[solved] Arch linux access point with multiple interfaces for the NAT

Hi, I have a router running Arch linux. It is connected via LAN (let's call it eth0) to the internet. It has a second LAN interface, eth1, and a wireless interface in master mode, wlan0.
Now, Everything works perfectly except providing network connectivity on eth1 and wlan0 simultaneously. I followed the guide in the "Internet share" wiki article and use dnsmasq/hostapd for the AP. It appears as if all traffic from the router is sent to the wlan0 interface, even if it came in through eth1 (for example, dhcp requests). I cannot really find information how to solve this. The words "bonding" and "iptables" are floating around, but there is not really an easy to understand tutorial for this.
What do I need to do to use both the eth1 and wlan0 interface (for different clients!) on my router?
Best regards, and thank you in advance
Jan Oliver
/e: This seems to be my problem: http://www.novell.com/support/kb/doc.php?id=7000318 How do I solve this using the usual iptables? (The way described in the article doesn't work: "RTNETLINK answers: No such process" errors.)
Last edited by janoliver (2013-09-25 22:24:53)

Or you could bridge eth1 and wlan0, and make dnsmasq bind/listen on that bridge...

Similar Messages

  • Timesten replication with multiple interfaces sharing the same hostname

    Hi,
    we have in our environment two Sun T2000 nodes, running SunOS 5.10 and hosting a TT server currently in Release 7.0.5.9.0, replicated between each other.
    I would like to have some more information on the behavior of the replication w.r.t. network reliability when using two interfaces associated to the same hostname, the one used to define the replication element.
    To make an example we have our nodes sharing this common /etc/hosts elements:
    151.98.227.5 TBMAS10df2 TBMAS10df2-10 TBMAS10df2-ttrep
    151.98.226.5 TBMAS10df2 TBMAS10df2-01 TBMAS10df2-ttrep
    151.98.227.4 TBMAS9df1 TBMAS9df1-10 TBMAS9df1-ttrep
    151.98.226.4 TBMAS9df1 TBMAS9df1-01 TBMAS9df1-ttrep
    with the following element defined for replication:
    ALTER REPLICATION REPLSCHEME
    ADD ELEMENT HDF_GNP_CDPN_1 TABLE HDF_GNP_CDPN
    CHECK CONFLICTS BY ROW TIMESTAMP
    COLUMN ConflictResTimeStamp
    REPORT TO '/sn/sps/HDF620/datamodel/tt41dataConflict.rpt'
    MASTER tt41data ON "TBMAS9df1-ttrep"
    SUBSCRIBER tt41data ON "TBMAS10df2-ttrep"
    RETURN RECEIPT BY REQUEST
    ADD ELEMENT HDF_GNP_CDPN_2 TABLE HDF_GNP_CDPN
    CHECK CONFLICTS BY ROW TIMESTAMP
    COLUMN ConflictResTimeStamp
    REPORT TO '/sn/sps/HDF620/datamodel/tt41dataConflict.rpt'
    MASTER tt41data ON "TBMAS10df2-ttrep"
    SUBSCRIBER tt41data ON "TBMAS9df1-ttrep"
    RETURN RECEIPT BY REQUEST;
    On this subject moving from 6.0.x to 7.0.x there has been some changes I would like to better understand.
    6.0.x reported in the documentation for Unix systems:
    If a host contains multiple network interfaces (with different IP addresses),
    TimesTen replication tries to connect to the IP addresses in the same order as
    returned by the gethostbyname call. It will try to connect using the first address;
    if a connection cannot be established, it tries the remaining addresses in order
    until a connection is established.
    Now On Solaris I don't know how to let gethostbyname return more than one interface (the documention notes at this point:
    If you have multiple network interface cards (NICs), be sure that “multi
    on” is specified in the /etc/host.conf file. Otherwise, gethostbyname will not
    return multiple addresses).
    But I understand this could be valid for Linux based systems not for Solaris.
    Now if I properly understand the above, how was the 6.0.x able to realize the first interface in the list (using the same -ttrep hostname) was down and use the other, if gethostbyname was reporting only a single entry ?
    Once upgraded to 7.0.x we realized the ADD ROUTE option was added to teach TT how to use different interfaces associated to the same hostname. In our environment we did not include this clause, but still the replication was working fine regardless of which interface we were bringing down.
    My both questions in the end lead to the same doubt on which is the algorithm used by TT to reach the replicated node w.r.t. entries in the /etc/hosts.
    Looking at the nodes I can see that by default both routes are being used:
    TBMAS10df2:/-# netstat -an|grep "151.98.227."
    151.98.225.104.45312 151.98.227.4.14000 1049792 0 1049800 0 ESTABLISHED
    151.98.227.5.14005 151.98.227.4.47307 1049792 0 1049800 0 ESTABLISHED
    151.98.227.5.14005 151.98.227.4.48230 1049792 0 1049800 0 ESTABLISHED
    151.98.227.5.46050 151.98.227.4.14005 1049792 0 1049800 0 ESTABLISHED
    TBMAS10df2:/-# netstat -an|grep "151.98.226."
    151.98.226.5.14000 151.98.226.4.47699 1049792 0 1049800 0 ESTABLISHED
    151.98.226.5.14005 151.98.226.4.47308 1049792 0 1049800 0 ESTABLISHED
    151.98.226.5.44949 151.98.226.4.14005 1049792 0 1049800 0 ESTABLISHED
    Tried to trace with ttTraceMon but once I brought down one of the interfaces did not see any reaction on either node, if you have some info it would be really appreciated !
    Cheers,
    Mike

