Hello,

I just setup a linux router using SuSE 10.0. I have three NICS. One for NIC for my public zone (Internet) and two NICS for my internal network.

Internal NIC IP: 192.168.1.254
Internal NIC IP: 192.168.2.254

Both internal networks are able to access the Internet; however, they are not able to connect to each other. Everytime I try to access an item from 192.168.1.x to 192.168.2.x (and vica-versa), I get a timeout issue. Which I believe my routing table will not the networks talk to each other.

I believe my problem is with my routing table. My current routing table looks like the following:

Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.2.0 * 255.255.255.0 U 0 0 0 eth3
192.168.1.0 * 255.255.255.0 U 0 0 0 eth1
Internet * 255.255.255.0 U 0 0 0 eth2
link-local * 255.255.0.0 U 0 0 0 eth1
loopback * 255.0.0.0 U 0 0 0 lo
default Internet 0.0.0.0 UG 0 0 0 eth2

Ineternet = My gateway address.

What suggestion would you give me to resolve my networking issue?

Thanks for your help!

Internal NIC IP: 192.168.1.254 Is this eth1?
Internal NIC IP: 192.168.2.254 Is this eth3?

eth1 is 192.168.1.254
eth2 is Internet IP
eth3 is 192.168.2.254

Check the routing tables on the other hosts. For example, if you have a computer "smith" with an IP address of 192.168.1.250, and a computer "jones" with an address of 192.168.2.240, check that "smith" has a route entry for the 192.168.2 subnet and that that "jones" has an entry for the 192.168.1 subnet.

Thanks for your help jschiwal!

I verfied what you have said, and that is why I need to do. My next question is how do I push those configs out via my dhcp server? Below is my current dhcp config file.

authoritative ;
ddns-update-style none;
ddns-updates off;
max-lease-time 172800;
default-lease-time 14400;
subnet 192.168.1.0 netmask 255.255.255.0 {
option broadcast-address 192.168.1.255;
option domain-name "home.net";
option routers 192.168.1.254;
option subnet-mask 255.255.255.0;
option domain-name-servers 192.168.1.254;
range 192.168.1.100 192.168.1.150;
}
subnet 192.168.2.0 netmask 255.255.255.0 {
option broadcast-address 192.168.2.255;
option domain-name "wireless.home.net";
option routers 192.168.2.254;
option subnet-mask 255.255.255.0;
option domain-name-servers 192.168.2.254;
range 192.168.2.100 192.168.2.150;
}

Thanks for your help!

I took a look in the dhcp.pdf howto. The routers entry is the router/gateway value, so that looks correct. However, are you running your own bind service. I think that the domain-name-servers are the internet dns servers that the dhcp clients should use. Although, the values in the how-to look similar. I don't run a dhcp server because I use my linksys router for that.

Your distro may have a linux-howtos package with all of the howtos found on the www.tldp.org website.

You are correct. I am running my own dns (bind) server.

I am going to check out my sysctl.conf file...I added some hardening items in there (way back in the day). This might be my problem.

Any thoughts?? Thank you for help on going help jschiwal! :-)

I wonder if you also want to include the address for an internet dns server, or verify whether your DNS server can query an internet DNS server when it doesn't have the answer itself.. What is often done in larger networks, is having two name servers. The one inside the firewall knows nothing about any hosts outside the lan. The one located in the dmz knows nothing about hosts inside the network.