I was listening to an MPLS tutorial on youtube.MPLS tutorial
I came across this diagram.
I am not that familiar with router configuration.My questions are as follows.
1) what does G1/0, G2/0, G3/0 and G4/0 shown in the diagram represent?
It would be great if someone could clarify this.
I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working.
The IP of the computer on which the Tomcat server is running is 192.1xx.132.125:8080. The IP of my work computer is 192.1xx.129.75.
It is currently accessed as http://192.1xx.132.125:8080. I want to make it an https site for demonstration purposes. How do I create a certificate at the server and make my google chrome browser treat that certificate as a trusted certificate.
I have setup the basic tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working.
The IP of the computer on which the Tomcat server is running is 192.1xx.132.125:8080. The IP of my work computer is 192.1xx.129.75.
I am able to ping my work PC to the server. If I type http://192.1xx.132.125:8080 on google chrome browser on my PC I get the following error.
Can someone please point out why this is happening? Also My webserver is headless.I can access the webpage on that server using curl. Since this is a non-conventional port number do I need to update the IP tables on my server?
I have run this command
sudo iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT -m comment --comment "Tomcat Server port"
as mentioned in http://serverfault.com/questions/341804/opening-up-port-8080-in-centos
I have a 64-bit amazon linux instance in aws. I am running apache tomcat6 running on that machine.
sudo fuser -v -n tcp 8080
USER PID ACCESS COMMAND
8080/tcp: tomcat 2492 F.... java
If I do
curl ec2-54-2xx-1xx-1xx.us-2.compute.amazonaws.com:8080
I do get the following web page.
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to You under the Apache License, Version 2.0
(the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Apache Tomcat</title>
<style type="text/css">
/*<![CDATA[*/
body {
color: #000000;
background-color: #FFFFFF;
font-family: Arial, "Times New Roman", Times, serif;
margin: 10px 0px;
}
img {
border: none;
}
a:link, a:visited {
color: blue
}
th {
font-family: Verdana, "Times New Roman", Times, serif;
font-size: 110%;
font-weight: normal;
font-style: italic;
background: #D2A41C;
text-align: left;
}
td {
color: #000000;
font-family: Arial, Helvetica, sans-serif;
}
td.menu {
background: #FFDC75;
}
.center {
text-align: center;
}
.code {
color: #000000;
font-family: "Courier New", Courier, monospace;
font-size: 110%;
margin-left: 2.5em;
}
#banner {
margin-bottom: 12px;
}
p#congrats {
margin-top: 0;
font-weight: bold;
text-align: center;
}
p#footer {
text-align: right;
font-size: 80%;
}
/*]]>*/
</style>
</head>
<body>
<!-- Header -->
<table id="banner" width="100%">
<tr>
<td align="left" style="width:130px">
<a href="http://tomcat.apache.org/">
<img src="tomcat.gif" height="92" width="130" alt="The Mighty Tomcat - MEOW!"/>
</a>
</td>
<td align="left" valign="top"><b>Apache Tomcat</b></td>
<td align="right">
<a href="http://www.apache.org/">
<img src="asf-logo-wide.gif" height="51" width="537" alt="The Apache Software Foundation"/>
</a>
</td>
</tr>
</table>
<table>
<tr>
<!-- Table of Contents -->
<td valign="top">
<table width="100%" border="1" cellspacing="0" cellpadding="3">
<tr>
<th>Administration</th>
</tr>
<tr>
<td class="menu">
<a href="/manager/status">Status</a><br/>
<a href="/manager/html">Tomcat Manager</a><br/>
</td>
</tr>
</table>
<br />
<table width="100%" border="1" cellspacing="0" cellpadding="3">
<tr>
<th>Documentation</th>
</tr>
<tr>
<td class="menu">
<a href="RELEASE-NOTES.txt">Release Notes</a><br/>
<a href="/docs/changelog.html">Change Log</a><br/>
<a href="/docs">Tomcat Documentation</a><br/>
</td>
</tr>
</table>
<br/>
<table width="100%" border="1" cellspacing="0" cellpadding="3">
