Disco's questions

somehow i did end ip with a 'lot' of corrupted files in lost+found directory (centos) and I can't get rid of them.

Any idea ?

[/lost+found]# ls -la
total 196
drwx------  5 root       root       16384 15 nov 11:22 .
dr-xr-xr-x 24 root       root        4096 15 nov 12:00 ..
dr-s-wSrw-  2 2770915992 3548817360  8192 24 nov  1945 #116218
---sr---w-  1 1706202106 2512835934 49152  9 aoû  1912 #117788
--wx-wxr--  1 1583224319  391770300 49152 23 sep  1981 #118171
--ws-wS-w-  1 1646925659  410402836 49152  5 jui  1982 #118172
drw--wxrwT  2 1827674601  463260682  8192 27 oct  1983 #118174
-r-xrwxr-T  1 1872119673 1210446066 49152 13 jan  2008 #119226
---s-wsr--  1 2928826225 1483781972 49152  5 aoû  2016 #120124
d-wxr-s--T  2 1136296390 2183236452  8192 29 nov  1902 #121464

Using ubuntu 13.04 latest; i've installed lxc and various other tools

Here's my XML definition:

<domain type='lxc'>
  <name>vm1</name>
  <memory>500000</memory>
  <os>
    <type>exe</type>
    <init>/bin/bash</init>
  </os>
  <vcpu>1</vcpu>
  <clock offset='utc'/>
  <on_poweroff>destroy</on_poweroff>
  <on_reboot>restart</on_reboot>
  <on_crash>destroy</on_crash>
  <devices>
    <emulator>/usr/lib/libvirt/libvirt_lxc</emulator>
    <interface type='network'>
      <source network='default'/>
    </interface>
    <console type='pty' />
  </devices>
</domain>

I define it :

virsh --connect lxc:/// define application-test.xml

But when I try to start :

root@lxc:~# virsh --connect lxc:/// start vm1
error: Failed to start domain vm1
error: internal error guest failed to start: PATH=/bin:/sbin TERM=linux container=lxc-libvirt container_uuid=1302678e-0447-79b7-6cc1-db4be64fdaf5 LIBVIRT_LXC_UUID=1302678e-0447-79b7-6cc1-db4be64fdaf5 LIBVIRT_LXC_NAME=vm1 /bin/bash
2013-05-16 14:33:49.930+0000: 1: info : libvirt version: 1.0.2
2013-05-16 14:33:49.930+0000: 1: error : lxcContainerMountCGroups:1893 : Failed to mount cgroup on '/sys/fs/cgroup': No such file or directory
2013-05-16 14:33:49.932+0000: 1866: info : libvirt version: 1.0.2
2013-05-16 14:33:49.932+0000: 1866: error : virLXCControllerRun:1462 : Unable to send container continue message: Broken pipe
2013-05-16 14:33:49.938+0000: 1866: error : virCommandWait:2287 : internal error Child process (ip link del veth1) unexpected exit status 1: Cannot find device "veth1"

And mount:

root@lxc:~# mount
/dev/xvda1 on / type ext3 (rw,errors=remount-ro)
proc on /proc type proc (rw,noexec,nosuid,nodev)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
cgroup on /sys/fs/cgroup type cgroup (rw)

As seen it's mounted; but still can't get it to start.

Pulling my hairs out; any idea ?

I'm trying to establish a site-to-site VPN connection from office to datacenter.

Cisco RV042G and SonicWall NSA2400

In the office; we have the subnet 10.0.0.0/24 defined and hosts from 10.0.0.150 to 10.0.0.190 defined (.150 being the router)

In the datacenter; I have an interface (X4) that is setup for network 10.0.0.0/24 (.1 being the interface).

I can sucessfully establish the VPN connection; but then I can't reach the datacenter (for example by pinging 10.0.0.21 which is a server).

Ideally i'd like to map our office to the same 10.0.0.0/24 subnet on datacenter. So 10.0.0.150-180 would be able to ping the whole 10.0.0.0/24 subnet.