    Hi Chris,
    Thanks for the reply, I have few more queries on this.
    1.Using the ROUTE CLAUSE we can use multiple IPs using priority level set, so that if highest priority level set in thr ROUTE clause for the IP is not active it will fall back to the next level priority 2 set IP. But cant we use ROUTE clause to use the multiple route IPs for replication simultaneously?
    2. can we execute multiple schema for the same DSN and replication scheme but with different replication route IPs?
    for example:
    At present on my system, I have a replication scheme running for a specific DSN with stand alone Master-Subscriber mechanism, with a specific route IP through VLAN-xxx for replication.
    Now I want to create and start another replication scheme for the same DSN and replication mechanism with a different VLAN-yyy route IP to be used for replication in parallel to the existing replication scheme. without making any changes to the pre-existing replication scheme.
    for the above scenarios, will there be any specific changes respective to the different replication schema mechanism ie., Active Standby and Standalone Master Subscriber mechanism etc.,
    If so what are the steps. like how we need to change the existing schema?
    Thanks In advance.
    Naveen

  • How to use multiple Interfaces for the same BS?

    Hi @ ,
    Is it possible to have a scenarion where i am using multiple interfaces in the same BS based upon some conditional field in the message.
    I amnot able to get the solution I know with condition editor I can have multiple receivers but in my scenarion based upon message fiels i have to decide which BAPI to be used and wht mapping and then post it to the same System
    Any help will be highly rewarded
    Regards

    Hi-
    Yes it is possible you can use multimapping for mapping the interfaces.
    To know more about multimapping see
    http://help.sap.com/saphelp_nw04/helpdata/en/21/6faf35c2d74295a3cb97f6f3ccf43c/content.htm
    Some more helpful links
    /people/jin.shin/blog/2006/02/07/multi-mapping-without-bpm--yes-it146s-possible

  • Single access point with multiple ssids and single channel possible?

    Hi everybody.
    I have this silly question.
    Let say we have three vlans, vlan1,2,3  and they are mapped to wlans as follows:
    Vlan 1  ssid1
    Vlan 2 ssid2
    Vlan3 ssid 3
                      AP --------trunk------Switchted network.
    Our Ap  has mobile devices in three wlans, i.e ssid1ssid2 and ssid3
    Since AP uses half duplex mode,  mobile devices need positive ack from ap  before they can send data,  therefore once channel let say channel 3( assuming 802.11b is used) can be shared by all mobile devices in three wlans.  
    Is  my understanding correct?
    Thanks and have a great weekend.

