NLB Host Unreachable
Hi All,
Our SharePoint 2010 environment is using Microsoft NLB to cluster its front end web servers.
Yesterday, one of our active directory domain controllers was demoted and the server rebooted, this server also acts as one of our DNS servers. When it was rebooted, our SharePoint environment became unavailable; Users were getting prompted
with an authentication box. Looking into it further there is a Host Unreachable error between the 2 load balancers. After about 20mins the domain controller was promoted again, server rebooted and everything became available again.
Can anyone shed any light on why this may have occurred. Is it simply that the load balancers lost the DNS and the ability to talk to each other. If so why did it not use the secondary DNS server configured in windows and remain alive?
Or does the issue lie with the domain controller being demoted?
Any help appreciated.
Cammie
Hi,
I am not very similar the SharePoint, but it seems is the client use the FQDN to access the SharePoint resource, but when your DC demote the DNS have some issue. Please try
to ping the NLB virtual IP to see it reachable or not.
If at any point the DNS Client service receives a negative response from a server, it removes every server on that adapter from consideration during this search. For example,
if in step 2, the first server on Alternate Adapter A gave a negative response, the DNS Client service would not send the query to any other server on the list for Alternate Adapter A.
The related KB:
DNS Processes and Interactions
http://technet.microsoft.com/en-us/library/dd197552(v=ws.10).aspx
Demoting Domain Controllers and Domains (Level 200)
http://technet.microsoft.com/en-us/library/jj574104.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.
Similar Messages
-
Host Unreachable intermittently within a Windows Network Load Balancing Cluster
Hi,
We have 2 Windows 2008 R2 servers running multiple IIS web sites and load balanced across Windows Network Load Balancer in unicast mode. Although there are two interfaces in each server, only 1 interface in each server participates in load balancing and
other interface is used for a different backup LAN. The problem I am going to mention was not seen within the NLB for almost 1 year.
I have noticed intermittent "host unreachable" detected from NLB in each host from time to time since 3 weeks ago. After servers are rebooted, both hosts can be reached and can be detected from NLB manager. However it becomes unreachable in both
servers within minutes and then becomes reachable again after several minutes. This behavior is noticed in the load balancer and pings do not work between the two hosts when the issue occurs. I did a packet capture to see what was going on with ARP message
when the issue occurs. ARP entry goes missing in each server when the problem occurs and no ARP replies are returned from each server. But ARP requests are dispatched from both servers when the issue occurs. ARP replies come back after sometime after which
hosts become reachable again.
I tried to create a permanent static ARP entry (By copying the MAC address from ARP table when the two hosts are reachable) in each host but that hasn't solved the issue either. It seems like the individual MAC address generated by each host is a virtual
one and it doesn't seem to respond when the problem occurs.
However load balancing and web sites are fully functional without any issues even while "host unreachability" issue is detected.
Appreciate if someone could help me to dig the real problem out.
Thank you.Hi,
Did you do some change of your network or the NLB firewall settings recently?
If you are using the NLB cluster in Hyper-V guest vm you need to enable the spoofing of MAC address.
The related article:
Cannot access the virtual or dedicated IP address of an NLB node (Guest) running in Unicast Mode on Windows Server 2008 R2 Hyper-V
http://blogs.technet.com/b/networking/archive/2010/02/12/cannot-access-the-virtual-or-dedicated-ip-address-of-an-nlb-node-guest-running-in-unicast-mode-on-windows-server-2008-r2-hyper-v.aspx
More information:
Selecting the Unicast or Multicast Method of Distributing Incoming Requests
http://technet.microsoft.com/en-us/library/cc782694(v=ws.10).aspx
Single network adapter
http://technet.microsoft.com/en-us/library/cc776178(v=ws.10).aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Lenovo W530/W540 Getting Destination host Unreachable from our Firewall
Hey Everyone!
I'm having some bizarre issues with all of my Lenovo W530/W540's. I'm not sure when the issue started, the first time it was reported to me was around March, and it has been persistant since the issue was discovered. The issue is that, quite frequently, our Lenovo W530/W540's will get Destiantion Host Unreachable if I run a continuous ping (ping -t ...) to anything outside our firewall.
I have run a ping to things inside our firewall (other computers/servers, etc.) and they will return good ping until the cows come home.
However, if I try to ping anything outside our firewall (google.com, google DNS 8.8.8.8, yahoo.com, etc.) about every 30 seconds (every 30-35 returns) it starts returning Destitnation Host Unreachable from our Firewall. This will last for around 10-25 returns, and then traffic goes back to normal.
We are a majority Apple Shop, and when I attempt to ping from any Apple on the network, it get fine returns consistently. I also tried pinging from the few non-Lenovo Windows Machines we have as well (my personal machine which is self-built Windows rig, a couple of windows test machines, and a Windows 2008 Server we have) and they also have consistently good returns as well.
It is ONLY the Lenovo's that have this problem. To compound things, they have no issue when they are connected to a different network other than the company network. This ONLY happens when they try to interact with traffic going THROUGH our Firewall on our company network. It happens regardless of whether they hardwired or wireless. Also, during the Destination Host Unreachable moments, Windows does not detect a disruption, it keeps registering good connection. I do not know how often Windows checks for connection, but these Destination Host Unreachable moments are so quick, I'm fairly certain that Windows can't even detect them.
Our Firewall is a Linux CentOS server that is running Shorewall Firewall Software. The Destination Host Unreachable notice is coming from our Firewall directly, not from our ISP, so for some reason, the Lenovo is having a problem talking to our FW.
We currently only have 3 of these machines in circulation, but its having a pretty big impact on those with the machines, as going to a website is even a chore, as they often get "Page Not Found" and other errors when they try to load a website.
I'm a bit stumped, I've never seen a machine act this way where it only has problems on a particular network; usually its a global issue it has with everything. Any and all help would be appreciated.
Thanks!
-ChrisDNS is set to be automatic, though I did try setting a permenent DNS server in the IPv4 settings to our local DNS server AND Google DNS, and the issue still occurred.
The 2 Conflicting firewalls could be it, so I tested that. I logged into the Local Administrator account on the machine so I could temporarily disable the firewall. I disabled it, pinged out, and I still get Destination host unreachable, though weirdly, it seems to happen less than when on the other account (only about every 50-60 pings do I get Destination host Unreachable). -
New Install - ICMP Host Unreachable from gateway
Hi team,
I'm configuring a new solaris x86 box for the first time in a long time and I'm running into a problem that has me stumped.
I just installed Solaris 10 v7 on a P4 Dell box with an intel pro1000 adapter loaded.
Installed using ZFS and install went well. I set a static IP of 192.168.1.70 on a proper 192.168.1.x lan.