<tr>
<th>Tomcat Online</th>
</tr>
<tr>
<td class="menu">
<a href="http://tomcat.apache.org/">Home Page</a><br/>
<a href="http://tomcat.apache.org/faq/">FAQ</a><br/>
<a href="http://tomcat.apache.org/bugreport.html">Bug Database</a><br/>
<a href="http://mail-archives.apache.org/mod_mbox/tomcat-users/">Users Mailing List</a><br/>
<a href="http://mail-archives.apache.org/mod_mbox/tomcat-dev/">Developers Mailing List</a><br/>
<a href="irc://irc.freenode.net/#tomcat">IRC</a><br/>
</td>
</tr>
</table>
<br/>
<table width="100%" border="1" cellspacing="0" cellpadding="3">
<tr>
<th>Miscellaneous</th>
</tr>
<tr>
<td class="menu">
<a href="/examples/servlets/">Servlets Examples</a><br/>
<a href="/examples/jsp/">JSP Examples</a><br/>
<a href="http://wiki.apache.org/tomcat/Specifications">Specifications</a><br/>
</td>
</tr>
</table>
</td>
<td style="width:20px"> </td>
<!-- Body -->
<td align="left" valign="top">
<p id="congrats">If you're seeing this page via a web browser, it means you've setup Tomcat successfully. Congratulations!</p>
<p>As you may have guessed by now, this is the default Tomcat home page. It can be found on the local filesystem at:</p>
<p class="code">$CATALINA_HOME/webapps/ROOT/index.html</p>
<p>where "$CATALINA_HOME" is the root of the Tomcat installation directory. If you're seeing this page, and you don't think you should be, then you're either a user who has arrived at new installation of Tomcat, or you're an administrator who hasn't got his/her setup quite right. Providing the latter is the case, please refer to the <a href="/docs">Tomcat Documentation</a> for more detailed setup and administration information than is found in the INSTALL file.</p>
<p><b>NOTE: For security reasons, using the manager webapp
is restricted to users with certain roles such as "manager-gui".</b>
Users are defined in <code>$CATALINA_HOME/conf/tomcat-users.xml</code>.</p>
<p>Included with this release are a host of sample Servlets and JSPs (with associated source code), extensive documentation, and an introductory guide to developing web applications.</p>
<p>Tomcat mailing lists are available at the Tomcat project web site:</p>
<ul>
<li><b><a href="http://tomcat.apache.org/lists.html#tomcat-users">tomcat-users</a></b> for general questions related to configuring and using Tomcat</li>
<li><b><a href="http://tomcat.apache.org/lists.html#tomcat-dev">tomcat-dev</a></b> for developers working on Tomcat</li>
</ul>
<p>Thanks for using Tomcat!</p>
<p id="footer"><img src="tomcat-power.gif" width="77" height="80" alt="Powered by Tomcat"/><br/>
Copyright © 1999-2014 Apache Software Foundation<br/>
All Rights Reserved
</p>
</td>
</tr>
</table>
</body>
</html>
However If I try to access the webserver from a web browser from an external machine I get the following error.
Google Chrome's connection attempt to ec2-54-2xx-1xx-1xx.us-2.compute.amazonaws.com was rejected. The website may be down, or your network may not be properly configured. Currently I have configured my security groups (both inbound and outbound) to allow all traffic from any machine.
I am trying to access this from my company network.Is it possible that my company firewall is blocking it? If yes why would that be?
In the security settings I have the following values for Inbound and Outbound.
Type Protocol Port Range Source
All traffic All All 0.0.0.0/0
I am still not able to access the web server from outside.
I have a array of switches connected to an Openflow controller.I want to understand the topology of the switches.I am thinking of using LLDP for this.Now in this architecture if a link goes down or a switch stop functioning is there some mechanism for failure discovery? What I guess I am basically asking is are there some mechanism for failure discovery in LLDP.? I had a look at the wikipedia page and I couldn't find much on it.Any help is appreciated.