    Hii ,
    Yes ,that is pretty much possible as suggested by other experts on board. Depending on your access point you will have 1 (2.4 GHz) or  both 2.4 & 5GHz radios.
    You can configure multiple SSIDs (up to 16 ) known as MBSSID mode in autonomous environment. In Controller based architecture you can configure up to 512 WLAN (SSID) and transmit any 16 of them per AP (using AP group feature). However , it is recommended to keep multiple SSID count below 8 as for each SSID separate beacon will be sent on air which consumes more air time.
    Hope this helps
    Thanks
    Vinay

  • E3000 as an access point with an E3200 as the primary router not showing all connected devices

    I recently rewired my home with cat 6. All network and telephone comes in to the basement. While most devices in the home were converted to LAN connections a few remain WiFi connected.  The connections are as follows:
    Cable modem -> E3200 ->High Speed Switch <--> E3000.
    I purchased the E3200 to be the primary router. I'm using both 5.0 and 2.4 ghz connections. I set up my (existing) E3000 as an access point (AP) according to these instructions. I used the LAN-LAN setup so that all devices would be on the same network. Both E3200 and E3000 are at the latest firmware level. Both use the  same SSIDs, one each for 5ghz connection and a second for 2.4 ghz connection. Almost everything is working but there are a few nagging issues.
    1) A smart  phone connected wirelessly to the AP shows as a LAN connection when viewing the E3200 DHCP client list
    2) I set up a DHCP reservation for my network attached printer on the E3200.  When it connects via the AP it is not assigned the predefined IP address
    3) I can see the network attached printer on the E3000 MAC filter list but I can't see it when viewing DHCP clients or MAC wireless clients from the E3200 even though the printer is attached and working correctly.
    I can understand the reasons for issue 1 but it seems that a client attached to a wireless AP should also show as wireless to the main router.

    Well, let me know what IP addressess you have assigned to the network devices? Second if you remove the switch from the network (between E3200 and E3000) does the issue still persist... Once powercycle the whole network and then check whether it happens or not.

  • How can I create a hashmap() with multiple values for the same key?

    I am trying to write an application that will us something like a Map() with multiple values but some have the same key. Is this possible?

    i had the same question. just create a List, add all the values u want to it, and then put the List into the map like u would a normal single value. e.g.
    List list = new ArrayList();
    list.add(value1);
    list.add(value2);
    map.put(key, list);
    i bet u r doing the same course as i am =)

  • Is there any way I can control which specific access point I connect (and stay connected) to from amongst a set of access points with the same SSID?

    I'm working from a boat in a harbor in which the ISP has deployed numerous access points around the periphery.  All the access points share the same SSID and each is configured to use either channel 1, 6 or 11.   From my location, there are over a dozen of these access points "visible" (based on the the output of WiFi Scanner) with a range of RSSI and S/N values that vary over time.
    The ISP has told me that the quality of my connection should be "perfectly fine" for any access point with an RSSI value better than -75, but I know from experience that my connection quality is miserable (i.e. < 50Kbps download) for almost all of these, including those with RSSI values better than -75.  There is at least one exception, however, which gives me on the order of 2Mbps download, which is "great" in this context.
    I've tried using a more powerful USB antenna plugged into my MacBook Air (mid 2011), but as far as I can tell, it really doesn't make much difference.  Neither does my location within the boat.   The overriding factor seems to be which access point I happen to connect up to.
    I should point out that the closest access points are about 75 yards away, with many of them being several hundred yards away or more.  I'm guessing that even though the signal strength of some of the distant access points is causing them to get "chosen" some times, the results are unacceptable due to the distance.
    I'm hoping that I can determine, through experimentation, which access point(s) provide(s) acceptable performance and then configure my Mac to limit my connection to those points through whatever mechanism I need to use (e.g. channel, MAC id, etc.).

