I have two interfaces, enabled net.ipv4.ip_forward, disables SELinux and disabled firewalld
The interfaces can ping their respective networks and visa versa. However no data is routed between the interfaces. I would like the 10.1... LAN to be able to reach the WAN 192.168....
Any help is appreciated, I have listed the details below:
Quote:
[root@localhost network-scripts]# sestatus
SELinux status: disabled
————
Firewalld disabled
[root@localhost network-scripts]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
Active: inactive (dead)
Docs: man:firewalld(1)
----------------------------------
[root@localhost network-scripts]# sysctl net.ipv4.ip_forward
net.ipv4.ip_forward = 1
——————
[root@localhost network-scripts]# more ifcfg-ens224
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
IPADDR=192.168.1.142
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=8.8.8.8
ZONE=external
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens224
UUID=d38d7147-45a1-4a59-8c2a-6df3d24362e1
DEVICE=ens224
ONBOOT=yes
————————
[root@localhost network-scripts]# more ifcfg-ens192
TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="static"
ONBOOT="yes"
IPADDR="10.1.10.1"
NETMASK="255.0.0.0"
DNS1="8.8.8.8"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="no"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
IPV6_DEFROUTE="yes"
IPV6_FAILURE_FATAL="no"
IPV6_ADDR_GEN_MODE="stable-privacy"
NAME="ens192"
UUID="218aa40e-d706-42a9-b77c-c7313f392b09"
DEVICE="ens192"
———————
[root@localhost network-scripts]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:05:9a:da brd ff:ff:ff:ff:ff:ff
inet 10.1.10.1/8 brd 10.255.255.255 scope global ens192
valid_lft forever preferred_lft forever
inet6 fe80::2efa:c734:519c:57d8/64 scope link
valid_lft forever preferred_lft forever
3: ens224: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:05:9a:e4 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.142/24 brd 192.168.1.255 scope global ens224
valid_lft forever preferred_lft forever
inet6 2605:6000:1025:81d9:1783:f72b:3bd4:dca/64 scope global noprefixroute dynamic
valid_lft 568146sec preferred_lft 568146sec
inet6 fe80::a70f:c8b4:7210:3ef6/64 scope link
valid_lft forever preferred_lft forever
—————
[root@localhost network-scripts]# ip route
default via 192.168.1.1 dev ens224 proto static metric 100
10.0.0.0/8 dev ens192 proto kernel scope link src 10.1.10.1 metric 100
192.168.1.0/24 dev ens224 proto kernel scope link src 192.168.1.142 metric 100
[root@localhost network-scripts]#
|
