January 6, 2009

Configuring 2 default routes in LINUX

by Matnet @ 4:06 pm in BSD & *NIX

Situasi :

server ada 2 rangkaian yg dia masuk. so maksud kata dia ada dua adapter iaitu:

eth0 - Rangkaian A

dan

eth1 - Rangkaian B


utk membolehkan server tersebut ONLINE ke network A dan B maka dia kena taruk default route ip router
network berkenaan. Jadi masalahnya default Route nih mana bley ada 2. So itu lah punca masalah di sini.

How to solve ?

setelah hampir sebulan jugak aku dok melilau tanya pakcik google.. dan akhirnya aku dah jumpa penyelesaian nya.

ok mola2.

sblum tuh kita kasi contoh IP utk kedua2 jenis rangkaian

eth0 - 10.10.10.9/24 gw - 10.10.10.1

eth1 - 172.16.16.8/24 gw - 172.16.16.1

sblum nak buat bnda nih make sure linux hangpa sapot akan “policy routing”

kalu tak sapot sila lah bg sapot.. so aku takmo terang mcm mn nak bg sapot. tp kalu hangpa pakai centos 5.* mmg dah sapot.

ok then kita dptkan current info pasal route kita

taip :

# netstat -anr

Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
172.16.16.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
10.10.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 172.16.16.1 0.0.0.0 UG 0 0 0 eth1


so dari maklumat di atas default route kita skang ialah 172.16.16.1 iaitu pada eth1


1. taip : echo "1 admin" >> /etc/iproute2/rt_tables

2. then taip

ip route add 10.10.10.0/24 dev eth0 src 10.10.10.1 table admin
ip route add default via 10.10.10.1 dev eth0 table admin


so kita dah create routing table admin yang mana kita bley view dengan taip command : ip rule

dah keluaq lagu nih :

0: from all lookup local
32766: from all lookup main
32767: from all lookup default



3. lepaih tu taip nih plak

ip rule add from 10.10.10.9/32 table admin
ip rule add to 10.10.10.9/32 table admin


kemudian taip ip rule dan result dia :

0: from all lookup local
32764: from all to 10.10.10.9 lookup admin
32765: from 10.10.10.9 lookup admin
32766: from all lookup main
32767: from all lookup default


4. kalu perlu ushar firewall takut dia block apa2.. utk test seeloknya matikan terus iptables dulu.

5. Siap..




Rujukan : http://www.linuxhorizon.ro/iproute2.html


Comments
* Name


* Email Address (will not be published)


Site



*Image Validation (?)

Comments

HTML: NO


:: Shout Me ::



:: About Me ::



They call me : Yachiru
Name : Yachiru Kusajishi
Birthday : February 12
Working Field : Shinigami lieutenant - 11th Division
E-mail : matnet80 [at] yahoo [dot] com


:: Calendar ::

February 2012
S M T W T F S
1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29