I have installed openvswitch on my PC with runs Ubuntu 12.04.I also have virtual box running on my PC with 3 virtual machines (Ubuntu 12.04) running on them. are named
vm-1
vm-2
vm-3
I have configured the openvswitch on the Host as follows.
sudo ovs-vsctl show
#Create the virtual switch on the host machine
sudo ovs-vsctl add-br lan0
#Next we create tap devices on the host machine so we can bind them to the guests VM's later.
for tap in `seq 1 5`; do
sudo ip tuntap add mode tap lan0-p$tap
done;
#check if the interfaces are there
ip tuntap list
#Bring up the tap interfaces.
for tap in `seq 1 5`; do
sudo ip link set lan0-p$tap up
done;
# check if the interface are up
ip link
#Now we use ovs-vsctl to "bind" the tap devices to "lan0" switch
for tap in `seq 1 5`; do
sudo ovs-vsctl add-port lan0 lan0-p$tap
done;
#see that the tap devices are mapped to ports in lan0
sudo ovs-vsctl list-ports lan0
The output of ifconfig after this operation on the host is as follows.
eth0 Link encap:Ethernet HWaddr 1c:6f:65:37:60:b5
inet addr:192.168.129.56 Bcast:192.168.129.255 Mask:255.255.254.0
inet6 addr: fe80::1e6f:65ff:fe37:60b5/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:44955 errors:0 dropped:0 overruns:0 frame:0
TX packets:10042 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:13293545 (13.2 MB) TX bytes:1978326 (1.9 MB)
Interrupt:54 Base address:0x8000
lan0-p1 Link encap:Ethernet HWaddr 56:66:06:2d:da:ee
inet6 addr: fe80::5466:6ff:fe2d:daee/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:676 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lan0-p2 Link encap:Ethernet HWaddr 06:25:a2:ad:85:58
inet6 addr: fe80::425:a2ff:fead:8558/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:676 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lan0-p3 Link encap:Ethernet HWaddr 52:8e:34:67:a0:40
inet6 addr: fe80::508e:34ff:fe67:a040/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:676 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lan0-p4 Link encap:Ethernet HWaddr 22:6e:e8:62:c5:e8
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lan0-p5 Link encap:Ethernet HWaddr de:6f:9d:f9:c9:45
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:64 errors:0 dropped:0 overruns:0 frame:0
TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4984 (4.9 KB) TX bytes:4984 (4.9 KB)
Now using Network Settings on each virtual machines in Configured in 'Bridged Adapter' where
vm-1 is attached to lan0-p1
vm-2 is attached to lan0-p2
vm-3 is attached to lan0-p3
I have installed pox controller running on my HOST pc. I run pox controller to connect to my host PC as follows.
./pox.py log.level --DEBUG forwarding.l2_learning
The output that I get is as follows
POX 0.1.0 (betta) / Copyright 2011-2013 James McCauley, et al.
DEBUG:core:POX 0.1.0 (betta) going up...
DEBUG:core:Running on CPython (2.7.3/Aug 1 2012 05:14:39)
DEBUG:core:Platform is Linux-3.2.0-38-generic-x86_64-with-Ubuntu-12.04-precise
INFO:core:POX 0.1.0 (betta) is up.
DEBUG:openflow.of_01:Listening on 0.0.0.0:6633
It shows listening on 0.0.0.0:6633 ? What is 0.0.0.0 ?