Here's the SonicWall configuration :

OfficeSubnet10 is defined as a host range : 10.0.0.150-10.0.0.180

OfficeNatInteroute is defined as range : 10.0.0.190-10.0.0.220

And the Cisco Side.

I must be missing something really obvious but can't find what.

I'm having big trouble setting up a very simple VPN. Using Centos 6.

My Server Address : 61.34.26.32 (fictive)

Whenever I try to connect (from iPhone5 or MacOS X) i get a connection timeout.

I haven't tried yet on Windows, but should work at least on Mac for my needs.

I'm pulling my hairs out ! Spent over 4 hours already, must be missing something really obvious here but can't figure out what.

Here's my log of errors:

Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: received Vendor ID payload [RFC 3947] method set to=109 
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110 
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: ignoring Vendor ID payload [FRAGMENTATION 80000000]
Jan 21 16:15:25 isis pluto[9793]: packet from 178.197.232.17:229: received Vendor ID payload [Dead Peer Detection]
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: responding to Main Mode from unknown peer 178.197.232.17
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: STATE_MAIN_R1: sent MR1, expecting MI2
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): peer is NATed
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: STATE_MAIN_R2: sent MR2, expecting MI3
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: Main mode peer ID is ID_IPV4_ADDR: '10.131.32.219'
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[17] 178.197.232.17 #19: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: deleting connection "L2TP-PSK-NAT" instance with peer 178.197.232.17 {isakmp=#0/ipsec=#0}
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: new NAT mapping for #19, was 178.197.232.17:229, now 178.197.232.17:24818
Jan 21 16:15:25 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: the peer proposed: 61.34.26.32/32:17/1701 -> 10.131.32.219/32:17/0
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20: responding to Quick Mode proposal {msgid:fcf22de5}
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20:     us: 61.34.26.32<61.34.26.32>[+S=C]:17/1701
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20:   them: 178.197.232.17[10.131.32.219,+S=C]:17/54977===10.131.32.219/32
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Jan 21 16:15:26 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #20: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x020bc811 <0x4fd90791 xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=178.197.232.17:24818 DPD=none}
Jan 21 16:15:46 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: received Delete SA(0x020bc811) payload: deleting IPSEC State #20
Jan 21 16:15:46 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: ERROR: netlink XFRM_MSG_DELPOLICY response for flow eroute_connection delete included errno 2: No such file or directory
Jan 21 16:15:46 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: received and ignored informational message
Jan 21 16:15:46 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17 #19: received Delete SA payload: deleting ISAKMP State #19
Jan 21 16:15:46 isis pluto[9793]: "L2TP-PSK-NAT"[18] 178.197.232.17: deleting connection "L2TP-PSK-NAT" instance with peer 178.197.232.17 {isakmp=#0/ipsec=#0}
Jan 21 16:15:46 isis pluto[9793]: packet from 178.197.232.17:24818: received and ignored informational message

ipsec.conf:

config setup
    nat_traversal=yes
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
    oe=off
    protostack=netkey

conn L2TP-PSK-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    rekey=no
    ikelifetime=8h
    keylife=1h
    type=transport
    left=61.34.26.32        
    leftprotoport=17/1701
    right=%any
    rightprotoport=17/%any

iptables :

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [420453:322899972]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -p ah -j ACCEPT
-A INPUT -p esp -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 500 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 4500 -j ACCEPT
-A INPUT -m policy --dir in --pol ipsec --mode tunnel -j ACCEPT
-A INPUT -j LOG --log-prefix REJECTEDINPUT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A FORWARD -o eth0 -j ACCEPT
-A FORWARD -m policy --dir in --pol ipsec --mode tunnel -j ACCEPT
-A FORWARD -m policy --dir out --pol ipsec --mode tunnel -j ACCEPT
-A FORWARD -j LOG --log-prefix REJECTEDFORWARD
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A OUTPUT -p esp -j ACCEPT
-A OUTPUT -p ah -j ACCEPT
-A OUTPUT -p udp --sport 500 -j ACCEPT
-A OUTPUT -p udp --sport 4500 -j ACCEPT
-A OUTPUT -m policy --dir out --pol ipsec --mode tunnel -j ACCEPT
COMMIT
*nat
:PREROUTING ACCEPT [180037:54564759]
:POSTROUTING ACCEPT [149:12428]
:OUTPUT ACCEPT [12263:921919]
-I POSTROUTING 1 -p 50 -j ACCEPT
-A POSTROUTING -o eth0 -d ! 10.1.2.0/24 -j MASQUERADE
COMMIT

