Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1236 > unrolled thread

linux as multi-port (subnet) router using Ubuntu 11.10 server

Started bylincy <lincylin@gmail.com>
First post2012-04-08 05:50 -0700
Last post2012-04-08 17:25 -0700
Articles 2 on this page of 22 — 3 participants

Back to article view | Back to comp.os.linux.networking

Contents

  linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 05:50 -0700
    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 17:16 +0300
      Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:26 -0700
        Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:47 -0700
          Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:13 +0200
            Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:24 -0700
              Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:31 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:44 -0700
                  Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 19:54 +0200
                    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:13 -0700
                      Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 10:45 +0200
                        Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 06:40 -0700
                          Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 21:01 +0200
                            Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 12:56 -0700
                              Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 23:33 +0200
                                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 08:55 +0300
                                  Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 23:40 -0700
                                    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 14:39 +0300
                                      Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-10 08:22 -0700
                  Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 21:13 +0300
                    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 20:48 +0200
                    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:25 -0700

Page 2 of 2 — ← Prev page 1 [2]

#1248

FromPascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Date2012-04-08 20:48 +0200
Message-ID<jlsmhs$2vc7$1@saria.nerim.net>
In reply to#1247
Tauno Voipio a écrit :
> 
> For clients in the 192.168.1.x network it is different: the
> default gateway must be 192.168.1.254.

This is better if the hosts have specific routes to the other subnets.
Otherwise, the default gateway could be the Linux router. It depends
wheter most of the traffic is going to the internet or to the other subnets.

> IIRC, the WINS name server should be also in the local network.

No, a WINS server, like a DNS server can be anywhere. You don't need on
in each subnet.

> A better listing is available from iptables:
> 
>    iptables -n -v -L

I disagree. The output of iptables-save is more compact and complete (by
default it includes the contents of all the active tables) and the
output format is closer to the iptables syntax used to create the rules.

[toc] | [prev] | [next] | [standalone]

#1252

Fromlincy <lincylin@gmail.com>
Date2012-04-08 17:25 -0700
Message-ID<7920073.12.1333931157758.JavaMail.geo-discussion-forums@pbtd9>
In reply to#1247
> Point 2.
> 
> There is a DHCP server mentioned. Do you run DHCP in the network?
> 
> If you do, the proper location for the server is the Linux machine.
> In other cases, you'll need a DHCP relay in the Linux machine.
> 
> The setup means that machines in 192.168.2.x network must have
> 192.168.2.1 as the default gateway, and similarly for networks
> 192.168.3.x and 192.168.4.x. The gateway must always be in the
> same local network as the client.

Yes, I have using dnsmasq in this 4 ports linux box.

here is the conf.

except-interface=eth0      # don't dhcp for 192.168.1.0
dhcp-range=interface:eth1,192.168.2.101,192.168.2.200,255.255.255.0 #the default gw will as eth1 -> 192.168.2.1
dhcp-range=interface:eth2,192.168.3.101,192.168.3.200,255.255.255.0 # the default gw will as eth2 -> 192.168.3.1
dhcp-range=interface:eth3,192.168.4.101,192.168.4.200,255.255.255.0 # the default gw will as eth3 -> 192.168.4.1
dhcp-option=44,192.168.1.1 # Wins point to self (Samba just for WINS Server)


> 
> For clients in the 192.168.1.x network it is different: the
> default gateway must be 192.168.1.254.
> 

192.168.1.0 was dhcp by 192.168.1.254 (firewall). All machine in 192.168.1.0 was default gw to 192.168.1.254

> IIRC, the WINS name server should be also in the local network.
> 
> Point 3.
> 
> Weird - if there is not a 'security' module in Windows blocking
> the show. Can you test with a Linux laptop in the subnet?
> 

I will try to setup an linux box as client to try this late.

> As Pascal said, tcpdump or - still better - Wireshark is your
> friend here.
> 
> Point 4.
> 
> A better listing is available from iptables:
> 
>    iptables -n -v -L
> 
> -- 

Chain INPUT (policy ACCEPT 27166 packets, 1905K bytes)
 pkts bytes target     prot opt in     out     source       destination         

Chain FORWARD (policy ACCEPT 17895 packets, 10M bytes)
 pkts bytes target     prot opt in     out     source       destination         

Chain OUTPUT (policy ACCEPT 29452 packets, 5517K bytes)
 pkts bytes target     prot opt in     out     source       destination

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.os.linux.networking

csiph-web