After install, everything seems to work fine but cannot ping a FQDN such as www.google.com, etc.
at first, I tried to join a local domain - maxximgroup.com and my computer name is set to sunzilla.
Here's my network config files;
sunzilla is set up with static IP = 192.168.1.70
# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
e1000g0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.1.70 netmask ffffff00 broadcast 192.168.1.255
ether 0:1b:21:27:56:2c
lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 index 1
inet6 ::1/128
e1000g0: flags=2004841<UP,RUNNING,MULTICAST,DHCP,IPv6> mtu 1500 index 2
inet6 fe80::21b:21ff:fe27:562c/10
ether 0:1b:21:27:56:2c
And /etc/hosts shows host name sunzilla associated w/ 192.168.1.70...
# cat /etc/hosts
# Internet host table
::1 localhost
127.0.0.1 localhost
192.168.1.70 sunzilla loghost
And my resolv.conf file shows my internal DNS routers as well as a 3rd I added (4.2.2.2) just in case...
# cat /etc/resolv.conf
domain maxximgroup.com
nameserver 192.168.1.20
nameserver 192.168.1.22
nameserver 4.2.2.2
search maxximgroup.com
I noticed the /etc/defaultrouter file was MISSING... so I created one pointing to my router...
# cat /etc/defaultrouter
192.168.1.1
And finally, I checked the /etc/nsswitch.conf file and it does indeed show hosts & ipnodes --> files & dns ...
# cat /etc/nsswitch.conf
# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# /etc/nsswitch.dns:
# An example file that could be copied over to /etc/nsswitch.conf; it uses
# DNS for hosts lookups, otherwise it does not use any other naming service.
# "hosts:" and "services:" in this file are used only if the
# /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports.
# DNS service expects that an instance of svc:/network/dns/client be
# enabled and online.
passwd: files
group: files
# You must also set up the /etc/resolv.conf file for DNS name
# server lookup. See resolv.conf(4).
hosts: files dns
# Note that IPv4 addresses are searched for in all of the ipnodes databases
# before searching the hosts databases.
ipnodes: files dns
networks: files
protocols: files
rpc: files
ethers: files
netmasks: files
bootparams: files
publickey: files
# At present there isn't a 'files' backend for netgroup; the system will
# figure it out pretty quickly, and won't use netgroups at all.
netgroup: files
automount: files
aliases: files
services: files
printers: user files
auth_attr: files
prof_attr: files
project: files
tnrhtp: files
tnrhdb: files
I can ping local IP addresses ...
# ping 192.168.1.1
192.168.1.1 is alive
But not external addresses ...
# ping 67.15.211.8
ICMP Host Unreachable from gateway sunzilla (192.168.1.70)
for icmp from sunzilla (192.168.1.70) to ns1.siteground168.com (67.15.211.8)
ICMP Host Unreachable from gateway sunzilla (192.168.1.70)
for icmp from sunzilla (192.168.1.70) to ns1.siteground168.com (67.15.211.8)
ICMP Host Unreachable from gateway sunzilla (192.168.1.70)
for icmp from sunzilla (192.168.1.70) to ns1.siteground168.com (67.15.211.8)
ICMP Host Unreachable from gateway sunzilla (192.168.1.70)
for icmp from sunzilla (192.168.1.70) to ns1.siteground168.com (67.15.211.8)
^C#
and naturally, I can ping a FQDN either (confirmed to be pingable on a computer on the same lan) ...
# ping mycloud.local
ping: unknown host mycloud.local
Can anyone provide some guidance pls?Thanks Robert. You were absolutely on the right track. It turns out that in my "rush" to get my new ZFS "toy" up and running, during the install, I gave Solaris a static address but told it to automatically find the gateway. Oops! When solaris 10 installed, it correctly decided that since it had a static IP, it should assign the gateway as itself! So, naturally, when I ran netstat -m, It showed my gateway as myself! 192.168.1.70 sunzilla.
I'm used to running Solaris on a Sparc platform and I'm a bit uncomfortable with reboots and I figured there would surely be a network restart command somewhere. After finding out that things have now changed in Solaris 10 quite a bit from Solaris 8, I just decided to init 6.
After the system came up, everything was happy : -)
So again, thanks to Robert for helping save the day! -
HOST UNREACHABLE - two network cards
We have two ethernet cards. The first has a static
IP address. This is the card that is used for our
internal network. The second card recieves a dynamic
IP address from a DHCP server. The second card is
used to connect our machine to the internet. When we
disable the second card we are able to make a socket
connection and connect to our database. When the
second card is enabled the socket connection fails and
we get a HOST UNREACHABLE ERROR.
What must be configured here ?
Any help would be appreciated.
nullMessy setup IMO, but anyway....
Your faulty resolv.conf is the reason you can't ping google. Edit it manually as required, and then use the -R flag in /etc/conf.d/dhcpcd to prevent it being overwritten. DHCP on both interfaces will probably cause routing issues as well, in which case you will need the -G flag. -
I'd start with the basics, can you ping the iMS machine? Can you telnet to port 25 on the machine? Do these steps from the MSX server.
If those things work, which I suspect they will not based on the text "Host unreachable" in your question then I would put master_debug slave_debug on the channel which the MSX system is arriving, either going to be tcp_local or tcp_intranet. Then look at the resulting log file on the iMS system.
Hope this helps,
Chad -
Intermittent "host unreachable resolving..." error
At least once a day (sometimes 2-3 times) our DNS server stops working for about 3-5 minutes. It appears to happen randomly (i.e. always at a different time) and after a few minutes, it goes back to normal.
When the problem occurs, none of the external addresses can be resolved and the DNS logs lots of "host unreachable" entries. Here's a brief sample (I'm showing the instance when the DNS goes from non-responsive to working again):
21-Feb-2011 12:51:18.533 host unreachable resolving 'n.nic.at/AAAA/IN': 2001:628:453:4305::53#53
21-Feb-2011 12:51:19.252 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2001:dc3::35#53
21-Feb-2011 12:51:20.133 host unreachable resolving 'n.nic.at/AAAA/IN': 2a02:568:20::8#53
21-Feb-2011 12:51:22.912 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2001:503:c27::2:30#53
21-Feb-2011 12:51:22.912 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2001:500:1::803f:235#53
21-Feb-2011 12:51:23.116 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2a02:568:20:1::d#53
21-Feb-2011 12:51:23.116 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2001:67c:1010:12::53#53
21-Feb-2011 12:51:23.117 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2001:678:d::cafe#53
21-Feb-2011 12:51:25.720 host unreachable resolving 'ns2.nessus.at/AAAA/IN': 2001:628:453:4302::53#53
21-Feb-2011 12:51:26.556 success resolving 'n.nic.at/AAAA' (in 'nic.at'?) after disabling EDNS
21-Feb-2011 12:51:30.613 host unreachable resolving 'ns5.univie.ac.at/AAAA/IN': 2001:62a:4:303::53#53
21-Feb-2011 12:51:30.623 success resolving 'ns5.univie.ac.at/AAAA' (in 'univie.ac.at'?) after disabling EDNS
21-Feb-2011 12:51:31.776 host unreachable resolving 'kropka.www.tokfm.pl/A/IN': 2001:6d8:0:1::a:6#53
21-Feb-2011 12:51:34.505 success resolving 'ns2.nessus.at/AAAA' (in 'nessus.at'?) after reducing the advertised EDNS UDP packet size to 512 octets
Any suggestions as to what could be the cause of this? At any other time the DNS appears to be working correctly.This question was answered by Mr. Hoffman in another threat. It appears that the problem was related to a faulty AEBS router. Replacing it with another box "fixed" the issue.
