Koozali.org: home of the SME Server

Gateway routing not working

Richard

Gateway routing not working
« on: November 04, 2003, 01:51:00 PM »
Help needed for routing problem:

I have a 5.6. e-smith box on a DSL-router that is sip-spoofed to give me the real isp-ip number on my external nic. The big advantage would be that the router would do the dial-in and would be always-on and I wouldn't be bothered by NAT or stuff. My external nic would be directly connected. However, all trafic must be routed through my DSL-router on ip 10.0.0.138. In the admin-panel I set the gateway to 10.0.0.138.

Somehow the routing through the gateway isn't set correctly. The external network is not available. Somehow e-smith doens't set the gateway (because it is on another subnet?).

When I manually set:
# route add 10.0.0.138 dev eth1
# route add default gw 10.0.0.138
...things seem to work.

But the ifconfig gives some weird values:
eth1      Link encap:Ethernet  HWaddr 00:50:BF:99:77:A5  
          inet addr:62.xxx.xxx.xxx Bcast:255.255.255.255  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:20507 errors:0 dropped:0 overruns:0 frame:0
  -->    TX packets:0 errors:19008 dropped:0 overruns:0 carrier:38005
          collisions:0
          RX bytes:4034755 (3.8 Mb)  TX bytes:0 (0.0 b)

How to set this up correctly within e-smith, though? because the routing is also needed to be correct for ipsec etc...

Ifcfg-eth1:
DEVICE=eth1
USERCTL=no
ONBOOT=yes
BOOTPROTO=none
IPADDR=62.xxx.xxx.xxx
NETMASK=255.255.255.255
NETWORK=10.0.0.138
BROADCAST=255.255.255.255

Network
GATEWAYDEV eth1
GATEWAY 10.0.0.138

Any help appreciated!

Graeme Fleming

Re: Gateway routing not working
« Reply #1 on: November 04, 2003, 05:18:13 PM »
Configure the router to use 10.0.0.1 for its internal interface; turn off DHCP on the internal interface.
Rerun the SME setup from the server screen and set the external NIC (eth1: the one that connects to the router) to a static IP of 10.0.0.2 with a gateway of 10.0.0.1

This config is one I use all the time and works a treat - just rememeber to use a different IP range on the internal NIC (eth0) in the SME box such as 192.168.0.*

HTH

Richard

Gateway on different subnet
« Reply #2 on: November 04, 2003, 09:01:05 PM »
Thanx for the reply!

The problem with the situation you describe is that the e-smith server is *behind* a NATting router. I suspect this to give me big problems in getting ipsec to work

What I'm after, is using my real ip-address on my external nic, so 62.xxx.xxx.xxx and let my e-smith box do the NATting.

My DSL-router is already configured for this.

The only thing to get working is the correct networking:
So: External ip 62.xxx.xxx.xxx, all trafic through gateway 10.0.0.138
What netmask/network/broadcasting or modifications to get the gateway working correctly???