OpenVZ Forum


Home » General » Support » Problems with local network interface
Problems with local network interface [message #36609] Sat, 04 July 2009 16:50 Go to next message
ThatGuy is currently offline  ThatGuy
Messages: 4
Registered: July 2009
Junior Member
Hi,

My HN has two interfaces, one going to the public net and the other to our private net.
public: A.B.C.220
private: 192.168.0.15

I've given my VE two ip address, one for each network, everything works fine for the public net... but I'm having trouble with the private net.
public: A.B.C.221
private: 192.168.0.221

When I ping from the VE to a machine on the private net I don't get anything back.
Tcpdump on the HW node (local eth) show that echo requests are sent from the VE's public address to the private address of the
remote machine (bit strange?)... and no return packets...

HN: tcpdump -i eth0 -e host 192.168.0.14
11:04:12.019310 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 1, length 64
11:04:13.026360 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 2, length 64
11:04:14.026183 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 3, length 64


Pinging from the HN to 192.168.0.14 works fine.

I'm not sure what's going on. This is a clean HN install of ubuntu 8.04 with a clean VE install of debian 5, haven't even touched iptables yet.

I'm not completely new to networking, but this is beyond me. Help is greatly appreciated Smile

Required networking info:
VE: ip rule list
0:      from all lookup local
32766:  from all lookup main
32767:  from all lookup default


HN: ip rule list
0:      from all lookup local
32766:  from all lookup main
32767:  from all lookup default


VE: ip route list table all
default via 192.0.2.1 dev venet0
broadcast 127.255.255.255 dev lo  table local  proto kernel  scope link  src 127.0.0.1
local 192.168.0.221 dev venet0  table local  proto kernel  scope host  src 192.168.0.221
local A.B.C.221 dev venet0  table local  proto kernel  scope host  src A.B.C.221
broadcast 127.0.0.0 dev lo  table local  proto kernel  scope link  src 127.0.0.1
local 127.0.0.1 dev lo  table local  proto kernel  scope host  src 127.0.0.1
local 127.0.0.1 dev venet0  table local  proto kernel  scope host  src 127.0.0.1
local 127.0.0.0/8 dev lo  table local  proto kernel  scope host  src 127.0.0.1
unreachable default dev lo  table unspec  proto none  metric -1  error -101 hoplimit 255
local ::1 via :: dev lo  table local  proto none  metric 0  mtu 16436 advmss 16376 hoplimit 4294967295
unreachable default dev lo  table unspec  proto none  metric -1  error -101 hoplimit 255


HN: ip route list table all
192.168.0.221 dev venet0  scope link
A.B.C.221 dev venet0  scope link
A.B.C.216/29 dev eth1  proto kernel  scope link  src A.B.C.220
192.168.0.0/24 dev eth0  proto kernel  scope link  src 192.168.0.15
default via A.B.C.217 dev eth1  metric 100
broadcast 192.168.0.255 dev eth0  table local  proto kernel  scope link  src 192.168.0.15
broadcast 127.255.255.255 dev lo  table local  proto kernel  scope link  src 127.0.0.1
local 192.168.0.15 dev eth0  table local  proto kernel  scope host  src 192.168.0.15
broadcast A.B.C.216 dev eth1  table local  proto kernel  scope link  src A.B.C.220
broadcast 192.168.0.0 dev eth0  table local  proto kernel  scope link  src 192.168.0.15
local A.B.C.220 dev eth1  table local  proto kernel  scope host  src A.B.C.220
broadcast 127.0.0.0 dev lo  table local  proto kernel  scope link  src 127.0.0.1
broadcast A.B.C.223 dev eth1  table local  proto kernel  scope link  src A.B.C.220
local 127.0.0.1 dev lo  table local  proto kernel  scope host  src 127.0.0.1
local 127.0.0.0/8 dev lo  table local  proto kernel  scope host  src 127.0.0.1
fe80::/64 dev eth1  metric 256  expires -67224sec mtu 1500 advmss 1440 hoplimit 4294967295
fe80::/64 dev eth0  metric 256  expires -67223sec mtu 1500 advmss 1440 hoplimit 4294967295
unreachable default dev lo  table unspec  proto none  metric -1  error -101 hoplimit 255
local ::1 via :: dev lo  table local  proto none  metric 0  mtu 16436 advmss 16376 hoplimit 4294967295
local fe80::20d:60ff:fed5:ef06 via :: dev lo  table local  proto none  metric 0  mtu 16436 advmss 16376 hoplimit 4294967295
local fe80::20d:60ff:fed5:ef07 via :: dev lo  table local  proto none  metric 0  mtu 16436 advmss 16376 hoplimit 4294967295
ff00::/8 dev eth1  table local  metric 256  expires -67224sec mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth0  table local  metric 256  expires -67223sec mtu 1500 advmss 1440 hoplimit 4294967295
unreachable default dev lo  table unspec  proto none  metric -1  error -101 hoplimit 255


