Problems with local network interface [message #36609] |
Sat, 04 July 2009 16:50 |
ThatGuy
Messages: 4 Registered: July 2009
|
Junior Member |
|
|
Hi,
My HN has two interfaces, one going to the public net and the other to our private net.
public: A.B.C.220
private: 192.168.0.15
I've given my VE two ip address, one for each network, everything works fine for the public net... but I'm having trouble with the private net.
public: A.B.C.221
private: 192.168.0.221
When I ping from the VE to a machine on the private net I don't get anything back.
Tcpdump on the HW node (local eth) show that echo requests are sent from the VE's public address to the private address of the
remote machine (bit strange?)... and no return packets...
HN: tcpdump -i eth0 -e host 192.168.0.14
11:04:12.019310 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 1, length 64
11:04:13.026360 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 2, length 64
11:04:14.026183 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 3, length 64
Pinging from the HN to 192.168.0.14 works fine.
I'm not sure what's going on. This is a clean HN install of ubuntu 8.04 with a clean VE install of debian 5, haven't even touched iptables yet.
I'm not completely new to networking, but this is beyond me. Help is greatly appreciated
Required networking info:
VE: ip rule list
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
HN: ip rule list
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
VE: ip route list table all
default via 192.0.2.1 dev venet0
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
local 192.168.0.221 dev venet0 table local proto kernel scope host src 192.168.0.221
local A.B.C.221 dev venet0 table local proto kernel scope host src A.B.C.221
broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev venet0 table local proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
local ::1 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
HN: ip route list table all
192.168.0.221 dev venet0 scope link
A.B.C.221 dev venet0 scope link
A.B.C.216/29 dev eth1 proto kernel scope link src A.B.C.220
192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.15
default via A.B.C.217 dev eth1 metric 100
broadcast 192.168.0.255 dev eth0 table local proto kernel scope link src 192.168.0.15
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
local 192.168.0.15 dev eth0 table local proto kernel scope host src 192.168.0.15
broadcast A.B.C.216 dev eth1 table local proto kernel scope link src A.B.C.220
broadcast 192.168.0.0 dev eth0 table local proto kernel scope link src 192.168.0.15
local A.B.C.220 dev eth1 table local proto kernel scope host src A.B.C.220
broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
broadcast A.B.C.223 dev eth1 table local proto kernel scope link src A.B.C.220
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
fe80::/64 dev eth1 metric 256 expires -67224sec mtu 1500 advmss 1440 hoplimit 4294967295
fe80::/64 dev eth0 metric 256 expires -67223sec mtu 1500 advmss 1440 hoplimit 4294967295
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
local ::1 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
local fe80::20d:60ff:fed5:ef06 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
local fe80::20d:60ff:fed5:ef07 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
ff00::/8 dev eth1 table local metric 256 expires -67224sec mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth0 table local metric 256 expires -67223sec mtu 1500 advmss 1440 hoplimit 4294967295
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
VE: sudo iptables -t nat -L ; sudo iptables -t filter -L ; sudo iptables -t mangle -L
FATAL: Could not load /lib/modules/2.6.24-24-openvz/modules.dep: No such file or directory
iptables v1.4.2: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
HN: sudo iptables -t nat -L ; sudo iptables -t filter -L ; sudo iptables -t mangle -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
[Updated on: Sat, 04 July 2009 17:22] Report message to a moderator
|
|
|
|
|
|
Re: Problems with local network interface [message #36729 is a reply to message #36717] |
Tue, 14 July 2009 02:01 |
ThatGuy
Messages: 4 Registered: July 2009
|
Junior Member |
|
|
maratrus wrote on Mon, 13 July 2009 07:48 | Hello,
could you please try the commands suggested in the thread mentioned above?
|
I'm not quite sure what you mean... in the thread mentioned above glic3rinu shows addtional "route -n" and "ifconfig" output, which is kind of lacking in my post... I'll also add the ve's .conf file.