and finally xl2tpd.conf

[global]
ipsec saref = yes
listen-addr = 61.34.26.32
[lns default]
ip range = 10.1.2.2-10.1.2.254   
local ip = 10.1.2.1   
refuse chap = yes
refuse pap = yes
require authentication = yes
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes

I'm setting up LT2p over IPSec on my Centos 6.3 fresh install.

I have iptables flushed, permit all.

Whenever I try to connect, i get a 'no reply from vpn' and nothi

Here's my ipsec.conf file (Server is 1.2.3.4) :

config setup
    nat_traversal=yes
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
    oe=off
    protostack=netkey

conn L2TP-PSK-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    rekey=no
    ikelifetime=8h
    keylife=1h
    type=transport
    left=1.2.3.4
    leftprotoport=17/1701
    right=%any
    rightprotoport=17/%any

My /etc/ipsec.secrets

1.2.3.4 %any: PSK "password"

My sysctl.conf (appened lines)

net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1

Here's what 'ipsec verify' gives:

# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                 [OK]
Linux Openswan U2.6.32/K2.6.32-279.19.1.el6.x86_64 (netkey)
Checking for IPsec support in kernel                            [OK]
 SAref kernel support                                           [N/A]
 NETKEY:  Testing for disabled ICMP send_redirects              [OK]
NETKEY detected, testing for disabled ICMP accept_redirects     [OK]
Checking that pluto is running                                  [OK]
 Pluto listening for IKE on udp 500                             [OK]
 Pluto listening for NAT-T on udp 4500                          [OK]
Checking for 'ip' command                                       [OK]
Checking /bin/sh is not /bin/dash                               [WARNING]
Checking for 'iptables' command                                 [OK]
Opportunistic Encryption Support                                [DISABLED]

And I see xl2tpd is listening on 1701/udp :

udp        0      0 1.2.3.4:1701     0.0.0.0:*     2096/xl2tpd 

In my current infrastructure I have the following setup :

ISP LINK 1 (64.30.24.128/26) ----|X3--sonicwall--X0|----LAN (64.30.24.128/26)

X0(LAN) is configured as

• Mode/IP Assignment: Transparent IP Mode, Splice L3 subnet)
• Transparent Range : Transparent X0 Range

X3(WAN) is configured as :

• IP Assignement : Static
• IP address : 64.30.24.130

64.30.24.129 being the gateway on the provider.

Now, I asked my provider to route a second subnet : 84.32.21.224/27

Their answer :

84.32.21.224/27 is currently routed statically over next hop 64.30.24.130

My question :

How do I add that second subnet to my current setup ? (without downtime if possible)

I'm not a routing/sonicwall expert, and quite frustrated that I cannot use all the IP's i'm paying for.

Thanks

In order to migrate to a new rack inside the datacenter I have to replicate the VLAN setup between a Cisco Switch and a Dell PowerConnect Swithch.

On the Dell Switch I have 2 VLANs :

vlan 10 : WAN vlan 20 : MGMT

On the Cisco Switch i have created the same VLANs and set up different port range

vlan10 : Ports 1-12 vlan20 : Ports 13-24

Like this example:

interface gigabitethernet2                            
switchport mode access
switchport access vlan 10
exit

The Cisco and the Dell switch are patched like this :

Dell (Port 13) ---> Cisco (Port 1)  - VLAN 10
Dell (Port 22) ---> Cisco (Port 13) - VLAN 20

Here are the port configs CISCO side :

interface gigabitethernet1
switchport trunk native vlan 10
exit
interface gigabitethernet13
switchport trunk native vlan 20
exit

And on the DELL SIDE:

interface gigabitethernet1/0/13
 switchport access vlan 10
!
interface gigabitethernet1/0/22
 switchport access vlan 20
!

