Re: Need some help in Routing in Linux

Old guy:

Thanks for your diagram, it is absolutely correct. actually I run
tcpdump on both sides, I can see response is sending by 192.168.2
subnet machine, but that packet is not reaching 192.168.1 subnet
machine. I am keeping some tcpdump below (timing is not correct, since
I don't have exact time's output), this is an output. I am not seeing
response packet received to 192.168.1.129, also I disabled firewall on
second router and tried, samething I got. atleast now I can do "ssh
192.168.1.128" and reach all the other machine in second subnet.

[root@host1]# tcpdump -i eth0 host 192.168.2.1
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
08:29:37.244027 IP 192.168.1.129.47628 > 192.168.2.1.ssh: S
2002171283:2002171283(0) win 5840 <mss 1460,sackOK,timestamp 124696467
0,nop,wscale 2>
08:29:40.242870 IP 192.168.1.129.47628 > 192.168.2.1.ssh: S
2002171283:2002171283(0) win 5840 <mss 1460,sackOK,timestamp 124699467
0,nop,wscale 2>


[root@host2]# tcpdump -i eth0 host 192.168.1.129
21:28:00.910480 192.168.1.129.47628 > 192.168.2.1.ssh: S
1924612881:1924612881(0) win 5840 <mss 1460,sackOK,timestamp 2522694
0,nop,wscale 2>
21:28:00.910539 192.168.2.1.ssh > 192.168.1.129.47628: S
4213987684:4213987684(0) ack 1924612882 win 5792 <mss
1460,sackOK,timestamp 225595 2522694,nop,wscale 0> (DF)
21:28:00.912214 192.168.1.129.47628 > 192.168.2.1.ssh: R
1924612882:1924612882(0) win 0
21:28:03.908582 192.168.1.129.47628 > 192.168.2.1.ssh: S
1924612881:1924612881(0) win 5840 <mss 1460,sackOK,timestamp 2525694
0,nop,wscale 2>
21:28:03.908625 192.168.2.1.ssh > 192.168.1.129.47628: S
4216985784:4216985784(0) ack 1924612882 win 5792 <mss
1460,sackOK,timestamp 225894 2525694,nop,wscale 0> (DF)

.

Relevant Pages

  • Re: Create new AD site with no routing
    ... Hi Paul and thanks so much for the response. ... physical sites, 3 AD sites, all of which are separate IP subnets. ... I simply modify my subnet mask, change the IP address of the branch server, ... fiber is reliable I wouldn't even bother to move the dc. ...
    (microsoft.public.windows.server.active_directory)
  • OpenVPN works on one host on subnet, not others
    ... connect to the shop subnet only right now. ... tcpdump: listening on de1 ... hoover: icmp: echo request ...
    (comp.unix.bsd.openbsd.misc)
  • Re: Suspicious activity on the wire
    ... > subnet has a server to provide a lookup DB to the ... In deed tcpdump is a very good option, ... Do You Yahoo!? ... Mail has the best spam protection around ...
    (Debian-User)
  • Re: dhcpd related issue - not giving up
    ... In freebsd-questions Digest, Vol 283, Issue 2, Message: ... quotes to the necessary then add your response; ... You could perhaps usefully add 'or arp' to that tcpdump. ... So your switch and your rl1 interface have the same IP? ...
    (freebsd-questions)
  • Re: Debugging bridge behavior
    ... comes back through eth1, but it does not pass back through the bridge. ... tcpdump: WARNING: eth1: no IPv4 address assigned ... response back to the config utility. ... iptables -t mangle -F ...
    (comp.os.linux.networking)