On 2003.07.29 15:01, Rupali Kasralikar wrote:
> Further to ip-alias - NAT and ip-alias.
> Any help on this one would be much appreciated.
> I have very simple configuration.
> Linux machine with ip address -
> eth0: 192.168.2.2/24
> eth0:0 172.16.10.10/24
> I have NAT enable on eth0 of Linux machine.
> Output of
> >ipchains -L -n -t nat
> Chain POSTROUTING (policy ACCEPT)
> target prot opt source destination
> MASQUERADE all -- 172.16.2.0/24 0.0.0.0/0
> Also I have dialup connection on linux machine (ppp
> interface) to connect to public network.
> 2> another NT machine with ip address,
> I can ping from NT machine to 172.16.10.10 as well
> 192.168.2.2 on Linux machine.
> Also I can ping to 192.168.10.8 of NT machine from
> Linux box.
> Now my question is, if I try to ping to public IP from
> NT machine (i.e esentially from ip alias interface) I
> don't see connectivity (no ICMP echo reply) to outside
> world. I can connect otherwise (i.e ppp is up and
> Does alias interface needs to add masquerading rule as
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> To unsubscribe from this list: send the line "unsubscribe linux-net"
> the body of a message to firstname.lastname@example.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
The short answer is "don't/can't use IP aliases with IPtables/
NetFilter". You will need to use iproute2 (by Alexey Kuznetsov) to
assign extra IPs to a single interface (device).
ip address show
ip addr show
will show all the interfaces and their layer2/layer3 info.
"ip address add ..." will let you add addresses.
"ip -help" will give you all the options.
-- Ranjeet Shetye Senior Software Engineer Zultys Technologies Ranjeet dot Shetye2 at Zultys dot com http://www.zultys.com/ -- The views, opinions, and judgements expressed in this message are solely those of the author. The message contents have not been reviewed or approved by Zultys. - To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to email@example.com More majordomo info at http://vger.kernel.org/majordomo-info.html
This archive was generated by hypermail 2b29 : Thu Jul 31 2003 - 22:00:02 EST