| Routing blues [message #34213] |
Sun, 14 December 2008 22:22  |
laotse
Messages: 35
Registered: December 2008
|
Member |
|
|
Well, probably I'm simply missing something and it's not related to OpenVZ ...
I try to set-up a container, which will hold the end-points for my VPNs, but currently I'm still stuck at basic connectivity, i.e. no VPN in place so far.
The problem is to ping eth3 attached to the container from the node. I can ping eth3 = 172.16.2.1 from the container=172.16.6.7, and I can ping the container from the node 172.16.1.66 and vice versa. I can also ping the WLAN router on the 172.16.2.0 network from the container. But ping 172.16.2.1 from the node fails.
I used route add -net 172.16.2.0/24 gw 172.16.6.7 venet0 for announcing the target network to the node.
There is a basic iptables firewall on the node, but as yet it does only filter for ppp0 and other interfaces. In particular, it does not filter for any LAN addresses. And of course ipv4 forwarding is enabled.
Thanks for any ideas,
- lars
Container:
dergon:/# ifconfig
eth3 Link encap:Ethernet HWaddr 00:1e:58:df:a4:4a
inet addr:172.16.2.1 Bcast:172.16.2.255 Mask:255.255.255.0
inet6 addr: fe80::21e:58ff:fedf:a44a/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:366 errors:0 dropped:0 overruns:0 frame:0
TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:120254 (117.4 KiB) TX bytes:980 (980.0 B)
Interrupt:17 Base address:0xe800
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:336 (336.0 B) TX bytes:336 (336.0 B)
venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.1 P-t-P:127.0.0.1 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:342 errors:0 dropped:0 overruns:0 frame:0
TX packets:503 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:440975 (430.6 KiB) TX bytes:122500 (119.6 KiB)
venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.6.7 P-t-P:172.16.6.7 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
dergon:/# cat /proc/sys/net/ipv4/ip_forward
1
dergon:/# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.0.2.1 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
172.16.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
0.0.0.0 192.0.2.1 0.0.0.0 UG 0 0 0 venet0
Node:
asgard:~# route -n
Kernel-IP-Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
172.16.6.4 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
172.16.6.7 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
217.0.118.101 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
172.16.6.1 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
172.16.6.2 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
172.16.6.3 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
172.16.2.0 172.16.6.7 255.255.255.0 UG 0 0 0 venet0
172.16.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0
|
|
|
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