Now, i can ping anything that is on vlan20; but cannot ping anything on the vlan10. I'm pulling my hairs out; what is wrong here ?

Recent owner of a Dell PowerVault MD3600i i'm experiencing some weird results.

I have a dedicated 24x 10GbE Switch (PowerConnect 8024), setup to jumbo frames 9K.

The MD3600 has 2 RAID controllers, each has 2x 10GbE ethernet nics. There's nothing else on the switch; one VLAN for SAN traffic.

Here's my multipath.conf

defaults {
    udev_dir        /dev
    polling_interval    5
    selector        "round-robin 0"
    path_grouping_policy    multibus
    getuid_callout      "/sbin/scsi_id -g -u -s /block/%n"
    prio_callout        none
    path_checker        readsector0
    rr_min_io       100
    max_fds         8192
    rr_weight       priorities
    failback        immediate
    no_path_retry       fail
    user_friendly_names yes
#   prio            rdac
}
blacklist {
    device {
               vendor "*"
        product "Universal Xport"
        }
#   devnode "^sd[a-z]"
}

devices {
    device {
           vendor "DELL"
           product "MD36xxi"
           path_grouping_policy group_by_prio
           prio rdac 
        #  polling_interval  5
           path_checker rdac
           path_selector "round-robin 0"
           hardware_handler "1 rdac"
           failback immediate
           features "2 pg_init_retries 50"
           no_path_retry 30
           rr_min_io 100
           prio_callout "/sbin/mpath_prio_rdac /dev/%n"
       }
}

And iscsid.conf :

node.startup = automatic
node.session.timeo.replacement_timeout = 15
node.conn[0].timeo.login_timeout = 15
node.conn[0].timeo.logout_timeout = 15
node.conn[0].timeo.noop_out_interval = 5
node.conn[0].timeo.noop_out_timeout = 10
node.session.iscsi.InitialR2T = No
node.session.iscsi.ImmediateData = Yes
node.session.iscsi.FirstBurstLength = 262144
node.session.iscsi.MaxBurstLength = 16776192
node.conn[0].iscsi.MaxRecvDataSegmentLength = 262144

After my tests; i can barely come to 200 Mb/s read/write.

Should I expect more than that ? Providing it has dual 10 GbE my thoughts where to come around the 400 Mb/s.

Any ideas ? Guidelines ? Troubleshooting tips ?

EDIT:

The array is setup as a single logical volume of 5.7TB Disks are all 1TB 7.2k SAS 6GB (ST1000NM0001) RAID is RAID10

Some lines of the Swith Configuration:

interface Te1/0/23
storm-control broadcast
storm-control multicast
spanning-tree portfast
mtu 9000
switchport access vlan 40
exit
...
iscsi cos vpt 5
management access-list "default"
permit service ssh priority 1
permit service http priority 2
permit service https priority 3

And multipath output:

[root@xnode4 ~]# multipath -ll -v2
multipath.conf line 30, invalid keyword: prio
mpath1 (36d4ae520009bd7cc0000030e4fe8230b) dm-2 DELL,MD36xxi
[size=5.5T][features=3 queue_if_no_path pg_init_retries 50][hwhandler=1 rdac][rw]
\_ round-robin 0 [prio=400][active]
 \_ 7:0:0:0   sdc 8:32  [active][ready]
 \_ 9:0:0:0   sde 8:64  [active][ready]
 \_ 11:0:0:0  sdi 8:128 [active][ready]
 \_ 13:0:0:0  sdn 8:208 [active][ready]
\_ round-robin 0 [prio=0][enabled]
 \_ 10:0:0:0  sdj 8:144 [active][ghost]
 \_ 12:0:0:0  sdh 8:112 [active][ghost]
 \_ 8:0:0:0   sdd 8:48  [active][ghost]
 \_ 6:0:0:0   sdb 8:16  [active][ghost]

Trying to setup a few CentOS nodes to connect to a Dell MD3600i array, I'm running into the issue that the MD3600i shows 4 different portals (with different IP addresses). When I launch the initiator on host side well, it connects to every IP address it has seen during the discovery phase; resulting in duplicates.