VE: route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.0.2.1 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
0.0.0.0 192.0.2.1 0.0.0.0 UG 0 0 0 venet0
VE: ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2938 errors:0 dropped:0 overruns:0 frame:0
TX packets:2938 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:266816 (260.5 KiB) TX bytes:266816 (260.5 KiB)
venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.1 P-t-P:127.0.0.1 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:220116 errors:0 dropped:0 overruns:0 frame:0
TX packets:137468 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:281279999 (268.2 MiB) TX bytes:40697559 (38.8 MiB)
venet0:1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:192.168.0.221 P-t-P:192.168.0.221 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
venet0:2 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:A.B.C.221 P-t-P:A.B.C.221 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
HN: route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.0.221 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
A.B.C.221 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
A.B.C.216 0.0.0.0 255.255.255.248 U 0 0 0 eth1
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 A.B.C.217 0.0.0.0 UG 100 0 0 eth1
HN: ifconfig
eth0 Link encap:Ethernet HWaddr 00:0d:60:d5:ef:06
inet addr:192.168.0.15 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::20d:60ff:fed5:ef06/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:877 errors:0 dropped:0 overruns:0 frame:0
TX packets:1176 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:87858 (85.7 KB) TX bytes:117816 (115.0 KB)
Interrupt:24
eth1 Link encap:Ethernet HWaddr 00:0d:60:d5:ef:07
inet addr:A.B.C.220 Bcast:A.B.C.223 Mask:255.255.255.248
inet6 addr: fe80::20d:60ff:fed5:ef07/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:293999 errors:0 dropped:0 overruns:0 frame:0
TX packets:187771 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:352176343 (335.8 MB) TX bytes:50058392 (47.7 MB)
Interrupt:25
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:159419 errors:0 dropped:0 overruns:0 frame:0
TX packets:262707 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:42099706 (40.1 MB) TX bytes:344638104 (328.6 MB)
HN: cat /etc/vz/conf/221.conf
ONBOOT="yes"
# UBC parameters (in form of barrier:limit)
KMEMSIZE="11055923:11377049"
LOCKEDPAGES="256:256"
PRIVVMPAGES="65536:69632"
SHMPAGES="21504:21504"
NUMPROC="240:240"
PHYSPAGES="0:2147483647"
VMGUARPAGES="33792:2147483647"
OOMGUARPAGES="26112:2147483647"
NUMTCPSOCK="360:360"
NUMFLOCK="188:206"
NUMPTY="16:16"
NUMSIGINFO="256:256"
TCPSNDBUF="1720320:2703360"
TCPRCVBUF="1720320:2703360"
OTHERSOCKBUF="1126080:2097152"
DGRAMRCVBUF="262144:262144"
NUMOTHERSOCK="360:360"
DCACHESIZE="3409920:3624960"
NUMFILE="9312:9312"
AVNUMPROC="180:180"
NUMIPTENT="128:128"
# Disk quota parameters (in form of softlimit:hardlimit)
DISKSPACE="1048576:1153024"
DISKINODES="200000:220000"
QUOTATIME="0"
# CPU fair sheduler parameter
CPUUNITS="1000"
VE_ROOT="/var/lib/vz/root/$VEID"
VE_PRIVATE="/var/lib/vz/private/$VEID"
OSTEMPLATE="debian-5.0-x86"
ORIGIN_SAMPLE="vps.basic"
IP_ADDRESS="192.168.0.221 A.B.C.221"
NAMESERVER="69.18.32.50"
HOSTNAME="tm.hostname.com"
[Updated on: Tue, 14 July 2009 14:44] Report message to a moderator
|
|
|
|
|
Re: Problems with local network interface [message #36744 is a reply to message #36743] |
Tue, 14 July 2009 15:33 |
maratrus
Messages: 1495 Registered: August 2007 Location: Moscow
|
Senior Member |
|
|
Hi,
Quote: |
How would I make this permanent across reboots? Should I add the commands to the rc.local inside the virtual machine...
Is the rc.local executed when the virtual machine starts up?
|
Yes, rc.local is executed during the startup.
|
|
|