-
ICMP Host Unreachable from gateway localhost (127.0.0.1)
I had a functional zone. But we had an outage and for some reason one of my zones is unreachable. Looks like the problem is that the default route has changed. How can I add a default route to a zone?
Thanks
Manish
--- global zone ---
-bash-3.00# zoneadm list -iv
ID NAME STATUS PATH BRAND IP
0 global running / native shared
2 www running /export/zones/www native shared
4 java running /export/zones/java native shared
--- zone java ---
-bash-3.00# ping 131.247.16.130
ICMP Host Unreachable from gateway localhost (127.0.0.1)
for icmp from localhost (127.0.0.1) to 131.247.16.130
ICMP Host Unreachable from gateway localhost (127.0.0.1)
for icmp from localhost (127.0.0.1) to 131.247.16.130
ICMP Host Unreachable from gateway localhost (127.0.0.1)
for icmp from localhost (127.0.0.1) to 131.247.16.130
-bash-3.00# ifconfig -a
lo0:1: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
bge0:3: flags=4001000842<BROADCAST,RUNNING,MULTICAST,IPv4,DUPLICATE> mtu 1500 index 2
inet 131.247.16.149 netmask ffffff80 broadcast 131.247.16.255
-bash-3.00# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
127.0.0.1 127.0.0.1 UH 4 61 lo0:1
-bash-3.00# route add default 131.247.16.254
add net default: gateway 131.247.16.254: insufficient privileges
--- zone www ---
-bash-3.00# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
default 131.247.16.254 UG 1 47
131.247.16.128 131.247.16.131 U 1 13 bge0:2
224.0.0.0 131.247.16.131 U 1 0 bge0:2
127.0.0.1 127.0.0.1 UH 4 108 lo0:2ifconfig -a will show when you have a duplicated IP address.
It appears along with the text values for the interface flags ie
host-u010|global$ ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index
1
inet 127.0.0.1 netmask ff000000
bge0: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> m
tu 1500 index 2
inet 10.236.93.156 netmask ffffffc0 broadcast 192.168.93.191
groupname data
host-u010|global$
You would see DUPLICATE or DUPLICATED in that field, and the flags would be different. Sorry, I don't have a duplicate IP situation going on right now, but my memory says it looked something like this:
host-u010|global$ ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index
1
inet 127.0.0.1 netmask ff000000
bge0: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER,DUPLICATE> m
tu 1500 index 2
inet 10.236.93.156 netmask ffffffc0 broadcast 192.168.93.191
groupname data
host-u010|global$
Cheers, -
Hi,
after installing CUPS 8.6.1.10000-34 in VMware Workstation 7.1.2 build-301548 and eventually rebooting the host, CUPS is not reachable via IP anymore, i.e. ping from physical NIC of the host to virtual NIC of the CUPS VM fails (Destination Host Unreachable). This also applies vice versa, as well as to HTTP/HTTPS, SSH traffic, etc.
Before the reboot of the host, there were no issues. The reboot had to be done, due to system updates.
The suprising fact is, that the CUPS can ping the CUCM (8.6.2.20000-2, also running on the same host and VMware Workstation), but no other machine.
In order to disqualify firewall issues, I turned off the host's firewall, as well as the iptables firewall of the CUPS. However the issue still persisted.
Did anyone run in the same problem? So far the only solution was to reinstall CUPS and not to turn off the host...which is not really acceptable, even in a test environment.
Thanks a lot in advance for your help!
Kind regards
Igor LukicThe usual problem is that the Cisco OS comes with the WMware drivers for ESXi and not Workstation. As a result the NIC does not come up correctly. Anything that takes down the NIC and brings it up again (such as changing the gateway address) will work until the next time you reboot.
Update the WMware driver in your CUPS
With the CUPS running in WMware use VM/Install WMware tools.
Then on the CLI of CUPS enter: utils vmtools upgrade
You can also check which versions of the WMware driver is installed with: utils vmtools status
Graham -
Suppress database/listener/agent unreachable if host unavailable
Hi,
When a host becomes unavailable due to network issues we receive a deluge of agent/database/listener/host unreachable notifications. Is there a clean way to make sure that when a host is unreachable via ping for example other unreachable target notifications are suppressed?
Thanks for any help in advance
Phil
Edited by: user10912727 on 11-Apr-2011 04:01
Edited by: user10912727 on 11-Apr-2011 04:02Hi Rob,
Thanks for taking the time to reply. Shame these is no way of doing this but I understand why.
Regards
Phil -
MS NLB with ASA and Static NAT from PUP to NLB IP
Hi all,
I am trying to get MS NLB up and running. It is almost all working. Below is my physical setup.
ASA 5510 > Cat 3750X >2x ESXi 5.1 Hosts > vSwitch > Windows 2012 NLB Guest VMs.
I have two VMs runing on two different ESXi hosts. They have two vNICs. One for managment and one for inside puplic subnet. The inside puplic subnet NICs are in the NLB cluster. The inside public subnet is NATed on the ASA to a outide public IP.
192.168.0.50 is the 1st VM
192.168.0.51 is the 2nd VM
192.168.0.52 is the cluster IP for heartbeat
192.168.0.53 is the cluster IP for NLB traffic.
0100.5e7f.0035 is the cluster MAC.
The NLB cluster is using MULTICAST
I have read the doumentation for both the ASA and CAT switch for adding a static ARP using the NLB IP and NLB MAC.
For the ASA I found
http://www.cisco.com/en/US/docs/security/asa/asa84/asdm64/configuration_guide/mode_fw.html#wp1226249
ASDM
Configuration > Device Management > Advanced > ARP > ARP Static Table
I was able to add my stic ARP just fine.
However, the next step was to enable ARP inspection.
Configuration > Device Management > Advanced > ARP > ARP Inspection
My ASDM does not list ARP Inspection, only has the ARP Static Table area. Not sure about this.
For the CAT Switch I found
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080a07203.shtml
I added the both the ARP and Static MAC. For the static MAC I used the VLAN ID of the inside public subnet and the interfaces connected to both ESXi hosts.
On the ASA I added a static NAT for my outside Public IP to my inside pupblic NLB IP and vise versa. I then added a DNS entry for our domain to point to the outside public IP. I also added it to the public servers section allowing all IP traffic testing puproses.
At any rate the MS NLB is working ok. I can ping both the Public IP and the Inside NLB IP just fine from the outside. (I can ping the inside NLB IP becuase I'm on a VPN with access to my inside subnets) The problem is when I go to access a webpade from my NLB servers using the DNS or the Public IP I get a "This Page Can't Be Displyed" messgae. Now while on the VPN if I use the same URL but insied use the NLB IP and not the Public IP it works fine.
So I think there is soemthing wrong with the NATing of the Public to NLB IP even tho I can ping it fine. Below is my ASA Config. I have bolded the parts of Interest.
Result of the command: "show run"
: Saved
ASA Version 8.4(4)9
hostname MP-ASA-1
enable password ac3wyUYtitklff6l encrypted
passwd ac3wyUYtitklff6l encrypted
names
dns-guard
interface Ethernet0/0
nameif outside
security-level 0
ip address 198.XX.XX.82 255.255.255.240
interface Ethernet0/1
description Root Inside Interface No Vlan
speed 1000
duplex full
nameif Port-1-GI-Inside-Native
security-level 100
ip address 10.1.1.1 255.255.255.0
interface Ethernet0/1.2
description Managment LAN 1 for Inside Networks
vlan 2
nameif MGMT-1
security-level 100
ip address 192.168.180.1 255.255.255.0
interface Ethernet0/1.3
description Managment LAN 2 for Inside Networks
vlan 3
nameif MGMT-2
security-level 100
ip address 192.168.181.1 255.255.255.0
interface Ethernet0/1.100
description Development Pubilc Network 1
vlan 100
nameif DEV-PUB-1
security-level 50
ip address 192.168.0.1 255.255.255.0
interface Ethernet0/1.101
description Development Pubilc Network 2
vlan 101
nameif DEV-PUB-2
security-level 50
ip address 192.168.2.1 255.255.255.0
interface Ethernet0/1.102
description Suncor Pubilc Network 1
vlan 102
nameif SUNCOR-PUB-1
security-level 49
ip address 192.168.3.1 255.255.255.0
interface Ethernet0/1.103
description Suncor Pubilc Network 2
vlan 103
nameif SUNCOR-PUB-2
security-level 49
ip address 192.168.4.1 255.255.255.0
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
boot system disk0:/asa844-9-k8.bin
ftp mode passive
clock timezone PST -8
clock summer-time PDT recurring
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object network Inside-Native-Network-PNAT
subnet 10.1.1.0 255.255.255.0
description Root Inisde Native Interface Network with PNAT
object network ASA-Outside-IP
host 198.XX.XX.82
description The primary IP of the ASA
object network Inside-Native-Network
subnet 10.1.1.0 255.255.255.0
description Root Inisde Native Interface Network
object network VPN-POOL-PNAT
subnet 192.168.100.0 255.255.255.0
description VPN Pool NAT for Inside
object network DEV-PUP-1-Network
subnet 192.168.0.0 255.255.255.0
description DEV-PUP-1 Network
object network DEV-PUP-2-Network
subnet 192.168.2.0 255.255.255.0
description DEV-PUP-2 Network
object network MGMT-1-Network
subnet 192.168.180.0 255.255.255.0
description MGMT-1 Network
object network MGMT-2-Network
subnet 192.168.181.0 255.255.255.0
description MGMT-2 Network
object network SUNCOR-PUP-1-Network
subnet 192.168.3.0 255.255.255.0
description SUNCOR-PUP-1 Network
object network SUNCOR-PUP-2-Network
subnet 192.168.4.0 255.255.255.0
description SUNCOR-PUP-2 Network
object network DEV-PUB-1-Network-PNAT
subnet 192.168.0.0 255.255.255.0
description DEV-PUB-1-Network with PNAT
object network DEV-PUB-2-Network-PNAT
subnet 192.168.2.0 255.255.255.0
description DEV-PUB-2-Network with PNAT
object network MGMT-1-Network-PNAT
subnet 192.168.180.0 255.255.255.0
description MGMT-1-Network with PNAT
object network MGMT-2-Network-PNAT
subnet 192.168.181.0 255.255.255.0
description MGMT-2-Network with PNAT
object network SUNCOR-PUB-1-Network-PNAT
subnet 192.168.3.0 255.255.255.0
description SUNCOR-PUB-1-Network with PNAT
object network SUNCOR-PUB-2-Network-PNAT
subnet 192.168.4.0 255.255.255.0
description SUNCOR-PUB-2-Network with PNAT
object network DEV-APP-1-PUB
host 198.XX.XX.XX
description DEV-APP-2 Public Server IP
object network DEV-APP-2-SNAT
host 192.168.2.120
description DEV-APP-2 Server with SNAT
object network DEV-APP-2-PUB
host 198.XX.XX.XX
description DEV-APP-2 Public Server IP
object network DEV-SQL-1
host 192.168.0.110
description DEV-SQL-1 Inside Server IP
object network DEV-SQL-2
host 192.168.2.110
description DEV-SQL-2 Inside Server IP
object network SUCNOR-APP-1-PUB
host 198.XX.XX.XX
description SUNCOR-APP-1 Public Server IP
object network SUNCOR-APP-2-SNAT
host 192.168.4.120
description SUNCOR-APP-2 Server with SNAT
object network SUNCOR-APP-2-PUB
host 198.XX.XX.XX
description DEV-APP-2 Public Server IP
object network SUNCOR-SQL-1
host 192.168.3.110
description SUNCOR-SQL-1 Inside Server IP
object network SUNCOR-SQL-2
host 192.168.4.110
description SUNCOR-SQL-2 Inside Server IP
object network DEV-APP-1-SNAT
host 192.168.0.120
description DEV-APP-1 Network with SNAT
object network SUNCOR-APP-1-SNAT
host 192.168.3.120
description SUNCOR-APP-1 Network with SNAT
object network PDX-LAN
subnet 192.168.1.0 255.255.255.0
description PDX-LAN for S2S VPN
object network PDX-Sonicwall
host XX.XX.XX.XX
object network LOGI-NLB--SNAT
host 192.168.0.53
description Logi NLB with SNAT
object network LOGI-PUP-IP
host 198.XX.XX.87
description Public IP of LOGI server for NLB
object network LOGI-NLB-IP
host 192.168.0.53
description LOGI NLB IP