How can I 'force' the initiator to discard every other IP addresses and let me choose only one IP address portal to connect to?

I'm having issues routing traffic thru VPN.

Here's my setup

I have 3 hosts, let's call them A, B and Z

B and Z have a VPN connection in the 10.10.10.x SUBNET A and B have a direct connection in the 10.10.12.x SUBNET

I want to be able to route traffic from A to Z, like :

A <= 10.10.12.254 [LAN] 10.10.12.111 => B <= 10.10.10.152 [VPN] 10.10.10.10 => Z

On host B, i have set up ip_forwarding : net.ipv4.ip_forward = 1

and routing on host B:

[root@hostB: ~]# ip route
10.10.10.10 dev ppp0  proto kernel  scope link  src 10.10.10.152 
10.10.12.0/24 dev eth1  proto kernel  scope link  src 10.10.12.111 
10.10.10.0/24 dev ppp0  scope link 
169.254.0.0/16 dev eth1  scope link 

routing on host A:

[root@hostA: ~]# ip route
10.10.10.0 via 10.10.12.111 dev eth1 
10.10.12.0/24 dev eth1  proto kernel  scope link  src 10.10.12.254 
169.254.0.0/16 dev eth1  scope link 
default via 192.168.1.1 dev eth0

But still not able to ping 10.10.10.10 from host A.

Any idea ? I'm pulling my hairs out.

I'm trying to setup a 48 ports gigabit switch (netgear GS748T).

My goal is to split the 48 ports to 3 vlans :

• VLAN10 ports 2-20
• VLAN20 ports 21-30
• VLAN30 ports 31-46

What i did is :

• On VLAN1, TAG port 1, UNTAG every other ports
• On VLAN10, TAG PORTS 2-20, UNTAG every other ports
• On VLAN20, TAG PORTS 21-30, UNTAG every other ports
• On VLAN30, TAG PORTS 31-46, UNTAG every other ports

I didn't touch the PVID configuration page; don't know what this is.

Now, if i plug a cable to port 5, i can ping VLAN20 and VLAN30; same for VLAN20 i can ping VLAN10 and VLAN30.

What am I doing wrong here ? I'm quite new to VLANs ...

edit: VLAN10 is WAN (connected to firewall interface x0, public subnet/26) VLAN20 is MGMT (connected to firewall interface x4, 10.0.0.x/24)

Whenever i plug from firewall to vlan20 i see all ports of the switch go crazy and i have packet loss when pinging switch or accessing his web ui.

I have made a complete application solution built on top of ubuntu.

Now that I have this ready; i'm looking to make my very own install of ubuntu (the smallest footprint possible with only the very bare minimal packages that my application requires).

My application consisty mainly of a mysql server, php, proftp and nginx (plus some other bash scripts).

The idea would be to have a clean & lean installer that will install everything so that i can redistribute this 'application' with a simple installation cd (easier for the end user).

I've stumbled upon Ubuntu Minimal Remix (http://www.ubuntu-mini-remix.org/)

Which seems a good starting point; but it's a live cd; I can install my whole application framework on it, no problem. But then, i don't know how to make an installer or how to build the iso that will actually install my "appliance".

I'd appreciate any simple guidelines or directions to get me started.

I'm having a weird issue. Sometimes on a quite loaded server i get a bunch of :

# apt-get install sun-java6-jre
[1]+  Stopped                 apt-get install sun-java6-jre

or even

# (just hitting Return)
[1]+  Stopped                 apt-get install sun-java6-jre sun-java6-fonts

And then i can't do anything; all that does is returning me this 'stopped' line ...

What does that mean ? Too many processes ? How can i solve this ...

I'm having a quite strange issue. I'm mounting a NFS share from a SAN (ubuntu) to another machine (centos)

Mounting the share works just fine; but when I try some tests like :

dd if=/dev/zero of=bigfile bs=1k count=2000
2000+0 records in
2000+0 records out
2048000 bytes (2.0 MB) copied, 16.7555 seconds, 122 kB/s

On clientside, network has MTU 9000; i can successfully ping -s 8000 at least the server.

