Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Mark L. Wise" <mark@alpha2.com>
To: semi linux <linuxsemi@gmail.com>
Cc: netfilter@lists.netfilter.org,
	David Lang <david.lang@digitalinsight.com>
Subject: Re: Two NICs, same network...
Date: Wed, 09 May 2007 09:27:30 -0400	[thread overview]
Message-ID: <4641CC42.2000005@alpha2.com> (raw)
In-Reply-To: <e53321d30705081402n2fa7e3c5pcd0ed7baeecebef4@mail.gmail.com>

Is this not a routing issue?

route add -host 10.1.1.3  gw <eth2 ethernet address> eth2

This would route all traffic to 10.1.1.3 to eth2

Mark



semi linux wrote:
> On 5/8/07, David Lang <david.lang@digitalinsight.com> wrote:
>> On Tue, 8 May 2007, semi linux wrote:
>>
>> > I've got an odd problem where I've got two NICs on the same network
>> > and I want all traffic to one IP to go out one interface and all other
>> > traffic to use the second interface.  I'm going to try an simplify my
>> > actual setup, because a lot of it makes no difference to this post...
>> >
>> > I know this has to be a iptables sort of setup since the routing table
>> > can only make a difference on different networks and not based on
>> > looking for a specific IP address.
>> >
>> > The question is:
>> >
>> > eth0 IP: 10.1.1.1
>> > eth1 IP: 10.1.1.2
>> >
>> > target: 10.1.1.3
>> >
>> > (these IPs are just examples, there are no hard-fast rules surrounding
>> > the other possibilities)
>> >
>> > How do I make sure this goes out eth1 instead of eth0?  Do I use the
>> > mangle rule with the physdev module?
>> >
>> > I feel like I'm overlooking something or forgetting my basic network
>> > ideas here...
>>
>> you haven't quite given enough info here
>>
>> if you have target2 10.1.1.4 and you want all traffic to target to go 
>> out eth0
>> and all traffic to target2 to go out eth1 then you would want to 
>> start out with
>> defining host routes (the routing table _can_ look at specific hosts, 
>> not just
>> networks)
>>
>> in addition, I believe that you will need to play around with arp 
>> filtering to
>> make sure that each NIC only responds to arp requests for it's IP 
>> addresses.
>>
>> if you really only have one remote IP address and two local addresses 
>> and you
>> want all communications between the target and  10.1.1.1 to use eth0 
>> while
>> all communications between the target and 10.1.1.2 to use eth1 things 
>> get more
>> complicated
>>
>> you would need to look into packet/connection tagging and iptables 
>> routeing
>> decisions.
>>
>> rather then try and go into that right now why don't you try to be a 
>> little
>> clearer about exactly what you are trying to do.
>>
>> David Lang
>>
>
> Ok... you asked for the whole thing, here it is (forget my previous 
> example):
>
> eth0 - 10.1.1.1
> eth1 - N/A
> eth2 - N/A
> br0 (eth1, eth2) - 10.1.1.2
> target - 10.1.1.3
>
> The bridge (br0) is setup using brctl and seems to work w/o problem...
> The eth1 and eth2 IP addresses really don't matter since they are both
> referenced via the bridge and are set to something invalid.  10.1.1.3
> is connected via cross-over cable to eth2 port.  br0 and eth0 are
> connected to my network on the same subnet.
>
> What I'd like:
> - all packets (from the network or local) where destination=10.1.1.3
> to be routed to eth2.
> - otherwise, all traffic from the network to use eth0 for I/O.
>
> Basically, I want to specify that ONLY traffic for 10.1.1.3 is to use 
> eth2.
>

-- 
Mark L. Wise

Alpha II Service, Inc.
1312 Epworth Ave
Reynoldsburg, Ohio 43068-2116
USA

Office: (614) 868-5033
Fax: (614) 868-1060
Email: mark@alpha2.com
WEB: www.alpha2.com



  parent reply	other threads:[~2007-05-09 13:27 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-05-08 20:17 Two NICs, same network semi linux
2007-05-08 19:56 ` David Lang
2007-05-08 21:02   ` semi linux
2007-05-08 20:29     ` David Lang
2007-05-08 22:39     ` Sébastien CRAMATTE
2007-05-09 13:27     ` Mark L. Wise [this message]
2007-05-24 20:12       ` semi linux
2007-05-31 22:16         ` semi linux
2007-05-31 22:41           ` Pascal Hambourg
2007-06-01 11:52           ` Tommy W

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4641CC42.2000005@alpha2.com \
    --to=mark@alpha2.com \
    --cc=david.lang@digitalinsight.com \
    --cc=linuxsemi@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox