Re: Ability to live lock 5.3 via routing...

From: Bernd Walter (ticso_at_cicely12.cicely.de)
Date: 11/10/04

  • Next message: Sean Chittenden: "Re: Ability to live lock 5.3 via routing..."
    Date: Wed, 10 Nov 2004 15:05:54 +0100
    To: Sean Chittenden <sean@chittenden.org>
    
    

    On Wed, Nov 10, 2004 at 05:50:10AM -0800, Sean Chittenden wrote:
    > Pretty easy for me to reproduce. The machine live locks so I can't get
    > anything out of it, serial console or otherwise. :( Imagine a machine
    > with two NICs, fxp0 and fxp1 (though it could be any two NICs). The
    > following commands should lead to a lock:
    >
    > # Add the primary address on the external NIC
    > ifconfig fxp0 192.168.1.2 netmask 255.255.255.0 media 100baseTX
    > mediaopt full-duplex
    >
    > # Add the default gateway
    > route add default 192.168.1.1
    >
    > # Add a network to the internal interface
    > ifconfig fxp1 10.10.10.1 netmask 255.255.255.0 media 100baseTX mediaopt
    > full-duplex
    >
    > # On the external interface, on the same VLAN, there are two other
    > networks.
    > # Add aliases that way the machine can participate on those networks.
    > ifconfig fxp0 alias 192.168.2.250 netmask 255.255.255.255
    > ifconfig fxp0 alias 192.168.3.250 netmask 255.255.255.255

    You should use the correct netmask for the networks:
    e.g.:
    ifconfig fxp0 alias 192.168.2.250 netmask 255.255.255.0
    or:
    ifconfig fxp0 alias 192.168.2.250/24
    /32 is only correct if you are adding an alias for a network you
    already participate.

    > # Add a route so that machines on the internal network can get
    > # to the 192.168.2.0/24 network. This command succeeds.
    > route add -net 192.168.2.250/24 192.168.2.250

    If you add network routes you should better use the network address
    (192.168.2.0 in this case).
    But the complete route is only required because the above alias has the
    wrong netmask.
    You should just remove it.

    > # Add a route so that machines on the internal network can also
    > # get to the 192.168.3.0/24 network. This command results in a hard
    > # lock of the system.
    > route add -net 192.168.3.250/24 192.168.3.250

    Same as last route.
    But it shouldn't hard lock anyway.

    -- 
    B.Walter                   BWCT                http://www.bwct.de
    bernd@bwct.de                                  info@bwct.de
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    

  • Next message: Sean Chittenden: "Re: Ability to live lock 5.3 via routing..."

    Relevant Pages

    • Ability to live lock 5.3 via routing...
      ... anything out of it, serial console or otherwise. ... following commands should lead to a lock: ... route add default 192.168.1.1 ... # Add a route so that machines on the internal network can get ...
      (freebsd-net)
    • RE: ISA 2004 help please
      ... network, and I have set that as the gateway on those machines. ... When I set a persistant route on ... the server to their addresses (how I configured the ISA 2000 serverand they ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • [IPv6] PROBLEM? Network unreachable despite correct route
      ... I have several boxes with native IPv6 connectivity at various places. ... Some of them show symptoms of a lost default route for small periods of ... self built AMD Athlon64, Ubuntu Edgy, Distribution kernel ... At the same time, a sibling (same hardware, same switch, same network ...
      (Linux-Kernel)
    • Re: yet another vpn/routing question
      ... Route and that is the way it is supposed to look. ... RRAS and the problem has nothing to do with the Routing table. ... network is a single subnet private network, ... > with a internal network Nic and a Nic with Internet? ...
      (microsoft.public.windows.server.networking)
    • Re: load balancing with a failover
      ... The tunnel interfaces have addresses ... from other network though ... Enter configuration commands, one per line. ... 1w0d: RT: delete subnet route to 192.168.128.20/30 ...
      (comp.dcom.sys.cisco)