    Establishing a wireless connection with a client computer is left to the access point for various reasons. One reason that your Mac may not connect to the strongest access point is that it may have reached a limit of the number of clients it can serve, leaving it unable to accept a connection with another. The limit may not be very large.
    Suppose that happens, and your Mac establishes a connection with a more distant access point having a weaker signal. Then, suppose a client drops off the network. Doesn't this mean your Mac will switch to the stronger access point? Not necessarily. The throughput delivered to and from your Mac would have to drop below a threshold specified in the AP for it to drop the client, leaving your Mac free to connect with another one. The reason for this is to prevent rapid switching from one AP to another in an area in which two signals are of approximately equal quality. If that were to occur the frequent and repetitive handshaking between the two devices would slow throughput to zero.
    In an environment in which several access points are broadcasting the same SSID, Apple provides no insight as to how it determines which access point to choose. This is the reason I suspect this "choice" is a function of the router, or access point. The connection originates with it, not the Mac.
    Now, what would solve your dilemma would be to determine a way to control the access point with which your Mac connects, by specifying the access point's unique MAC address for example. In this happy circumstance, you could maintain an editable "whitelist" or "blacklist" of the harbor's access points and be able to choose which among them you prefer.
    I do not believe OS X maintains such a record of MAC addresses though, only those of the routers it uses. If I am correct about that, such a solution is unlikely to exist. Don't let that discourage you from searching for one though... I would concentrate on something like "selecting access point by specific MAC address".
    I did find this patent application though:
    Roaming Network Stations Using A Mac Address Identifier To Select New Access Point
    Perhaps it's a start

  • How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

    How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

    The Guest Network function of the Time Capsule and AirPort Extreme cannot be enabled when the device is in Bridge Mode. Unfortunately, with another router...the Telus...upstream on your network, Bridge Mode is indicated as the correct setting for all other routers on the network.
    If you can replace the Telus gateway with a simple modem (that performs no routing functions), you should be able to configure either the Time Capsule or the AirPort Extreme....whichever is connected to the modem....to provide a Guest Network.

  • Wi-Fi Access Point with B Channel or Wi-Fi with B Channel

    What does Wi- Fi with B channel or Wi-Fi Access point with B Channel mean. Can someone explain me. I am confused

    I don't know what your asking.  if your talking about 802.11b, that is a standard and you can compare the difference of 802.11b, 802.11a, 802.11g, 802.11n and or 802.11ac. Wireless devices, that means client devices have to be able to support the standard that the access point is using.  So if an access point is 802.11b only, the wireless client device has to be able to support 802.11b.  If for example, the access point is 802.11b/g/a/n/ac, that means the client has to be able to support at least one of those standards to be able to connect.
    Just take a look at the standards,  here is a link to a quick comparison.
    http://compnetworking.about.com/cs/wireless80211/a/aa80211standard.htm
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • Mimo access points with Static WEP security do not allow connection speeds above 54mbps

    I am getting this message:
    Access Connections - Mimo access points with Static WEP security do not allow connection speeds above 54mbps
    If I switch from WEP to WAP i do not get the message but I still only get 54mbps speed.  I have a Linksys Wireless-N Broadband Router.  Is there a setting that I am missing???

    Yes you need to use WPA-AES or WPA2-AES, or no encryption, to go faster than 54Mbps. This is part of the 802.11n spec.
    That's not so bad, because if you have the right 802.11n card and use the right settings you can go up to 300Mbps!
    What bites is that the 802.11n card which comes with X-Series ThinkPads is the Intel 4965AGN. It does not support the broader 802.11n 40MHz channel width option, limiting the top speed to 130Mbps .
    The new ThinkPads based on the Montevina/Centrino 2 platform will most likely use the Intel WiFi Link 5100/5300 802.11n/WiMax cards, which I hope will fix this, coz I'm going to buy one!
    I don't work for Lenovo. I'm a crazy volunteer!

