18 Jan
2014
18 Jan
'14
8:45 p.m.
Hi Gabriel,
I should do the rip in linux as it is much flexible as jnos and much
more tools are available.
As you already running rip44d in linux it shouldn't be necessary
to forward ipip to jnos.
Make rip working in linux and make sure that you can reach amprnet
from the linux kernel first.
Afterwards route the relevant addresses to jnos.
Make sure that "net.ipv4.ip_forward=1" is not hashed out
in /etc/sysctl.conf
Of course you have to accept the rip UDP port in linux.
73,
Bob VE3TOK
On 14-01-18 11:09 AM, Gabriel Medinas wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Hello fellows hams.
We want restart again here the 44.152 subnet from Venezuela amprnet.
In this first step mount the first gateway with 44.152.0.0./17
network, this is a Ubuntu 12.04 server machine in a dinamic IP
service.
Now for resume, think i miss something:
Internet IP-->TpLink TL-R480T firewall->UbuntuServer12.04->JNOS2.0j
Internet IP (dinamic from ISP)->Tplink LAN 192.168.1.2->Ubuntu Server
eth0 192.168.1.109->JNOS IP 44.152.0.60, tun0 192.168.1.110
in JNOS autoexec.nos:
attach tun tun0 1500 0
ifconfig tun0 ipaddress 192.168.1.110
ifconfig tun0 netmask 255.255.255.0
ifconfig tun0 mtu 1500
#
shell ifconfig tun0 192.168.1.109 pointopoint 192.168.1.110 mtu 1500 up
shell arp -s 192.168.1.110 00:19:DB:4A:CE:2A pub
shell arp -s 44.152.0.60 00:19:DB:4A:CE:2A pub
shell route add 44.152.0.60 gw 192.168.1.110 tun0
#
shell arp -sD 192.168.1.110 eth0 pub
#
shell iptables -I INPUT 1 -j ACCEPT --proto 4
shell iptables -I INPUT 1 -j ACCEPT --proto 94
shell iptables -I OUTPUT 1 -j ACCEPT --proto 4
shell iptables -I OUTPUT 1 -j ACCEPT --proto 94
shell iptables -I FORWARD 1 -j ACCEPT --proto 4
shell iptables -I FORWARD 1 -j ACCEPT --proto 94
shell /sbin/iptables -I INPUT -i tun0 -j ACCEPT
shell /sbin/iptables -I FORWARD -i tun0 -j ACCEPT
#
shell iptables -t nat -A PREROUTING -d 192.168.1.110/32 --proto 4 \-j
DNAT --to 44.152.0.60
shell iptables -t nat -A PREROUTING -d 192.168.1.110/32 --proto 94 \-j
DNAT --to 44.152.0.60
shell iptables -t nat -A POSTROUTING -s 44.152.0.60/32 -o eth0 -p 4
shell iptables -t nat -A POSTROUTING -s 44.152.0.60/32 -o eth0 -p 94
#
I am little lost here, the JNOS 44.152.0.60/ lan 192.168.1.110 work
with all Internet IP well but with ampr dont (think for encap routes
and rip2 dont work)
in Linux console:
./rip44d -v
found local address: 192.168.1.109
found local address: 127.0.0.1
found local address: 192.168.1.109
opening UDP socket 520...
entering main loop, waiting for RIPv2 datagrams
and stop here dont receive the routes BUT in JNOS trace monitor see
the incoming the rip UDP from 169.228.66.251 but my JNOS ip lan
192.168.1.110 replay a ICMP UnreachablePort
Please, I need be clear about what is the better way to RIP amproutes
in linux or jnos?
I think have any very wrong here in the routing, please any advice is
welcome to me (gmedinas(a)gmail.com)
Thanks for help, 73 de Gabriel YV5KXE
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net