Re: routing problem
hi ya
yuppers.. agree on all point you make..
problem is the gw is slight misconfigured ..
based on the routes listed...
a cluster on its own private lan needs its own ip#..
( say 10.42.42.* ) and one of them (buster) goes to the fw
on say 10.42.43.*
in its current config... that is not the case..
and as someone else pointed out, make sure buster
has forwarding turned on and that the fw is passing
its data to buster too
c ya
alvin
On Fri, 4 Oct 2002, Kourosh Ghassemieh wrote:
> On Fri, Oct 04, 2002 at 07:40:37PM -0700, Alvin Oga wrote:
> >
> > hiya dave
> >
> > quick glance... and some guesswork
> >
> > - a machine should always be able to ping itself
> > ( 10.32.32.x or 10.42.43.x
> > ( evben with the nic cable disconnected )
> >
> > - c0n1 does not have a 10.42.42.0 routes
> > and it has 10.42.43.* gateway ( wrong ?? )
>
> The cluster cimputers don't necessaruly need to know any other
> routes. That's the function of the default route.
>
> > - i think either eth1(43.*) or eth0(42.*) must go to the outside world
> > lets say *.42.8 is internal
>
> Doesn't necessarily have to. The cluster computer uses buster as
> it's gateway and that's all it needs to know. Buster sends any packets
> to nets it doesn't know about to _it's_ default gateway, i.e. the
> firewall.
>
> > - if c0n1 and c0n3 has only one nic.. you have extra routes
> > listed
> > - i say change all of the cluster to be 10.42.42.*
>
> Having the cluster be on it's own network with access only through
> the gateway computer had benefits. The cluster is more secure and
> they don't have to waste any processor time ignoring packets that
> aren't relevent to them. Also, if you make any changes to your
> own network, you don't need to reconfigure the cluster. Again,
> this isn't much of an issue until the cluster starts to get bigger.
>
> > - buster, if its the one to go tothe outside world needs
> > to have one wire to the outside world
> > gateway is the ip# of your router or isp
> > 10.42.43.1 lets say
>
> Buster is a private network and it's gateway is the firewall.
>
> > and you should be all set
> > c ya
> > alvin
>
> Regards.
>
> Kourosh
>
>
> --
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: