LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 10-15-2007, 11:29 AM   #16
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,249
Blog Entries: 5

Rep: Reputation: 191Reputation: 191

Quote:
Originally Posted by Linux_Questions View Post

on the linux router

# route add -net 192.168.15.0/24 gw 192.168.15.2

Directly connected network should not require a route to be manually added on the same device.. since this interface is attached to the device the route is automatic.


on the external router

destination=192.168.111.0

snmask=255.255.255.0

gateway=192.168.15.1

interface: -->LOCAL<-- \ internet

hop count: 2


on the external router

destination=192.168.111.0

snmask=255.255.255.0

gateway=192.168.15.2 <- This is the IP of the next Hop interface.. not the local interface of the router

interface: -->LOCAL<-- \ internet

hop count: 2
Hope that helps..
 
Old 10-15-2007, 02:00 PM   #17
Linux_Questions
LQ Newbie
 
Registered: Oct 2007
Posts: 15

Original Poster
Rep: Reputation: 0
O.K. Surprisingly enough I understand what you are saying, however I still cant ping the external router from the internal NT clients.
 
Old 10-15-2007, 02:06 PM   #18
Linux_Questions
LQ Newbie
 
Registered: Oct 2007
Posts: 15

Original Poster
Rep: Reputation: 0
Throughput stops @ the linux router in both directions.
I can ping the internal interface (192.168.111.10) from the external router.
I can ping the external interface (192.168.15.2) from the NT clients.
I cant ping the internal interface(192.168.15.1) of the external router from the NT clients.
I cant ping the NT clients from the external router.
 
Old 10-15-2007, 02:29 PM   #19
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,249
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
I would run tcpdump on your router box and figure out what is happening to the traffic.

tcpdump -vv src net 192.168.111.0/24 and dst net 192.168.15.0/24 > ~/capture.txt

That should capture data going from the one network to the other and save the output in a file called capture.txt in your home directory.

then ping from a client in 192.168.111.0 subnet to the external router at 192.168.15.1 to gather some data.

and post the output of route -n here as well

Last edited by farslayer; 10-15-2007 at 02:31 PM.
 
Old 10-15-2007, 03:14 PM   #20
Linux_Questions
LQ Newbie
 
Registered: Oct 2007
Posts: 15

Original Poster
Rep: Reputation: 0
O.K. Here's the deal:

Everything is working now, and without NAT as intended.

You're advice was correct from the start. Routing was actually working the whole time. The problem was that the firewall was also working. It seems as though that the iptables service in Fedora is much like the ICS/IF service in Windows NT 5.x. When the firewall is disabled the service is actually still running, and obviously if there are no rules then there is no traffic allowed. I took iptables out of runlevel 5, and routing immediately began working as well as the NAT from the external router. My problem with routing in the past had been my failure to add a route to the internal LAN on the external routers. I presume I was always sending traffic to the external router, but it was never able to make it's way back.

Thanks to your specific help I was able to determine where the gap was and that helped me narrow it down. You were specific enough to where I will be able to apply what I learned from you to every network in the future. Thanks a million. I'm not sure how the n00b can help the master but I owe you one.

Now comes the nightmare of learning how to write custom firewall rules on an OS who's syntax I don't quite understand yet..

I think I feel comfortable enough to switch to a lower-scale, less user-friendly distro as well now. Any suggestions from anyone?

For anyone else out there with similar problems:

1. Network Manager is a common reason for boot-activation failure in dual-NIC scenarios. If you can activate after all your services are started, but not during boot, check your log files thoroughly line by line.
2. Configure all routers for all networks they are not directly connected to.
3. IPtables may still block traffic when "disabled".
 
Old 10-15-2007, 05:22 PM   #21
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,249
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
2 useful iptables commands for troubleshooting.

iptables -L
and
iptables -F

Quote:
-L, --list [chain]
List all rules in the selected chain. If no chain is selected, all chains are listed. As
every other iptables command, it applies to the specified table (filter is the default), so NAT
rules get listed by


-F, --flush [chain]
Flush the selected chain (all the chains in the table if none is given). This is equivalent to
deleting all the rules one by one.
Glad you got it all worked out.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Routing for eth0 and wlan0 with static IPs on the same network. kelvinlo Linux - Wireless Networking 3 10-15-2007 04:54 PM
Network Routing Configuration pjlewis Linux - Networking 2 01-21-2006 11:05 PM
how to config. network settings for having a static ip with a router kkeith Linux - Newbie 2 10-19-2005 05:00 AM
Network configuration files: where to write the static ip? zvonSully Ubuntu 3 04-20-2005 03:23 AM
Static Network config for PCMCIA NIC in RH 7.2 jboo Linux - Networking 1 01-29-2002 08:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 03:02 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration