Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #1240

Re: linux as multi-port (subnet) router using Ubuntu 11.10 server

From lincy <lincylin@gmail.com>
Newsgroups comp.os.linux.networking
Subject Re: linux as multi-port (subnet) router using Ubuntu 11.10 server
Date 2012-04-08 08:26 -0700
Organization http://groups.google.com
Message-ID <13863831.877.1333898763111.JavaMail.geo-discussion-forums@pbjk8> (permalink)
References <11134348.13.1333889415598.JavaMail.geo-discussion-forums@pbnu1> <jls6jb$50l$1@dont-email.me>

Show all headers | View raw


Tauno Voipio於 2012年4月8日星期日UTC+8下午10時16分11秒寫道:
> On 8.4.12 3:50 , lincy wrote:
> > Hi everyone.
> >
> >     I have an fast-growing network. Around 120-130 pcs in single class c localnet (192.168.1.0/24). Because service lot large file share (multi-nas for multi-media).
> >
> >     Now I am try to split it by department. So, I am using an 4 ports giga lan machine and install ubuntu 11.10 server. Because I just want to split the network but not to do any security in this machine. So, I just setup 4 subnet and enable the ip forward.
> >
> > eth0: 192.168.1.1 netmask 255.255.255.0
> > eth1: 192.168.2.1 netmask 255.255.255.0
> > eth2: 192.168.3.1 netmask 255.255.255.0
> > eth3: 192.168.4.1 netmask 255.255.255.0
> >
> > And echo 1>  /proc/sys/net/ipv4/ip_forward in /etc/rc.local
> >
> > Now, My problem was.
> >
> > I can't ping cross subnet, ex: ping 192.168.2.x from 192.168.1.x
> > But I can open web page cross subnet. ex: open 192.168.1.x intranet web server from 192.168.2.x or 192.168.3.x
> > I also can't access the windows/share-folder either samba share cross subnet.
> > But same subnet can access. ex: 192.168.1.x's pc can access NAS within 192.168.1.x but not NAS in 192.168.2.x.
> >
> > Does anyone know what's wrong ?
> 
> 
> How is the default gateway in the client machines set?
> 
> My guess is:
> 
> a) The clients in subnets do not know that the route to another
>     subnet goes via the Linux machine,

I have using dnsmasq too, so each subnet's client can get correctly ip and default gw to this machine. ex: 192.168.1.x


> Another question: Is the way out from the subnets to the big
> Internet via the Linux machine, or something else?
> 
> If this is a basic network tree, you should have in each machine
> the default gateway pointing to the next step toward the Net.
> You have now changed the next step from what it was.
> 
> -- 
> 
> Tauno Voipio



Tauno Voipio於 2012年4月8日星期日UTC+8下午10時16分11秒寫道:
> On 8.4.12 3:50 , lincy wrote:
> > Hi everyone.
> >
> >     I have an fast-growing network. Around 120-130 pcs in single class c localnet (192.168.1.0/24). Because service lot large file share (multi-nas for multi-media).
> >
> >     Now I am try to split it by department. So, I am using an 4 ports giga lan machine and install ubuntu 11.10 server. Because I just want to split the network but not to do any security in this machine. So, I just setup 4 subnet and enable the ip forward.
> >
> > eth0: 192.168.1.1 netmask 255.255.255.0
> > eth1: 192.168.2.1 netmask 255.255.255.0
> > eth2: 192.168.3.1 netmask 255.255.255.0
> > eth3: 192.168.4.1 netmask 255.255.255.0
> >
> > And echo 1>  /proc/sys/net/ipv4/ip_forward in /etc/rc.local
> >
> > Now, My problem was.
> >
> > I can't ping cross subnet, ex: ping 192.168.2.x from 192.168.1.x
> > But I can open web page cross subnet. ex: open 192.168.1.x intranet web server from 192.168.2.x or 192.168.3.x
> > I also can't access the windows/share-folder either samba share cross subnet.
> > But same subnet can access. ex: 192.168.1.x's pc can access NAS within 192.168.1.x but not NAS in 192.168.2.x.
> >
> > Does anyone know what's wrong ?
> 
> 
> How is the default gateway in the client machines set?
> 
> My guess is:
> 
> a) The clients in subnets do not know that the route to another
>     subnet goes via the Linux machine,
> 
> b) There is a HTTP proxy in the Linux machine forwarding the
>     Web requests.
> 
> Another question: Is the way out from the subnets to the big
> Internet via the Linux machine, or something else?
> 
> If this is a basic network tree, you should have in each machine
> the default gateway pointing to the next step toward the Net.
> You have now changed the next step from what it was.
> 
> -- 
> 
> Tauno Voipio



