[ale] Need help with routes

Michael H. Warfield mhw at WittsEnd.com
Thu Aug 9 11:37:51 EDT 2012


On Thu, 2012-08-09 at 10:37 -0400, Chuck Payne wrote:
> Erik,

> I can't follow. Maybe I should have asked how to you get what is in CentOS/RHEL

Assuming we are talking CentOS/RHEL/SL 6 (use to be different)...

For eth0...

/etc/sysconfig/network-scripts/route-eth0

-- 
172.21.1.0/24 via 10.0.0.254
-- 

For eth1...

/etc/sysconfig/network-scripts/route-eth1

-- 
10.1.0.0/24 via 10.1.0.254
-- 

Not sure what kind of vpn you are talking about but most vpn's don't
require special entries there if the system in question is an endpoint
system for the vpn tunnel itself.  The vpn subsystem will build and tear
down your routes and policies as required by the vpn has it comes and
goes.  Generally, setting up static routes here are almost guaranteed to
fail unless it's a vpn that's anchored on that gateway.  If you're doing
something like this on the system that's actually setting up the vpn
then you are almost certainly doing something wrong if it's an OpenVPN
(routed) or Openswan/IPsec (policy) vpn.  Also true of Cisco ASA based
Anyconnect / OpenConnect type vpns.

Regards,
Mike

> route-eth0
> 
> I was told that I could set that up with iproute2. I see from what you
> have give em this...
> 
> Setup system's static routes based on the "/etc/network/routes" definition
> 
> How can I set that up?
> 
> Chuck
> 
> On Thu, Aug 9, 2012 at 7:54 AM, Erik Mathis <erik at mathists.com> wrote:
> > I'm assuming you wanted persistent routes?
> >
> > http://www.debian.org/doc/manuals/debian-reference/ch05.en.html
> >
> > The quick and dirty to add a route with iproute2
> >
> > ip ro add 1.2,3.4/net via ${gateway}
> >
> > -Erik-
> >
> > On Wed, Aug 8, 2012 at 4:36 PM, Chuck Payne <terrorpup at gmail.com> wrote:
> >> Guys,
> >>
> >> I am trying to get a proxmox ve server up and running. I am trying to
> >> get routes working on this server, proxmox ve using debian as it's
> >> base.
> >>
> >> This server is our data center, we can access all server from our
> >> office via vpn connection.  Most server that are running RHEL the
> >> route looks like this.
> >>
> >> # route
> >> Kernel IP routing table
> >> Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
> >> 10.0.0.0        *               255.255.255.0   U     0      0        0 eth0
> >> 10.1.0.0        10.1.0.254     255.255.255.0   UG     0      0        0 eth1
> >> 172.21.1.0      10.0.0.254  255.255.255.0   UG    0      0        0 eth0
> >> 169.254.0.0     *               255.255.0.0     U     0      0        0 eth1
> >> default         10.0.0.254  0.0.0.0         UG    0      0        0 eth0
> >>
> >>
> >> 10.0.0.0/24 is prod
> >> 10.1.0.0/24 is backup
> >> 172.21.1.0/24 is vpn
> >>
> >> On the proxmox server I have two nic that are bridge  (vmbr0/eth0) (vmbr1/eth1)
> >>
> >> vmbr0     Link encap:Ethernet  HWaddr 00:13:72:66:71:a5
> >>           inet addr:10.0.0.61  Bcast:10.0.0.255  Mask:255.255.255.0
> >>           inet6 addr: fe80::213:72ff:fe66:71a5/64 Scope:Link
> >>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> >>           RX packets:23304 errors:0 dropped:0 overruns:0 frame:0
> >>           TX packets:11507 errors:0 dropped:0 overruns:0 carrier:0
> >>           collisions:0 txqueuelen:0
> >>           RX bytes:1946077 (1.8 MiB)  TX bytes:1433780 (1.3 MiB)
> >>
> >> vmbr1     Link encap:Ethernet  HWaddr 00:13:72:66:71:a7
> >>           inet addr:10.1.0.61  Bcast:10.1.0.255  Mask:255.255.255.0
> >>           inet6 addr: fe80::213:72ff:fe66:71a7/64 Scope:Link
> >>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> >>           RX packets:5963 errors:0 dropped:0 overruns:0 frame:0
> >>           TX packets:47 errors:0 dropped:0 overruns:0 carrier:0
> >>           collisions:0 txqueuelen:0
> >>           RX bytes:561867 (548.6 KiB)  TX bytes:2190 (2.1 KiB)
> >>
> >>
> >> I understand in Debian you need to use iproute2 to make the route
> >> static, correct? Here what have, but I am not sure if it goes int othe
> >>
> >> --
> >> Terror PUP a.k.a
> >> Chuck "PUP" Payne
> >>
> >> (678) 636-9678
> >> -----------------------------------------
> >> Discover it! Enjoy it! Share it! openSUSE Linux.
> >> -----------------------------------------
> >> openSUSE -- en.opensuse.org/User:Terrorpup
> >> openSUSE Ambassador/openSUSE Member
> >> Community Manager -- Southeast Linux Foundation (SELF)
> >> skype,twiiter,identica,friendfeed -- terrorpup
> >> freenode(irc) --terrorpup/lupinstein
> >> Register Linux Userid: 155363
> >>
> >> Have you tried SUSE Studio? Need to create a Live CD,  an app you want
> >> to package and distribute , or create your own linux distro. Give SUSE
> >> Studio a try. www.susestudio.com.
> >> See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.
> >> www.southeastlinuxfest.org
> >> _______________________________________________
> >> Ale mailing list
> >> Ale at ale.org
> >> http://mail.ale.org/mailman/listinfo/ale
> >> See JOBS, ANNOUNCE and SCHOOLS lists at
> >> http://mail.ale.org/mailman/listinfo
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> 
> 
> 
> -- 
> Terror PUP a.k.a
> Chuck "PUP" Payne
> 
> (678) 636-9678
> -----------------------------------------
> Discover it! Enjoy it! Share it! openSUSE Linux.
> -----------------------------------------
> openSUSE -- en.opensuse.org/User:Terrorpup
> openSUSE Ambassador/openSUSE Member
> Community Manager -- Southeast Linux Foundation (SELF)
> skype,twiiter,identica,friendfeed -- terrorpup
> freenode(irc) --terrorpup/lupinstein
> Register Linux Userid: 155363
> 
> Have you tried SUSE Studio? Need to create a Live CD,  an app you want
> to package and distribute , or create your own linux distro. Give SUSE
> Studio a try. www.susestudio.com.
> See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.
> www.southeastlinuxfest.org
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
> 

-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
Url : http://mail.ale.org/pipermail/ale/attachments/20120809/fc2f3fd7/attachment.bin 


More information about the Ale mailing list