object network LOGI-PUP-SNAT-NLB
host 198.XX.XX.87
description LOGI Pup with SNAT to NLB
object-group network vpn-inside
description All inside accessible networks
object-group network VPN-Inside-Networks
description All Inside Nets for Remote VPN Access
network-object object Inside-Native-Network
network-object object DEV-PUP-1-Network
network-object object DEV-PUP-2-Network
network-object object MGMT-1-Network
network-object object MGMT-2-Network
network-object object SUNCOR-PUP-1-Network
network-object object SUNCOR-PUP-2-Network
access-list acl-vpnclinet extended permit ip object-group VPN-Inside-Networks any
access-list outside_access_out remark Block ping to out networks
access-list outside_access_out extended deny icmp any any inactive
access-list outside_access_out remark Allow all traffic from inside to outside networks
access-list outside_access_out extended permit ip any any
access-list outside_access extended permit ip any object LOGI-NLB--SNAT
access-list outside_access extended permit ip any object SUNCOR-APP-2-SNAT
access-list outside_access extended permit ip any object SUNCOR-APP-1-SNAT
access-list outside_access extended permit ip any object DEV-APP-2-SNAT
access-list outside_access extended permit ip any object DEV-APP-1-SNAT
access-list outside_cryptomap extended permit ip object-group VPN-Inside-Networks object PDX-LAN
pager lines 24
logging asdm informational
mtu outside 1500
mtu Port-1-GI-Inside-Native 1500
mtu MGMT-1 1500
mtu MGMT-2 1500
mtu DEV-PUB-1 1500
mtu DEV-PUB-2 1500
mtu SUNCOR-PUB-1 1500
mtu SUNCOR-PUB-2 1500
mtu management 1500
ip local pool Remote-VPN-Pool 192.168.100.1-192.168.100.20 mask 255.255.255.0
no failover
icmp unreachable rate-limit 1 burst-size 1
icmp permit any outside
icmp permit any Port-1-GI-Inside-Native
icmp permit any MGMT-1
icmp permit any MGMT-2
icmp permit any DEV-PUB-1
icmp permit any DEV-PUB-2
icmp permit any SUNCOR-PUB-1
icmp permit any SUNCOR-PUB-2
asdm image disk0:/asdm-649-103.bin
no asdm history enable
arp DEV-PUB-1 192.168.0.53 0100.5e7f.0035 alias
arp timeout 14400
no arp permit-nonconnected
nat (Port-1-GI-Inside-Native,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (DEV-PUB-1,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (DEV-PUB-2,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (MGMT-1,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (MGMT-2,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (SUNCOR-PUB-1,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (SUNCOR-PUB-2,outside) source static any any destination static VPN-POOL-PNAT VPN-POOL-PNAT
nat (DEV-PUB-1,outside) source static DEV-PUP-1-Network DEV-PUP-1-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
nat (DEV-PUB-2,outside) source static DEV-PUP-2-Network DEV-PUP-2-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
nat (MGMT-1,outside) source static MGMT-1-Network MGMT-1-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
nat (MGMT-2,outside) source static MGMT-2-Network MGMT-2-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
nat (Port-1-GI-Inside-Native,outside) source static Inside-Native-Network Inside-Native-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
nat (SUNCOR-PUB-1,outside) source static SUNCOR-PUP-1-Network SUNCOR-PUP-1-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
nat (SUNCOR-PUB-2,outside) source static SUNCOR-PUP-2-Network SUNCOR-PUP-2-Network destination static PDX-LAN PDX-LAN no-proxy-arp route-lookup
object network Inside-Native-Network-PNAT
nat (Port-1-GI-Inside-Native,outside) dynamic interface
object network VPN-POOL-PNAT
nat (Port-1-GI-Inside-Native,outside) dynamic interface
object network DEV-PUB-1-Network-PNAT
nat (DEV-PUB-1,outside) dynamic interface
object network DEV-PUB-2-Network-PNAT
nat (DEV-PUB-2,outside) dynamic interface
object network MGMT-1-Network-PNAT
nat (MGMT-1,outside) dynamic interface
object network MGMT-2-Network-PNAT
nat (MGMT-2,outside) dynamic interface
object network SUNCOR-PUB-1-Network-PNAT
nat (SUNCOR-PUB-1,outside) dynamic interface
object network SUNCOR-PUB-2-Network-PNAT
nat (SUNCOR-PUB-2,outside) dynamic interface
object network DEV-APP-2-SNAT
nat (DEV-PUB-2,outside) static DEV-APP-2-PUB
object network SUNCOR-APP-2-SNAT
nat (SUNCOR-PUB-2,outside) static SUNCOR-APP-2-PUB
object network DEV-APP-1-SNAT
nat (DEV-PUB-1,outside) static DEV-APP-1-PUB
object network SUNCOR-APP-1-SNAT
nat (SUNCOR-PUB-1,outside) static SUCNOR-APP-1-PUB
object network LOGI-NLB--SNAT
nat (DEV-PUB-1,outside) static LOGI-PUP-IP
object network LOGI-PUP-SNAT-NLB
nat (outside,DEV-PUB-1) static LOGI-NLB-IP
access-group outside_access in interface outside
access-group outside_access_out out interface outside
route outside 0.0.0.0 0.0.0.0 198.145.120.81 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
http 192.168.1.0 255.255.255.0 outside
http 10.1.1.0 255.255.255.0 Port-1-GI-Inside-Native
http 192.168.180.0 255.255.255.0 MGMT-1
http 192.168.100.0 255.255.255.0 Port-1-GI-Inside-Native
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
inspect icmp error
service-policy global_policy global
prompt hostname context
call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:d6f9f8e2113dc03cede9f2454dba029b
: end
Any help would be great! I think the issue is in teh NAT as I am able to access NLB IP from the outside and could not do that before adding the Static ARP stuff.
Thanks,
ChrisAlso If I change to NAT from the public IP to the NLB IP to use either one of the phsyical IPs of the NLB cluster (192.168.0.50 or 51) it works fine when using the public IP. So it's definatly an issue when NATing the VIP of NLB cluster.
Chris -
Not able to connect to Oracle EBS from host Windows 7
Hi, I have installed oracle EBS version 12.1.1 (32 bit) on OEL ver 6.3 (32 bit). I have installed Linux on Oracle VM virtualbox ver 4.1.16.
I am having host OS as Windows 7 home on my laptop.
While setting up the Network in Oracle VM virtualbox, I have set "attached to" as 'Host Only Adapter'.