  • Looking for an Access Point with 2 Ethernet ports and powered via PoE

    Hi Gurus,
    I am looking for an Access Point with 2 Ethernet ports and the access point can be powered via PoE. I have been assigned with a requirement where the rooms need to have access point as well as an Ethernet Cable provided from the Access Point as a backup for connectivity.
    The room only has one data cable coming from the main IT room as well does not have a spare power socket to power the Access Point. Will be good if it can be centrally controlled or controller based.
    Any recommendations?
    Regards
    J

    For the backup plan, the cheapest solution may be to just run a couple new cat5e drops to the room(est cost $250). If not then purchase a small Cisco POE switch for the room(est cost $2k). For wireless I would purchase a POE enabled Cisco AP. But you will need to verify the POE switch/blade you will be connecting the AP to can power the AP you buy. I got burned by that issue when we purchased some Cisco 1251 AP's with dual radios and they needed more power than our 4500 POE blades could handle. We were told we would need to purchase new 48 port 10/100/1000 blades or power injectors. Our Cisco sales vendor took the heat for that mistake.
    Posted by WebUser Steven Kinney from Cisco Support Community App

  • WAP54G as Access Point with another WAP54G as Repeater

    I've got two WAP54G's.  Both are the 3.1 hardware model and I've updated to the latest firmware on both (3.0.5)...
    The first WAP, is hardwired to my router.  That WAP works great.
    I'd like to to use the second WAP54G as a repeater for the first.  I've read through the Linksys docs and done a bunch of googling.  I confess that I'm still not getting it.
    Some info about root WAP:
    - Set the SSID
    - Channel 6
    - WPA2-Personal
    - Static IP
    Some questions about setting up the 2nd as a repeater:
    1) Do I need to run it on a different channel?  11 perhaps?
    2) Do I need to configure it with a different SSID than the root WAP?
    3) The linksys docs indicate that when I configure the 2nd WAP in "repeater" mode I need to enter the root WAPs wireless MAC address.  But the root WAP doesn't seem to have a "wireless" mac, just a "MAC" (it doesn't seem to have two different MAC addresses to pick from).
    4) Should I configure this with a static IP address compatible with my LAN?  The root router has a static IP assigned to it, do I assign another unique IP to this one?
    5) Do I need to restart after the config changes?
    6) Can I expect DHCP to propogate from my DSL modem through my root WAP, over the repeater connection, and to devices server by the repeater?
    In general, I'm a little confused about what "repeater" mode should do for me.
    Do I setup the repeater-mode (with the MAC address) and then expect the WAP to "mirror" the root?
    Or do I setup the repeater as if it were, itself, a "root" (give it a SSID, an IP, a security setup, etc.) and then just expect the repeater setting as an alternative to what would otherwise be a hardwire to my dsl modem?
    And how do I know when it's working?  Do I need to restart?
    Gary

    The WAP54G's repeater mode essentially sets up the 2nd access point as an extender of the main (root) access point. Since you will be extending the signal, you will need to configure the same wireless settings on both devices. SSIDs, channels, security settings need to be identical. Do set a STATIC IP address for your APs. If your network allows you to use the default IP (192.168.1.245) of the AP, you may set the 2nd unit to have an IP address like 192.168.1.246. The APs need to be in the same network.
    An essential step in setting up the AP to repeater mode is indicating the main AP's wireless MAC address. This will register the main device to the second AP and will get them to communicate. To get this info, you need to:
    1. Login to the main AP's setup page.
    2. Go to Status.
    3. Click on the Wireless subtab.
    4. Retrieve the MAC address indicated.
    Register this info unto the 2nd AP and Save Settings. You may need to reboot the devices to get the connection going. Once the devices are in sync, the client devices should be getting IP addresses assigned by the DHCP server (your DSL modem). To confirm that your setup is operational, you should be able to roam on the network in a location you would not have network access to without the AP on wireless repeater mode.