On SAN side it has 4 Gigabit interfaces bonded.

Both sides run NFS4; mounting using :

mount -t nfs4 192.168.3.3:/share /myshare/

Where should I start investigating ?

And what is the average transfer rate I could accept ? 50 Mb/s for a single gigabit connection ?

edit: server exports :

/export/share *(rw,insecure,async,no_subtree_check) 

edit: local storage test

time dd if=/dev/zero of=bigfile2 bs=1k count=200000
200000+0 records in
200000+0 records out
204800000 bytes (205 MB) copied, 0.509998 seconds, 402 MB/s

real    0m0.558s
user    0m0.009s
sys 0m0.546s

Just discovering ganeti and playing around; from what I saw it's only possible to create instances by 'de-bootstrapping' a flavour of OS.

I'm wondering if it's possible to have 'ready to go' templates like for example a 'LAMP' template or a 'DNS Server' template to choose from when creating the instance.

Haven't found much documentation on that; if anyone has an idea ..

Thanks !

I'm having space issues on one server; the disk layout is setup so root device is on a volume group:

#vgscan
Found volume group "VolGroup00" using metadata type lvm2

#pvscan
PV /dev/xvdb1   VG lvm          lvm2 [322.26 GB / 107.26 GB free]
PV /dev/xvda2   VG VolGroup00   lvm2 [29.19 GB / 0    free]
Total: 2 [351.45 GB] / in use: 2 [351.45 GB] / in no VG: 0 [0   ]

#lvscan
ACTIVE '/dev/VolGroup00/LogVol00' [27.16 GB] inherit (my root)
ACTIVE '/dev/VolGroup00/LogVol01' [2.03 GB] inherit  (swap)

As you see, no space left on LogVol01. I'm looking for a 'quick' way to add more space I can add new physical device but don't know how to tell LVM to add this to the group.

Do I need to restart and boot livecd in order to do this operation ?

(This server is running in production and i really need to figure out what to do)

thank you for your answers,

I'm trying to backup my whole server using a simple rsync on a NFS mounted volume on '/nas'

Here's my rsync command

rsync -sav -S --stats -H --numeric-ids --delete -D 
--exclude-from="/usr/local/bin/rsync_nas1_exclude" / /nas1/

Getting the following error :

rsync: chown "/nas1/home/8003/.local/share/icons/application-x-wine-extension-its.png" 
failed: Invalid argument (22)

or

rsync: chown "/nas1/home/8003/.local/share/applications/wine/Programs/FxPro - Trader"     failed: Invalid argument (22)

Any idea why ? I use the '-s' param to protect file names

I have a remote partition that i have mounted locally using NFS.

'mount' gives

192.168.3.1:/mnt/storage-pools/ on /pools type nfs (rw,addr=192.168.3.1)

On the server i have in exports:

/mnt/storage-pools   *(rw,insecure,sync,no_subtree_check)

Then I try

 touch /pools/test1
 ls -lah
 -rw-r--r--  1 65534 65534    0 Dec 13 20:56 test1
 chown root.root test1
 chown: changing ownership of `test1': Operation not permitted

What am I missing ? Pulling my hairs out.

I stumbled upon this page : http://www.wlug.org.nz/PerUserTempDirs

Suggesting to create/replace a few scripts; the latest step is more confusing :

Now once you have that in place, invoke the following script instead of login(1):

 #!/bin/sh
 mkdir -m 700 /tmp-safe/user/"$1" /tmp/"$1"
 chown "$1":  /tmp-safe/user/"$1" /tmp/"$1"
 mount --bind /tmp-safe/user/"$1" /tmp/"$1" || exit 1
 exec /bin/login "$@"

Since users login with ssh, i 'think' that /bin/login is never executed. What script should I modify to be able to re-mount /tmp for the user ?

Is there an environment variable to set the temporary directory on debian based systems?

I have a java applet that uses that environement variable and it's getting confused when launching two instances of the same applet.