I would expect output as follows
INFO:openflow.of_01:[Con 1/1] Connected to 00-00-00-00-00-01
DEBUG:forwarding.l2_learning:Connection [Con 1/1]
DEBUG:forwarding.l2_learning:installing flow for 00:00:00:00:00:03.2 ->
00:00:00:00:00:02.1
DEBUG:forwarding.l2_learning:installing flow for 00:00:00:00:00:02.1 ->
00:00:00:00:00:03.2
DEBUG:forwarding.l2_learning:installing flow for 00:00:00:00:00:03.2 ->
00:00:00:00:00:02.1
DEBUG:forwarding.l2_learning:installing flow for 00:00:00:00:00:04.3 ->
00:00:00:00:00:02.1
DEBUG:forwarding.l2_learning:installing flow for 00:00:00:00:00:02.1 ->
00:00:00:00:00:04.3
or something similar where it shows that it is learning the different MAC addresses. I don't seem to be getting that. Am I doing something wrong?
I have been learning Asterisk dial plan for the past week.I have written down a simple IVR system with two levels of menu and an exit option.I have used concepts from different tutorials on the web.Can someone confirm if the IVR below is correct? Correct in the sense that if the below is used will it work.I know the IVR does not do much yet.But I am just trying to clarify my understanding.
[incoming]
exten => 123,1,Answer()
same => n(menuprompt),Background(main-menu)
exten => 1,1,Playback(digits/1)
same => n,Goto(incoming,menuprompt,123)
exten => 2,1,Playback(digits/2)
same => n,Goto(incoming,menuprompt,123)
exten => 9,1,Hangup()
[main-menu]
exten => n(menuprompt),Background(main-menu)
exten => 3,1,Playback(digits/3)
same => n,Goto(main-menu,menuprompt,n)
exten => 4,1,Playback(digits/4)
same => n,Goto(main-menu,menuprompt,n)
exten => 9,1,Hangup()
I am using Juniper J-series routers to emulate a small telco and VPN customer.I need to use OSPF so that the routing information can be propagated to all P and PE nodes (basically all core and edge routers).Note that I don't want the routing information to be propogated to the customer facing routers (the green ones.)
set protocols ospf area 0.0.0.0 interface ge-0/0/0
set protocols ospf area 0.0.0.0 interface ge-0/0/1
set protocols ospf area 0.0.0.0 interface lo0.0 passive (loopback)
set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 passive (customer facing)
set protocols ospf area 0.0.0.0 interface ge-0/0/0
set protocols ospf area 0.0.0.0 interface lo0.0 passive (loopback)
set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 passive (customer facing)
set protocols ospf area 0.0.0.0 interface ge-0/0/0
set protocols ospf area 0.0.0.0 interface ge-0/0/1
set protocols ospf area 0.0.0.0 interface ge-0/0/2
set protocols ospf area 0.0.0.0 interface lo0.0 passive (loopback)
set protocols ospf area 0.0.0.0 interface ge-0/0/0
set protocols ospf area 0.0.0.0 interface ge-0/0/2
set protocols ospf area 0.0.0.0 interface ge-0/0/3
set protocols ospf area 0.0.0.0 interface lo0.0 passive (loopback)
set protocols ospf area 0.0.0.0 interface ge-0/0/0
set protocols ospf area 0.0.0.0 interface ge-0/0/1
set protocols ospf area 0.0.0.0 interface ge-0/0/3
set protocols ospf area 0.0.0.0 interface lo0.0 passive (loopback)
Now I want to enable the following things on all PE and P nodes.
1) MPLS 2) RSVP 3) OSPF-TE extension
set protocols mpls interface ge-0/0/0
set protocols mpls interface ge-0/0/1
set protocols mpls interface ge-0/0/2
set protocols rsvp interface ge-0/0/0
set protocols rsvp interface ge-0/0/1
set protocols rsvp interface ge-0/0/2
set protocols ospf traffic-engineering interface ge-0/0/0
set protocols ospf traffic-engineering interface ge-0/0/1
set protocols ospf traffic-engineering interface ge-0/0/2
Are the below steps sufficient to achieve the above? Any help is appreciated.
I have 6 Juniper switches (EX - 2200) connected to each other as shown in the network topology.
