Roderick A. Anderson wrote: > Oliver Welter wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hi Rod, >> >>> Has anyone configured a Linux-Vserver with three NICs to three >>> different >>> networks? >>> >>> Two WANs and one LAN. The guests will need to access at least one and >>> possibly two or three of the networks. All traffic needs to go back >>> out >>> the same interface it came in on. >>> >> I am successfully running such a setup. The only issue you have to care >> about is routing of outgoing connections if your default gateway of the >> host is not reachable from inside the guest. >> You can use "ip" tools to set source based routing rules, here is an >> excerpt of mine: >> >> $IP route add 82.x.x.0/25 dev vlan3 table 103 >> $IP route add default via 82.x.x.1 dev vlan3 table 103 >> $IP rule add from 82.x.x.0/25 table 103 >> >> I put this into an init script. > > Thanks. I _have_ been down this path but never with a good map or > directions. :-) > > Redhat/Fedora/CentOS all have a ifup-/ifdown-routes scripts. Problem is > they are poorly documented. Looking at the one on my CentOS 5 system > there are labels; ADDRESS, GATEWAY, NETMASK; and code blocks for route, > rule, etc. but no documentation. It's really very simple, you just create a /etc/sysconfig/network-scripts/rule-ethX file containing your rules, e.g. from 1.2.3.4 lookup 4 and then /etc/sysconfig/network-scripts/route-ethX containing something like 1.2.3.4/24 dev ethX table 4 default via 1.2.3.1 dev ethX table 4 > This all looks familiar (he types with eyes downcast) from a list thread > in September 2006. > > I'm going hunting for the Redhat (CentOS) pages on this and try again. > > Thanks for the hint. > > > Rod > -- >> >> Oliver >> >> - -- >> Protect your environment - close windows and adopt a penguin! >> PGP-Key: 3B2C 8095 A7DF 8BB5 2CFF 8168 CAB7 B0DD 3985 1721 >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v2.0.7 (GNU/Linux) >> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org >> >> iD8DBQFHe7y4yrew3TmFFyERAmFpAJ4mKxf69copX417CQoSw29s3chaMACffHzV >> Z7YZ8j/uX5Z6DbFloWgnvc0= >> =WgyN >> -----END PGP SIGNATURE----- > -- Daniel Hokka Zakrisson