I created 3 vlan on a powerconnect 2708 switch:
Vlan_1, tag 1 - port 1 untagged
Vlan_2, tag 2 - port 2,3,4 untagged
Vlan_3, tag 3 - port 4,6,7,8 untagged
The switch has the following ip
IP: 182,168.70.2
GW: 192.168.70.1
NETMASK: 255.255.255.0
On the astaro I setup a VLAN on eth2:
eth0 Link encap:Ethernet HWaddr 00:10:F3:0E:03:74
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:177 Base address:0xc000
eth1 Link encap:Ethernet HWaddr 00:10:F3:0E:03:73
inet addr:192.168.1.20 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:674 errors:0 dropped:0 overruns:0 frame:0
TX packets:605 errors:0 dropped:0 overruns:0 carrier:0
collisions:68 txqueuelen:1000
RX bytes:119274 (116.4 Kb) TX bytes:346106 (337.9 Kb)
Interrupt:185 Base address:0xc000
eth1:fpsQ Link encap:Ethernet HWaddr 00:10:F3:0E:03:73
inet addr:192.168.1.70 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:185 Base address:0xc000
eth2 Link encap:Ethernet HWaddr 00:10:F3:0E:03:72
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:9 errors:0 dropped:0 overruns:0 frame:0
TX packets:22 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:540 (540.0 b) TX bytes:1320 (1.2 Kb)
Interrupt:193 Base address:0xe000
eth2.1 Link encap:Ethernet HWaddr 00:10:F3:0E:03:72
inet addr:192.168.70.1 Bcast:192.168.70.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:9498 errors:0 dropped:0 overruns:0 frame:0
TX packets:9498 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3187496 (3.0 Mb) TX bytes:3187496 (3.0 Mb)
And here the routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth1
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.70.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2.1
Nat is working:
Chain USR_OUTPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT all -- * * 0.0.0.0/0 192.168.1.70 to:192.168.70.248
0 0 DNAT tcp -- * * 0.0.0.0/0 192.168.1.70 tcp spts:1:65535 dpt:80 to:192.168.70.248:80
0 0 DNAT tcp -- * * 0.0.0.0/0 192.168.1.70 tcp spts:1:65535 dpt:443 to:192.168.70.248:443
Chain USR_POST (1 references)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- * eth1 192.168.0.0/24 0.0.0.0/0
Chain USR_PRE (1 references)
pkts bytes target prot opt in out source destination
3 180 DNAT all -- * * 0.0.0.0/0 192.168.1.70 to:192.168.70.248
0 0 DNAT tcp -- * * 0.0.0.0/0 192.168.1.70 tcp spts:1:65535 dpt:80 to:192.168.70.248:80
0 0 DNAT tcp -- * * 0.0.0.0/0 192.168.1.70 tcp spts:1:65535 dpt:443 to:192.168.70.248:443
I can also ping the internal vlan interface:
PING 192.168.70.1 (192.168.70.1) 56(84) bytes of data.
64 bytes from 192.168.70.1: icmp_seq=1 ttl=64 time=0.176 ms
64 bytes from 192.168.70.1: icmp_seq=2 ttl=64 time=0.162 ms
64 bytes from 192.168.70.1: icmp_seq=3 ttl=64 time=0.148 ms
But noway for the switch ip:
PING 192.168.70.2 (192.168.70.2) 56(84) bytes of data.
From 192.168.70.1: icmp_seq=1 Destination Host Unreachable
From 192.168.70.1 icmp_seq=1 Destination Host Unreachable
From 192.168.70.1 icmp_seq=2 Destination Host Unreachable
From 192.168.70.1 icmp_seq=3 Destination Host Unreachable
There is a packet filter rule to allow anything from anywhere to anywhere.
If I modify the vlan interface changing it in a static eth interface, I can connect from outside (due to the dnat on the external additional ip 192.168.1.70), and even ping from the astaro to the switch.
I really have no idea. Any hints? All your help is appreciated. I'm clueless.
Thanks
This thread was automatically locked due to age.