  • API for setting Access points with PEAP programmatically

    Dear Godly developers,
    Would like to find out if there is any APIs for setting Access points with PEAP programmatically?
    Regards
    hAoZ

    Thanks for your response. We don't have the Wireless LAN Controller installed and have only configured directly through the AP's, which don't seem to have any configuration changes regarding Aironet IE's. Is there a config change that needs to be made just on the AP's? Or is the Wireless LAN Controller software necessary to make this change?
    Thanks again.

  • Loading datastore with multiple interfaces

    We want to have multiple interfaces load the same datastore. Each of these processes can run in parallel. The problem we have is when the LKM fires it creates a C$ table with the same name in each interface. Is there a way to prevent this from creating a duplicate name?
    Troy

    Hi-
    Whenever ODI creates a loading table it will add the prefix with the name of C$ with the name of your table name. That is the reason you are getting the table name with more than 30 characters.
    Loading table prefix is a mandatory field that should be there in your physical schema definition. So whenever you are creating a table it should not exceed the characters defined in the technology or database.
    Thanks,
    Saravanan Rajavel

  • One SOAP-SOAP scenario with multiple interfaces

    Hi,
    I am developing a scenario SOAP-SOAP using PI 7.10 Sp6.
    The wsdl has around 8 service interfaces and i am planning to create 8 Outbound and 8 Inbound interfaces for the same mesg type and create a scenario without MM or Operation mapping.
    If I plan to use only one Sender CC and only one configuration scenario for this developement, how do I provide my end point in the following format?
    http://<host>:<port>/XISOAPAdapter/MessageServlet?senderParty=&senderService=<SEND_BS>&interface=Interface_Out&receiverParty=&receiverService=<RECV_BS>&interfaceNamespace=http://test.com/xi/SAP/
    Venkat.

    Raj/Pavan,
    I added other service interfaces to one service interface in operations.
    But the request messages have not appeared because of which it is throwing an exception when I activate the message interface.
    I do not have problems on the receiving side, One receiver CC should take care of the problem as we dont specify in the recvr SOAP action attribute.
    I am worried about sender side only !
    Thanks,
    Venkat.
    Just now I created a dummy DT, MT and SI and added this to existing even that request message did not show up in the SI.
    Edited by: Venkat A on Jun 16, 2010 11:03 AM

Maybe you are looking for

  • Error while opening the report from Sap Business one

    Hi Experts, I am facing a Problem while importing a CrystalReport in SAPBusiness One, it displaying an erroru201CNo matching records found u2018Queriesu2019 (OUQR) (ODBC -2028) Message 131-183u201D , and there is no use of this table OUQR in the quer

  • Report Generation: linebreak text in Word table row

    Hello everybody. Im trying to add some pretty tables to my Word report created with the Report Generation Toolkit. I build my 2d string array with the table data and that works fine. But if I add a text to the array cell that has a linebreak constant

  • HT3964 My iMac will not eject a CD when all the prescribed checks are completed

    I have inserted a CD in the iMac superdrive, no image appears on the desktop, I cannot eject the CD using all the prescribed options. The Mac will not shut down except by removing the power plug. Does anybody have any suggestions before I call in the

  • Number of times a Query is Run

    Hi Experts, I would like to find out: 1. what are the query names that are on my infocube(s) have been used most? 2. how many times each of these queires have run? 3. who are the users who ran these queries? 4. When was the last time each of these qu

  • Warning SUID file message in disk util ???

    Hi all Just got my Imac today Before I did anything I did a repair perm after doing the updates to the software and I am geting the message Warning SUID file "System/Library/Coreservices/Remotemanagement/ARDAgentapp/Contents/MacOS/ARDAge nt "has been