... table $TABLENUM # your usual routes, for the new table
...
ip route add default via $ISP3 table $TABLENUM # gateway for the new table
ip rule add from 192.168.1.10/32 lookup $TABLENUM # use the new table for this IP
ip rule add to 192.168.1.10/32 lookup $TABLENUM # make it symmetric, for clarity
Try route add 192.168.1.0 netmask 255.255.255.0 dev eth4--local, on the assumption these are locally-connected networks. If not, you will need to specify a gateway machine to route the packets through also. Truthfully your question is malformed (and probably belongs on serverfault). If you already have addresses on those networks, these routes should already exist. If you do not, your problem is likely more complicated than you think it is.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
I have a system with 2 interfaces eth0, and eth1.
eth0 is 192.168.0.250 and connected to gateway 192.168.0.2.
eth1 is connected to 192.123.123.10 via a swtich.
I am trying to route packets from 192.123.123.10 to gateway 192.168.0.2, which means I need to route 192.123.123.x packets coming into eth1 interface out via eth0 interface.
I set ip_forward file to 1.
I ran this command:
route add -net 192.123.0.0 netmask 255.255.255.0 dev eth0
route add default gw 192.168.0.2
I can ping from 129.123.123.10 to 192.168.0.250, but I can't ping to 192.168.0.2
I think the packets are not being forwarded to eth0.
My routing table looks something like this:
gteway Genmask Flags Ref Iface
192.123.123.0 * 255.255.255.0 U eth1
192.168.0.0 * 255.255.255.0 U eth0
192.123.0.0 * 255.255.255.0 U eth0
default 192.168.0.2 0.0.0.0 UG eth0
Can anyone tell me what is missing?
Thank you in advance.
You are missing your back path route.
The host 192.168.0.2 see packet coming from 192.123.123.10 but he doesn't know how to route the reply packet back since it doesn't have the return route.
You can do two things:
1- create a route on 192.168.0.2 machine to handle traffic directed to 192.123.123.0/24
2- NAT on your 192.168.0.250 host with the command below:
iptables -t nat -A POSTROUTING -s 129.123.123.0/24 -j SNAT --to-source 192.168.0.250
It's not your routing table on this system that you need to be concerned about. It's the routing tables of the other systems. 192.168.0.2 knows nothing about the 192.123.X.X network being routed to 192.168.0.250. Similarly the hosts on 192.123.X.X need to route the 192.168.X.X network over to 192.123.123.10.
I'm fairly certain this can be achieved using iptables and port forwarding rules. There is some more information here http://www.revsys.com/writings/quicktips/nat.html about how to forward packets between interfaces.