I am able to connect to oracle EBS from the client server(linux) using Firefox browser. Both the services(database, Application) are starting & stopping without any problem.
I have entered following setting in C:\Windows\System32\drivers\etc\hosts file.
192.168.56.101 linux.server
IP address of Linux OS is 192.168.56.101
Please help in resolving the issue.
Thanks!I am getting error as "Internet Explorer cannot display the webpage" on IE ver 9, when accessing from host machine. On Firefox (ver 12), the error is coming as "The connection has timed out. The server at linux.server is taking too long to respond."
The firewall on the server has been disabled already.
I am not able to ping the server IP address or hostname.domainname from client. Following error comes while pinging -
C:\>ping 192.168.56.101
Pinging 192.168.56.101 with 32 bytes of data:
Reply from 172.31.3.110: Destination host unreachable.
Reply from 172.31.3.110: Destination host unreachable.
Reply from 172.31.3.110: Destination host unreachable.
Reply from 172.31.3.110: Destination host unreachable.
Ping statistics for 192.168.56.101:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
C:\>
Server Machine IP address -
[Oracle@linux ~]$ ifconfig
eth0 Link encap:Ethernet HWaddr 08:00:27:8D:FE:FA
inet addr:192.168.56.101 Bcast:192.168.56.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe8d:fefa/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:125 errors:0 dropped:0 overruns:0 frame:0
TX packets:46 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:17700 (17.2 KiB) TX bytes:5541 (5.4 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:54823 errors:0 dropped:0 overruns:0 frame:0
TX packets:54823 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:17464908 (16.6 MiB) TX bytes:17464908 (16.6 MiB)
[Oracle@linux ~]$
Following is the content of server hosts file(etc/hosts) -
127.0.0.1 linux.server linux
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
Thanks! -
[SOLVED] network unreachable inside the container
I managed a container with systemd-nspawn. The container boots, but the network is unreachable.
Below is my set up.
ON HOST
systemd-dhcpcd.service disable
systemd-networkd is enabled and started
network is started with two netctl profiles
Configuration files:
/etc/netctl/static-hortensia
Description='hortensia static ethernet connection'
Interface=enp7s0
Connection=ethernet
IP=static
Address=('192.168.1.87/24')
Gateway='192.168.1.254'
/etc/netctl/bridge-hortensia
Description="Bridge connection to container"
Interface=br0
Connection=bridge
BindsToInterfaces=()
IP=no
/etc/systemd/network/70-dahlia.netdev
[Match]
Host=host0
Virtualization=container
[NetDev]
Name=br0
Kind=bridge
/etc/systemd/network/80-dahlia.network
[Match]
Virtualization=container
[Network]
DHCP=no
DNS=192.168.1.254
[Address]
Address=192.168.1.94/24
[Route]
Gateway=192.168.1.254
/etc/resolv.conf
# Generated by resolvconf
domain lan
nameserver 192.168.1.254
BEFORE I start the container:
$ ip addr
2: enp7s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 14:da:e9:b5:7a:88 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.87/24 brd 192.168.1.255 scope global enp7s0
valid_lft forever preferred_lft forever
inet6 fe80::16da:e9ff:feb5:7a88/64 scope link
valid_lft forever preferred_lft forever
3: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default
link/ether 9e:eb:1a:c5:12:34 brd ff:ff:ff:ff:ff:ff
inet6 fe80::9ceb:1aff:fec5:1234/64 scope link
valid_lft forever preferred_lft forever
start the container
# systemd-nspawn --machine=dahlia --network-bridge=br0 -bD /dahlia
$ ip addr
2: enp7s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 14:da:e9:b5:7a:88 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.87/24 brd 192.168.1.255 scope global enp7s0
valid_lft forever preferred_lft forever
inet6 fe80::16da:e9ff:feb5:7a88/64 scope link
valid_lft forever preferred_lft forever
3: br0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 92:3c:ba:9e:24:07 brd ff:ff:ff:ff:ff:ff
inet6 fe80::9ceb:1aff:fec5:1234/64 scope link
valid_lft forever preferred_lft forever
4: vb-dahlia: <BROADCAST,MULTICAST> mtu 1500 qdisc noop master br0 state DOWN group default qlen 1000
ON CONTAINER
systemd-dhcpcd.service disable
systemd-networkd is enabled and started
NO netctl profiles
NO conf files in /etc/systemd/network/
gab@dahlia ➤➤ ~ % ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet 192.168.1.94/24 brd 192.168.1.255 scope global lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: host0: <NO-CARRIER,BROADCAST,ALLMULTI,AUTOMEDIA,NOTRAILERS,UP> mtu
1500 qdisc pfifo_fast state DOWN group default qlen 1000
link/ether 3a:4f:1f:c5:b5:d1 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.94/24 brd 192.168.1.255 scope global host0
valid_lft forever preferred_lft forever
Not sure this output is correct. Is it OK to get a IP adress for lo ? Then, interface host0 is DOWN. I guess this is not normal and could be the cause of my issue.
# ip link set dev host0 up
produces no change, host0 is still down
gab@dahlia ➤➤ ~ % ip route
default via 192.168.1.254 dev host0
192.168.1.0/24 dev host0 proto kernel scope link src 192.168.1.94
gab@dahlia ➤➤ ~ % ping -c 3 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
From 192.168.1.94 icmp_seq=1 Destination Host Unreachable
Configuration files :
/etc/resolv.conf
# Generated by resolvconf
domain lan
nameserver 192.168.1.254
/etc/hosts
# /etc/hosts: static lookup table for host names
#<ip-address> <hostname.domain.org> <hostname>
127.0.0.1 localhost.localdomain localhost
::1 localhost.localdomain localhost
# End of file
Maybe some error here? localhost ? (host0 ?)
Some debug command outputs:
gab@dahlia ➤➤ ~ # SYSTEMD_LOG_LEVEL=debug /lib/systemd/systemd-networkd
timestamp of '/etc/systemd/network' changed
timestamp of '/run/systemd/network' changed
host0: link (with ifindex 2) added
lo: link (with ifindex 1) added
Sent message type=method_call sender=n/a destination=org.freedesktop.DBus object=/org/freedesktop/DBus interface=org.freedesktop.DBus member=Hello cookie=1 reply_cookie=0 error=n/a
Got message type=method_return sender=org.freedesktop.DBus destination=:1.6 object=n/a interface=n/a member=n/a cookie=1 reply_cookie=1 error=n/a
Got message type=signal sender=org.freedesktop.DBus destination=:1.6 object=/org/freedesktop/DBus interface=org.freedesktop.DBus member=NameAcquired cookie=2 reply_cookie=0 error=n/a
gab@dahlia ➤➤ ~ % ip route
default via 192.168.1.254 dev host0
192.168.1.0/24 dev host0 proto kernel scope link src 192.168.1.94
gab@dahlia ➤➤ ~ % cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
host0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
lo: 840 9 0 0 0 0 0 0 840 9 0 0 0 0 0 0
Same command ON HOST
gabx@hortensia ➤➤ ~ % cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
br0: 0 0 0 0 0 0 0 0 648 8 0 0 0 0 0 0
vb-dahlia: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
lo: 1700 34 0 0 0 0 0 0 1700 34 0 0 0 0 0 0
enp7s0: 15403401 19789 0 0 0 0 0 0 3834189 16721 0 0 0 0 0 0
gab@dahlia ➤➤ ~ % ping -c3 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_seq=1 ttl=64 time=0.036 ms
I can ping the gateway.