VE: sudo iptables -t nat -L ; sudo iptables -t filter -L ; sudo iptables -t mangle -L
FATAL: Could not load /lib/modules/2.6.24-24-openvz/modules.dep: No such file or directory
iptables v1.4.2: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination


HN: sudo iptables -t nat -L ; sudo iptables -t filter -L ; sudo iptables -t mangle -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

[Updated on: Sat, 04 July 2009 17:22]

Report message to a moderator

Re: Problems with local network interface [message #36686 is a reply to message #36609] Thu, 09 July 2009 17:19 Go to previous messageGo to next message
glic3rinu is currently offline  glic3rinu
Messages: 16
Registered: January 2009
Junior Member
The same problem that I was posted on

http://forum.openvz.org/index.php?t=msg&th=7705&star t=0&

You've discovered anything?
Re: Problems with local network interface [message #36693 is a reply to message #36686] Fri, 10 July 2009 01:11 Go to previous messageGo to next message
ThatGuy is currently offline  ThatGuy
Messages: 4
Registered: July 2009
Junior Member
No, I'm still in the dark as well...

Since this isn't causing any mission critical problems for me it's not a show stopper... But it would be nice if someone knows how to fix it.

Re: Problems with local network interface [message #36717 is a reply to message #36693] Mon, 13 July 2009 12:48 Go to previous messageGo to next message
maratrus is currently offline  maratrus
Messages: 1495
Registered: August 2007
Location: Moscow
Senior Member
Hello,

could you please try the commands suggested in the thread mentioned above?
Re: Problems with local network interface [message #36729 is a reply to message #36717] Tue, 14 July 2009 02:01 Go to previous messageGo to next message
ThatGuy is currently offline  ThatGuy
Messages: 4
Registered: July 2009
Junior Member
maratrus wrote on Mon, 13 July 2009 07:48
Hello,

could you please try the commands suggested in the thread mentioned above?


I'm not quite sure what you mean... in the thread mentioned above glic3rinu shows addtional "route -n" and "ifconfig" output, which is kind of lacking in my post... I'll also add the ve's .conf file.

VE: route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.0.2.1       0.0.0.0         255.255.255.255 UH    0      0        0 venet0
0.0.0.0         192.0.2.1       0.0.0.0         UG    0      0        0 venet0


VE: ifconfig
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:2938 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2938 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:266816 (260.5 KiB)  TX bytes:266816 (260.5 KiB)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:127.0.0.1  P-t-P:127.0.0.1  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:220116 errors:0 dropped:0 overruns:0 frame:0
          TX packets:137468 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:281279999 (268.2 MiB)  TX bytes:40697559 (38.8 MiB)

venet0:1  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:192.168.0.221  P-t-P:192.168.0.221  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1

venet0:2  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:A.B.C.221  P-t-P:A.B.C.221  Bcast:0.0.0.0  Mask:255.255.255.255
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1


HN: route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.0.221   0.0.0.0         255.255.255.255 UH    0      0        0 venet0
A.B.C.221    0.0.0.0         255.255.255.255 UH    0      0        0 venet0
A.B.C.216    0.0.0.0         255.255.255.248 U     0      0        0 eth1
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         A.B.C.217    0.0.0.0         UG    100    0        0 eth1


