IP Networking

I have an IP routing issue or I am just to stupid to work it out myself.

I have setup am old PC running SUSE Linux 11.3 as a router, the system has 3 Interfaces connecting 3 networks.

Interface 1 = 10.164.2.161/21
Interface 2 = 192.168.1.210/24
Interface 3 = 30.1.0.11/16

The default Gateway is 10.164.0.35 - access to the outside world.

IP Forwarding is enabled and firewall is disabled for now.

Now I am able to ping,trace, access across the box without any issues unless I am trying to reach the outside. For example a ping from 30.1.0.2 to 10.164.2.100 works without issues, if I ping 10.164.0.35 my defined default gateway it will not find it.

Obviously I am doing something wrong or I have forgoten to define a route or something as such any help or suggestions are greatly appreciated.

Cheers ...

Hello i think this may help you.

nano /etc/sysconfig/network/routes

route add -net 10.164.0.0/21 gw 10.164.0.135
route add -net 192.168.1.0/24 gw 10.164.0.135
route add -net 30.1.0.0/16 gw 10.164.0.135

route add defaltul gw 10.164.0.135/25

If this does not work, could you add the netstat -rn and the route output to the case and we can review better the issue, and also you can add the interfaces outputs so we can verify if they are configured to support what you request.

Best regards,

Luis

Luis,

thanks for tryiing help, I made those suggested changes without much luck and have enlcosed the route output:

[IMG]file:///C:/DOCUME%7E1/lenzent/LOCALS%7E1/Temp/moz-screenshot.jpg[/IMG]Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 * 255.255.255.0 U 0 0 0 eth4
10.164.0.0 * 255.255.248.0 U 0 0 0 eth0
30.1.0.0 * 255.255.0.0 U 0 0 0 eth1
link-local * 255.255.0.0 U 0 0 0 eth0
loopback * 255.0.0.0 U 0 0 0 lo
default 10.164.0.35 0.0.0.0 UG 0 0 0 eth0

and the netstat -rn output

Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth4
10.164.0.0 0.0.0.0 255.255.248.0 U 0 0 0 eth0
30.1.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 10.164.0.35 0.0.0.0 UG 0 0 0 eth0

So, let see if this makes things clearer ...

Thanks Thomas

Hello,

I just review your notes and i am wondering if there is a chance that you check the ip address that you have, on the interfaces, also i would like to recommend a better segmentation of the network, and that u can use a p2p connection whit the gateway in order to make it more secure.

we can help you whit this
network sub netting
routes
and i will like to ask u if there is a chance that u can provide us the ifconfig so we can verify the ipaddress of the interfaces.

Thanks,

Luis,

cannot do anything about the segmentation at this moment in time, it is planned to consolidated those networks this year untill then it will have to work the way it is.

IFConfig print out as per request:

eth0 Link encap:Ethernet HWaddr 00:08:02:40:FE:A6
inet addr:10.164.2.161 Bcast:10.164.7.255 Mask:255.255.248.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2183638 errors:0 dropped:0 overruns:0 frame:0
TX packets:376705 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:183765987 (175.2 Mb) TX bytes:35733810 (34.0 Mb)

eth1 Link encap:Ethernet HWaddr 00:00:24:C3:4B:98
inet addr:30.1.0.11 Bcast:30.1.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:457382 errors:0 dropped:0 overruns:0 frame:0
TX packets:286613 errors:28 dropped:0 overruns:28 carrier:28
collisions:0 txqueuelen:1000
RX bytes:46771480 (44.6 Mb) TX bytes:25163396 (23.9 Mb)
Interrupt:16 Base address:0x2000

eth2 Link encap:Ethernet HWaddr 00:00:24:C3:4B:99
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:18 Base address:0x4000

eth3 Link encap:Ethernet HWaddr 00:00:24:C3:4B:9A
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:21 Base address:0xa000

eth4 Link encap:Ethernet HWaddr 00:00:24:C3:4B:9B
inet addr:192.168.1.210 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4332590 errors:0 dropped:0 overruns:0 frame:0
TX packets:19178 errors:8 dropped:0 overruns:8 carrier:8
collisions:0 txqueuelen:1000
RX bytes:406567872 (387.7 Mb) TX bytes:5252644 (5.0 Mb)
Interrupt:22 Base address:0xc000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:297 errors:0 dropped:0 overruns:0 frame:0
TX packets:297 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:28884 (28.2 Kb) TX bytes:28884 (28.2 Kb)

pan0 Link encap:Ethernet HWaddr 2A:FE:43:FE:4D:30
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)


Hope it helps ...

Cheers Thomas

Try this,

nano /etc/sysconfig/network/routes

route add -net 10.164.0.0 -netmask 255.255.248.0 dev eth0 -gw 10.164.2.135
route add -net 192.168.1.0 -netmask 255.255.255.0 via 192.168.1.210 dev eth4 -gw 10.164.2.135
route add -net 30.1.0.0 -netmask 255.255.0.0 via 30.10.0.11 dev eth1 -gw 10.164.0.135
ip route add default via 10.164.2.135
route add defaltul gw 10.164.0.135 -netmask 255.255.248.0

Address:
eth4 00:00:24:C3:4B:9B 192.168.1.210 (250 max host per sub net).
eth1 00:00:24:C3:4B:98 30.1.0.11 (This is a public ip address and you must not use them).
eth0 00:08:02:40:FE:A6 10.164.2.161 (2046 max host per sub net, it is recommended to use about like 500 host per sub net, because the broadcast storms can affect the network).

Best regards,

Luis,

sorry for not getting back sooner, I would like to thank your for your efforts but unfortunately this is not working either. I think I will park the whole for the time ...

Again thanks for your efforts and help ...

Cheers Thomas