Tauno Voipio於 2012年4月8日星期日UTC+8下午10時16分11秒寫道:
> On 8.4.12 3:50 , lincy wrote:
> > Hi everyone.
> >
> >     I have an fast-growing network. Around 120-130 pcs in single class c localnet (192.168.1.0/24). Because service lot large file share (multi-nas for multi-media).
> >
> >     Now I am try to split it by department. So, I am using an 4 ports giga lan machine and install ubuntu 11.10 server. Because I just want to split the network but not to do any security in this machine. So, I just setup 4 subnet and enable the ip forward.
> >
> > eth0: 192.168.1.1 netmask 255.255.255.0
> > eth1: 192.168.2.1 netmask 255.255.255.0
> > eth2: 192.168.3.1 netmask 255.255.255.0
> > eth3: 192.168.4.1 netmask 255.255.255.0
> >
> > And echo 1>  /proc/sys/net/ipv4/ip_forward in /etc/rc.local
> >
> > Now, My problem was.
> >
> > I can't ping cross subnet, ex: ping 192.168.2.x from 192.168.1.x
> > But I can open web page cross subnet. ex: open 192.168.1.x intranet web server from 192.168.2.x or 192.168.3.x
> > I also can't access the windows/share-folder either samba share cross subnet.
> > But same subnet can access. ex: 192.168.1.x's pc can access NAS within 192.168.1.x but not NAS in 192.168.2.x.
> >
> > Does anyone know what's wrong ?
> 
> 
> How is the default gateway in the client machines set?
> 
> My guess is:
> 
> a) The clients in subnets do not know that the route to another
>     subnet goes via the Linux machine,
> 
> b) There is a HTTP proxy in the Linux machine forwarding the
>     Web requests.
> 
> Another question: Is the way out from the subnets to the big
> Internet via the Linux machine, or something else?
> 
> If this is a basic network tree, you should have in each machine
> the default gateway pointing to the next step toward the Net.
> You have now changed the next step from what it was.
> 
> -- 
> 
> Tauno Voipio



Tauno Voipio於 2012年4月8日星期日UTC+8下午10時16分11秒寫道:
> On 8.4.12 3:50 , lincy wrote:
> > Hi everyone.
> >
> >     I have an fast-growing network. Around 120-130 pcs in single class c localnet (192.168.1.0/24). Because service lot large file share (multi-nas for multi-media).
> >
> >     Now I am try to split it by department. So, I am using an 4 ports giga lan machine and install ubuntu 11.10 server. Because I just want to split the network but not to do any security in this machine. So, I just setup 4 subnet and enable the ip forward.
> >
> > eth0: 192.168.1.1 netmask 255.255.255.0
> > eth1: 192.168.2.1 netmask 255.255.255.0
> > eth2: 192.168.3.1 netmask 255.255.255.0
> > eth3: 192.168.4.1 netmask 255.255.255.0
> >
> > And echo 1>  /proc/sys/net/ipv4/ip_forward in /etc/rc.local
> >
> > Now, My problem was.
> >
> > I can't ping cross subnet, ex: ping 192.168.2.x from 192.168.1.x
> > But I can open web page cross subnet. ex: open 192.168.1.x intranet web server from 192.168.2.x or 192.168.3.x
> > I also can't access the windows/share-folder either samba share cross subnet.
> > But same subnet can access. ex: 192.168.1.x's pc can access NAS within 192.168.1.x but not NAS in 192.168.2.x.
> >
> > Does anyone know what's wrong ?
> 
> 
> How is the default gateway in the client machines set?
> 
> My guess is:
> 
> a) The clients in subnets do not know that the route to another
>     subnet goes via the Linux machine,
> 

Thanks your reply.
First, I have 192.168.1.x subnet. so. Have one firewall in front of Internet. It's 192.168.1.254, So, every machine in 192.168.1.x was default gw point to 192.168.1.254

At the new 4 ports machine. I set the default gw to 192.168.1.254
Then add static route, 192.168.2.x/192.168.3.x/192.168.4.x point to 192.168.1.1
This machine no any rule. Just forward enable.

> Another question: Is the way out from the subnets to the big
> Internet via the Linux machine, or something else?

as above.

I think, If I don't set any filter rule. This machine should pass any package. But look like it don't. I don't know why http port can work. But not other ports.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 05:50 -0700
  Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 17:16 +0300
    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:26 -0700
      Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:47 -0700
        Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:13 +0200
          Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:24 -0700
            Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:31 +0200
              Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:44 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 19:54 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:13 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 10:45 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 06:40 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 21:01 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 12:56 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 23:33 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 08:55 +0300
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 23:40 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 14:39 +0300
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-10 08:22 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 21:13 +0300
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 20:48 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:25 -0700

csiph-web