User:Obri/ksb-routing

m0n0wall

IP Einstellungen

• Interface: LAN
• IP 10.106.1.1/16

Routen

• Interface: LAN
• Network: 10.111.0.0/16
• Gateway: 10.106.2.9

Nat

Für Netz 10.111.0.0/16 und 10.106.0.0/16

Linux Router

IP Einstellungen

eth0      Link encap:Ethernet  HWaddr 00:30:6E:1E:6F:B7
         inet addr:10.106.2.9  Bcast:10.106.255.255  Mask:255.255.0.0
         inet6 addr: fe80::230:6eff:fe1e:6fb7/64 Scope:Link
         UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
         RX packets:180249 errors:0 dropped:0 overruns:0 frame:0
         TX packets:72881 errors:0 dropped:0 overruns:0 carrier:0
         collisions:0 txqueuelen:1000
         RX bytes:121537173 (115.9 MiB)  TX bytes:12111563 (11.5 MiB)

eth1      Link encap:Ethernet  HWaddr 00:01:03:D7:DE:67
         inet addr:10.111.1.1  Bcast:10.111.255.255  Mask:255.255.0.0
         inet6 addr: fe80::201:3ff:fed7:de67/64 Scope:Link
         UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
         RX packets:3148467 errors:0 dropped:0 overruns:1 frame:0
         TX packets:1510312 errors:0 dropped:0 overruns:0 carrier:0
         collisions:0 txqueuelen:1000
         RX bytes:2417380 (2.3 MiB)  TX bytes:763661249 (728.2 MiB)
         Interrupt:185 Base address:0x1800

Routen

route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.106.0.0      0.0.0.0         255.255.0.0     U     0      0        0 eth0
10.111.0.0      0.0.0.0         255.255.0.0     U     0      0        0 eth1
0.0.0.0         10.106.1.1      0.0.0.0         UG    0      0        0 eth0

Problem

Ping vom linux Router mit Absenderip 10.111.1.1

# ping -I 10.111.1.1 10.106.2.2
PING 10.106.2.2 (10.106.2.2) from 10.111.1.1 : 56(84) bytes of data.
--- 10.106.2.2 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 3999ms

geht net.

ping von 10.106.2.2 nach 10.111.1.1

~# ping 10.111.1.1
PING 10.111.1.1 (10.111.1.1) 56(84) bytes of data.
From 10.106.1.1: icmp_seq=1 Redirect Host(New nexthop: 10.106.2.9)
64 bytes from 10.111.1.1: icmp_seq=1 ttl=64 time=2.24 ms
64 bytes from 10.111.1.1: icmp_seq=2 ttl=64 time=3.42 ms
64 bytes from 10.111.1.1: icmp_seq=3 ttl=64 time=1.84 ms
--- 10.111.1.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2001ms
rtt min/avg/max/mdev = 1.840/2.502/3.422/0.672 ms

Nochmals ein Ping von 10.111.1.1 nach 10.106.2.2

# ping -I 10.111.1.1 10.106.2.2
PING 10.106.2.2 (10.106.2.2) from 10.111.1.1 : 56(84) bytes of data.
64 bytes from 10.106.2.2: icmp_seq=1 ttl=64 time=1.65 ms
64 bytes from 10.106.2.2: icmp_seq=2 ttl=64 time=1.67 ms
--- 10.106.2.2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 1.652/1.665/1.678/0.013 ms

geht?!