Any help is appreciated.
Last edited by gabx (2014-03-06 22:15:07)After a few more test, I have a profile UP in the container, with an IP adress, but network is still unreachable.
The output of the following command puzzles me:
gab@dahlia ➤➤ /etc/netctl % cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
host0: 6004 28 0 0 0 0 0 0 774 11 0 0 0 0 0 0
lo: 336 3 0 0 0 0 0 0 336 3 0 0 0 0 0 0
It seems there is some traffic going through host0.
some debug outputs on the container side
gab@dahlia ➤➤ /etc/netctl % ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: host0: <BROADCAST,ALLMULTI,AUTOMEDIA,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 8e:d4:16:e2:06:4a brd ff:ff:ff:ff:ff:ff
inet 192.168.1.91/24 brd 192.168.1.255 scope global host0
valid_lft forever preferred_lft forever
inet6 fe80::8cd4:16ff:fee2:64a/64 scope link
valid_lft forever preferred_lft forever
gab@dahlia ➤➤ /etc/netctl % ip route
default via 192.168.1.254 dev host0
192.168.1.0/24 dev host0 proto kernel scope link src 192.168.1.91
gab@dahlia ➤➤ /etc/netctl % cat /etc/resolv.conf
# Generated by resolvconf
nameserver 192.168.1.254
Maybe a stupid question, but in case of my bridge, what device is the gateway : the host machine (192.168.1.87) OR the real router (192.168.1.254) ? I could be wrong when trying to indicate the router as the gateway ?
EDIT
Trying to use the host as gateway does not change anything: network still unreachable
More debug outputs.
on the container side
gab@dahlia ➤➤ ~ % ping -c3 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_seq=1 ttl=64 time=0.044 ms
64 bytes from 192.168.1.254: icmp_seq=2 ttl=64 time=0.035 ms
64 bytes from 192.168.1.254: icmp_seq=3 ttl=64 time=0.027 ms
--- 192.168.1.254 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1998ms
rtt min/avg/max/mdev = 0.027/0.035/0.044/0.008 ms
gab@dahlia ➤➤ ~ % ping -c3 192.168.1.87
PING 192.168.1.87 (192.168.1.87) 56(84) bytes of data.
64 bytes from 192.168.1.87: icmp_seq=1 ttl=64 time=0.041 ms
64 bytes from 192.168.1.87: icmp_seq=2 ttl=64 time=0.036 ms
64 bytes from 192.168.1.87: icmp_seq=3 ttl=64 time=0.036 ms
--- 192.168.1.87 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.036/0.037/0.041/0.007 ms
I can ping gateway and host
on host side
gabx@hortensia ➤➤ systemd/network % ping -c3 192.168.1.94
PING 192.168.1.94 (192.168.1.94) 56(84) bytes of data.
From 192.168.1.87 icmp_seq=1 Destination Host Unreachable
From 192.168.1.87 icmp_seq=2 Destination Host Unreachable
From 192.168.1.87 icmp_seq=3 Destination Host Unreachable
--- 192.168.1.94 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2008ms
pipe 3
I can not ping container
Last edited by gabx (2014-03-04 12:07:32) -
Alternate access mapping and binding in IIS for NLB nodes(2)
Hello All,
We have configured NLB for 2 nodes( 1 is App and WFE1 and 2 is WFE2).
here, we have given NLB host name to the users to browse. but, do we need to configure any thing in alternate access mapping and in IIS bindings, if yes, Please elaborate step by step please.
Thanks in advance
NLB host name and IP: abc.ap.company.com /10.11.12.95
Node1 server: abc.appri.company.com / 10.11.12.93
Node2 server: abc.appsec.company.com / 10.11.12.94
how to do this.
NARLAAssuming you configured the web application to use the URL http://abc.ap.company.com there is no additional IIS configuration needed on the servers.
If you're interested in accessing a specific server you can create a hostfile entry on your client machine that abc.ap.company.com to one of the two servers.
Jason Warren
@jaspnwarren
jasonwarren.ca
habaneroconsulting.com/Insights -
System config network error while parsing /etc/hosts
I am configuring RAC on Oracle Linux,i have configured /etc/hosts on both nodes,when ever i opened network, its displaying error message.
system config network error while parsing /etc/hosts
wrong ip on line 25
wrong ip on line 26
wrong ip on line 27
here is my host entries.
node1
====
[root@racnode1 ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
#::1 localhost6.localdomain6 localhost
#####Public#####
192.168.1.101 racnode1.reg.com racnode1
192.168.1.102 racnode2.reg.com racnode2
192.168.1.103 racnode3.reg.com racnode3
192.168.1.104 racnode4.reg.com racnode4
####Private######
10.10.1.1 racnode1-priv.reg.com racnode1-priv
10.10.1.2 racnode2-priv.reg.com racnode2-priv
10.10.1.3 racnode3-priv.reg.com racnode3-priv
10.10.1.4 racnode4-priv.reg.com racnode4-priv
#####Virtual#####
192.168.1.201 racnode1-vip.reg.com racnode1-vip
192.168.1.202 racnode2-vip.reg.com racnode2-vip
192.168.1.203 racnode3-vip.reg.com racnode3-vip
192.168.1.204 racnode4-vip.reg.com racnode4-vip
#SCAN
#192.168.1.301 racdb-scan.reg.com racdb-scan
#SCAN
192.168.1.301 racnode1-scan.reg.com racnode1-scan
192.168.1.302 racnode2-scan.reg.com racnode2-scan
192.168.1.303 racnode3-scan.reg.com racnode3-scan
[root@racnode1 ~]# hostname
racnode1.reg.com
[root@racnode1 ~]#
node2 host entries
===========
[root@racnode2 ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
#::1 localhost6.localdomain6 localhost
#####Public#####
192.168.1.101 racnode1.reg.com racnode1
192.168.1.102 racnode2.reg.com racnode2
192.168.1.103 racnode3.reg.com racnode3
192.168.1.104 racnode4.reg.com racnode4
####Private######
10.10.1.1 racnode1-priv.reg.com racnode1-priv
10.10.1.2 racnode2-priv.reg.com racnode2-priv
10.10.1.3 racnode3-priv.reg.com racnode3-priv
10.10.1.4 racnode4-priv.reg.com racnode4-priv
#####Virtual#####
192.168.1.201 racnode1-vip.reg.com racnode1-vip
192.168.1.202 racnode2-vip.reg.com racnode2-vip
192.168.1.203 racnode3-vip.reg.com racnode3-vip
192.168.1.204 racnode4-vip.reg.com racnode4-vip
#SCAN
#192.168.1.301 racdb-scan.reg.com racdb-scan
#SCAN
192.168.1.301 racnode1-scan.reg.com racnode1-scan
192.168.1.302 racnode2-scan.reg.com racnode2-scan
192.168.1.303 racnode3-scan.reg.com racnode3-scan
[root@racnode2 ~]#
i am not able to ping racnode1-priv or racnode2-priv.
