| Problems with local network interface [message #36609] |
Sat, 04 July 2009 16:50  |
ThatGuy
Messages: 4
Registered: July 2009
|
Junior Member |
|
|
Hi,
My HN has two interfaces, one going to the public net and the other to our private net.
public: A.B.C.220
private: 192.168.0.15
I've given my VE two ip address, one for each network, everything works fine for the public net... but I'm having trouble with the private net.
public: A.B.C.221
private: 192.168.0.221
When I ping from the VE to a machine on the private net I don't get anything back.
Tcpdump on the HW node (local eth) show that echo requests are sent from the VE's public address to the private address of the
remote machine (bit strange?)... and no return packets...
HN: tcpdump -i eth0 -e host 192.168.0.14
11:04:12.019310 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 1, length 64
11:04:13.026360 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 2, length 64
11:04:14.026183 00:0d:60:d5:ef:06 (oui Unknown) > 00:1a:4b:e8:11:26 (oui Unknown), ethertype IPv4 (0x0800), length 98: A.B.C.221 > 192.168.0.14: ICMP echo request, id 525, seq 3, length 64
Pinging from the HN to 192.168.0.14 works fine.
I'm not sure what's going on. This is a clean HN install of ubuntu 8.04 with a clean VE install of debian 5, haven't even touched iptables yet.
I'm not completely new to networking, but this is beyond me. Help is greatly appreciated 
Required networking info:
VE: ip rule list
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
HN: ip rule list
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
VE: ip route list table all
default via 192.0.2.1 dev venet0
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
local 192.168.0.221 dev venet0 table local proto kernel scope host src 192.168.0.221
local A.B.C.221 dev venet0 table local proto kernel scope host src A.B.C.221
broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev venet0 table local proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
local ::1 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
HN: ip route list table all
192.168.0.221 dev venet0 scope link
A.B.C.221 dev venet0 scope link
A.B.C.216/29 dev eth1 proto kernel scope link src A.B.C.220
192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.15
default via A.B.C.217 dev eth1 metric 100
broadcast 192.168.0.255 dev eth0 table local proto kernel scope link src 192.168.0.15
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
local 192.168.0.15 dev eth0 table local proto kernel scope host src 192.168.0.15
broadcast A.B.C.216 dev eth1 table local proto kernel scope link src A.B.C.220
broadcast 192.168.0.0 dev eth0 table local proto kernel scope link src 192.168.0.15
local A.B.C.220 dev eth1 table local proto kernel scope host src A.B.C.220
broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
broadcast A.B.C.223 dev eth1 table local proto kernel scope link src A.B.C.220
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
fe80::/64 dev eth1 metric 256 expires -67224sec mtu 1500 advmss 1440 hoplimit 4294967295
fe80::/64 dev eth0 metric 256 expires -67223sec mtu 1500 advmss 1440 hoplimit 4294967295
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
local ::1 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
local fe80::20d:60ff:fed5:ef06 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
local fe80::20d:60ff:fed5:ef07 via :: dev lo table local proto none metric 0 mtu 16436 advmss 16376 hoplimit 4294967295
ff00::/8 dev eth1 table local metric 256 expires -67224sec mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth0 table local metric 256 expires -67223sec mtu 1500 advmss 1440 hoplimit 4294967295
unreachable default dev lo table unspec proto none metric -1 error -101 hoplimit 255
VE: sudo iptables -t nat -L ; sudo iptables -t filter -L ; sudo iptables -t mangle -L
FATAL: Could not load /lib/modules/2.6.24-24-openvz/modules.dep: No such file or directory
iptables v1.4.2: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
HN: sudo iptables -t nat -L ; sudo iptables -t filter -L ; sudo iptables -t mangle -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
[Updated on: Sat, 04 July 2009 17:22] Report message to a moderator |
|
|
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