HN: ifconfig
eth0      Link encap:Ethernet  HWaddr 00:0d:60:d5:ef:06
          inet addr:192.168.0.15  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::20d:60ff:fed5:ef06/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:877 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1176 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:87858 (85.7 KB)  TX bytes:117816 (115.0 KB)
          Interrupt:24

eth1      Link encap:Ethernet  HWaddr 00:0d:60:d5:ef:07
          inet addr:A.B.C.220  Bcast:A.B.C.223  Mask:255.255.255.248
          inet6 addr: fe80::20d:60ff:fed5:ef07/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:293999 errors:0 dropped:0 overruns:0 frame:0
          TX packets:187771 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:352176343 (335.8 MB)  TX bytes:50058392 (47.7 MB)
          Interrupt:25

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

venet0    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP BROADCAST POINTOPOINT RUNNING NOARP  MTU:1500  Metric:1
          RX packets:159419 errors:0 dropped:0 overruns:0 frame:0
          TX packets:262707 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:42099706 (40.1 MB)  TX bytes:344638104 (328.6 MB)


HN: cat /etc/vz/conf/221.conf
ONBOOT="yes"

# UBC parameters (in form of barrier:limit)
KMEMSIZE="11055923:11377049"
LOCKEDPAGES="256:256"
PRIVVMPAGES="65536:69632"
SHMPAGES="21504:21504"
NUMPROC="240:240"
PHYSPAGES="0:2147483647"
VMGUARPAGES="33792:2147483647"
OOMGUARPAGES="26112:2147483647"
NUMTCPSOCK="360:360"
NUMFLOCK="188:206"
NUMPTY="16:16"
NUMSIGINFO="256:256"
TCPSNDBUF="1720320:2703360"
TCPRCVBUF="1720320:2703360"
OTHERSOCKBUF="1126080:2097152"
DGRAMRCVBUF="262144:262144"
NUMOTHERSOCK="360:360"
DCACHESIZE="3409920:3624960"
NUMFILE="9312:9312"
AVNUMPROC="180:180"
NUMIPTENT="128:128"

# Disk quota parameters (in form of softlimit:hardlimit)
DISKSPACE="1048576:1153024"
DISKINODES="200000:220000"
QUOTATIME="0"

# CPU fair sheduler parameter
CPUUNITS="1000"


VE_ROOT="/var/lib/vz/root/$VEID"
VE_PRIVATE="/var/lib/vz/private/$VEID"
OSTEMPLATE="debian-5.0-x86"
ORIGIN_SAMPLE="vps.basic"
IP_ADDRESS="192.168.0.221 A.B.C.221"
NAMESERVER="69.18.32.50"
HOSTNAME="tm.hostname.com"


[Updated on: Tue, 14 July 2009 14:44]

Report message to a moderator

Re: Problems with local network interface [message #36730 is a reply to message #36729] Tue, 14 July 2009 05:21 Go to previous messageGo to next message
maratrus is currently offline  maratrus
Messages: 1495
Registered: August 2007
Location: Moscow
Senior Member
Hi,

please excuse my being so vague.
I mean to set an explicit routes, something similar to what was suggested in previous thread
Quote:

(inside VE)
# ip r add 10.0.0.0/24 dev venet0 src 10.0.0.155
# ip r add 77.178.25.0/24 dev venet0 src 77.178.25.145

Re: Problems with local network interface [message #36743 is a reply to message #36730] Tue, 14 July 2009 15:12 Go to previous messageGo to next message
ThatGuy is currently offline  ThatGuy
Messages: 4
Registered: July 2009
Junior Member
Ohhh.... no, seriously I'm to blame for not having seen the second post in that thread...

That fixed it Smile

How would I make this permanent across reboots? Should I add the commands to the rc.local inside the virtual machine...

Is the rc.local executed when the virtual machine starts up?
Re: Problems with local network interface [message #36744 is a reply to message #36743] Tue, 14 July 2009 15:33 Go to previous message
maratrus is currently offline  maratrus
Messages: 1495
Registered: August 2007
Location: Moscow
Senior Member
Hi,

Quote:

How would I make this permanent across reboots? Should I add the commands to the rc.local inside the virtual machine...

Is the rc.local executed when the virtual machine starts up?


Yes, rc.local is executed during the startup.
Previous Topic: Problem In Cpanel, Disk Quota Doesnt working
Next Topic: OpenVZ kernel not loading
Goto Forum:
  


Current Time: Sun Nov 10 18:48:44 GMT 2024

Total time taken to generate the page: 0.00771 seconds