from node1:
========
[root@racnode1 ~]# ping racnode2-priv
PING racnode2-priv.reg.com (10.10.1.2) 56(84) bytes of data.
From racnode1-priv.reg.com (10.10.1.1) icmp_seq=2 Destination Host Unreachable
From racnode1-priv.reg.com (10.10.1.1) icmp_seq=3 Destination Host Unreachable
From racnode1-priv.reg.com (10.10.1.1) icmp_seq=4 Destination Host Unreachable
5 packets transmitted, 0 received, +3 errors, 100% packet loss, time 4002ms
, pipe 3
[root@racnode1 ~]#
from node2:
=======
[root@racnode2 ~]# ping racnode1-priv
PING racnode1-priv.reg.com (10.10.1.1) 56(84) bytes of data.
From racnode2-priv.reg.com (10.10.1.2) icmp_seq=2 Destination Host Unreachable
From racnode2-priv.reg.com (10.10.1.2) icmp_seq=3 Destination Host Unreachable
From racnode2-priv.reg.com (10.10.1.2) icmp_seq=4 Destination Host Unreachable
--- racnode1-priv.reg.com ping statistics ---
4 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2999ms
, pipe 3
[root@racnode2 ~]#
any idea where configuration went wrong.
Thankshere is output, i can see lot of additional characters.
[root@racnode1 ~]# cat -vet /etc/hosts
# Do not remove the following line, or various programs$
# that require network functionality will fail.$
127.0.0.1 localhost.localdomain localhost$
#::1^I^Ilocalhost6.localdomain6 localhost$
$
#####Public#####$
192.168.1.101 racnode1.reg.com racnode1$
192.168.1.102 racnode2.reg.com racnode2$
192.168.1.103 racnode3.reg.com racnode3$
192.168.1.104 racnode4.reg.com racnode4$
####Private######$
10.10.1.1 racnode1-priv.reg.com racnode1-priv$
10.10.1.2 racnode2-priv.reg.com racnode2-priv$
10.10.1.3 racnode3-priv.reg.com racnode3-priv$
10.10.1.4 racnode4-priv.reg.com racnode4-priv$
#####Virtual#####$
192.168.1.201 racnode1-vip.reg.com racnode1-vip$
192.168.1.202 racnode2-vip.reg.com racnode2-vip$
192.168.1.203 racnode3-vip.reg.com racnode3-vip$
192.168.1.204 racnode4-vip.reg.com racnode4-vip$
#SCAN$
#192.168.1.301 racdb-scan.reg.com racdb-scan$
#SCAN$
192.168.1.301^Iracnode1-scan.reg.com^Iracnode1-scan$
192.168.1.302^Iracnode2-scan.reg.com^Iracnode2-scan$
192.168.1.303^Iracnode3-scan.reg.com^Iracnode3-scan$
[root@racnode1 ~]#
from node2:
========
[root@racnode2 ~]# cat -vet /etc/hosts
# Do not remove the following line, or various programs$
# that require network functionality will fail.$
127.0.0.1 localhost.localdomain localhost$
#::1^I^Ilocalhost6.localdomain6 localhost$
$
#####Public#####$
192.168.1.101 racnode1.reg.com racnode1$
192.168.1.102 racnode2.reg.com racnode2$
192.168.1.103 racnode3.reg.com racnode3$
192.168.1.104 racnode4.reg.com racnode4$
####Private######$
10.10.1.1 racnode1-priv.reg.com racnode1-priv$
10.10.1.2 racnode2-priv.reg.com racnode2-priv$
10.10.1.3 racnode3-priv.reg.com racnode3-priv$
10.10.1.4 racnode4-priv.reg.com racnode4-priv$
#####Virtual#####$
192.168.1.201 racnode1-vip.reg.com racnode1-vip$
192.168.1.202 racnode2-vip.reg.com racnode2-vip$
192.168.1.203 racnode3-vip.reg.com racnode3-vip$
192.168.1.204 racnode4-vip.reg.com racnode4-vip$
#SCAN$
#192.168.1.301 racdb-scan.reg.com racdb-scan$
#SCAN$
$
192.168.1.301^Iracnode1-scan.reg.com^Iracnode1-scan$
192.168.1.302^Iracnode2-scan.reg.com^Iracnode2-scan$
192.168.1.303^Iracnode3-scan.reg.com^Iracnode3-scan$
Edited by: Endeca on Apr 7, 2013 10:13 AM
Maybe you are looking for
-
Query Builder in Crystal Report Server 2008?
I am running CRS2008 V1 on Windows Server 2003 as single server install. I am using IIS as the web application server. Query Builder doesn't show up as an option anywhere I can find. How do I get to Query Builder? How do I install Query Builder if it
-
Artwork selection from a movie clip; is it selectable
It seems that when I import a movie into itunes, the artwork for it is automatically created from a frame somewhere in the 10-15 second range. Is this a preference and can I change it? thanks in advance.
-
How do I create a user, in my context in OID using the Java API
How do I create a user, with subschema, in my context in OID using the JAVA API I need to be able to create new users in my OID, I was doing it in our old iPlant Directory, but I don't seem to see the same methods in the Oracle LDAP API. I figured ou
-
Help with making circle shape photo....
Hi, I wonder if anyone can help me out please. I am using Photoshop CS Version 8. I have a photo which I would like to print out but in a circle shape. I'm a bit of a novice at Photoshop and can only really re-size, crop and alter tints/hues and t
-
How do i get photos sent via email into the new photos app in yosemite 10.10.3
Using mail on my mac, having upgraded to Yosemite 10.10.3 i now cant import photos sent via email into the new photos app. if i highlight the photo in mail and right click the mouse the option is still to export to iPhoto !!