I have two PC's that I am using
PC1 - (used for configuring the 6 switches via minicom)
PC2 - to monitor the traffic between the switches via the Ports that are marked with arrows in the diagram.
STEP 1:
I create a new vlan On Switch 3 (SW3) that includes Port 12 and Port 22. I also assign l3-interface to the vlan (vlan_2) with ip address - 192.168.1.7.
Now I plug-in Port 0 of Switch 3 on PC2.
Now I try pinging 192.168.1.7 from PC2 (192.168.1.10)
I want to know what will happen? My postulation is that I will not be able to ping SW3 from PC2.This is because SW3 (Port 12 and Port 22) is a part of a vlan_2 and vlan_2 logically breaks up broadcast domains and so 192.168.1.7 will not be reachable from 192.168.1.10.
Now I have an l3-interface on SW1 with IP 192.168.1.1 using default vlan( vlan-id 0).
Similarly I have enabled IP on SW2 - 192.168.1.2
SW3 - 192.168.1.3
SW4 - 192.168.1.4
SW5 - 192.168.1.5
SW6 - 192.168.1.6
all using default vlan.
I create VLAN2 with the following configuration
SW3 - Port 12,Port 22. SW6 - Port 14
I create VLAN3 with the following configuration
SW3 - Port 0 SW6 - Port 0
I also configure a VLAN trunk between SW3 and SW6 using the following commands.
edit interfaces ge-0/0/12 set unit 0 family ethernet-switching port-mode trunk edit interfaces ge-0/0/12 set unit 0 family ethernet-switching vlan members all
There is a redundant path in the network as the loop between SW3 and SW6 is closed.There is no broadcast storm in the network? What is the reason for this?
I have not enabled STP or RSTP.still there is no broadcast storm.what is the reason for this.
(Please ignore the CISCO symbol on the switches in the diagram.All swithes are Junper EX 22-00.)
I have 6 Juniper switches (EX - 2200) connected to each other as shown in the network topology.
I have two PC's that I am using
PC1 - (used for configuring the 6 switches via minicom) PC2 - to monitor the traffic between the switches via the Ports that are marked with arrows in the diagram.
STEP 1:
I create a new vlan On Switch 3 (SW3) that includes Port 12 and Port 22. I also assign l3-interface to the vlan (vlan_2) with ip address - 192.168.1.7.
Now I plug-in Port 0 of Switch 3 on PC2.
Now I try pinging 192.168.1.7 from PC2 (192.168.1.10)
I want to know what will happen? My postulation is that I will not be able to ping SW3 from PC2.This is because SW3 (Port 12 and Port 22) is a part of a vlan_2 and vlan_2 logically breaks up broadcast domains and so 192.168.1.7 will not be reachable from 192.168.1.10.
Now I have an l3-interface on SW1 with IP 192.168.1.1 using default vlan( vlan-id 0).
Similarly I have enabled IP on SW2 - 192.168.1.2
SW3 - 192.168.1.3
SW4 - 192.168.1.4
SW5 - 192.168.1.5
SW6 - 192.168.1.6
all using default vlan.
Now I plug in Port 12 of SW3 (blue cable) into the PC2.
I try to ping 192.168.1.1 from PC2.
What will happen at this stage.?
My postulation is that I will be able to ping switch 1.Is this correct?
Also another question is that can a single port on a Switch be added multiple VLANS?
I am a beginner at network configuration? Any help would be highly appreciated.
(Please ignore the CISCO symbol on the switches in the diagram.All swithes are Junper EX 22-00.)
I am making a series of configuration changes on Junos EX- 2200 switch.I have this router connected to another PC via an ethernet cable.The IP address of the switch is 192.168.1.1.I am able to ping from 192.168.1.1 to 192.168.1.0 and vice-versa.
After the changes I make I do the following commands
set system archival configuration transfer-on-commit
set system archival configuration archive-sites "scp://[email protected]:/home/karthik/ws_karthik/sw1_config_1.txt" password godfather
commit
Where there is a user with user-name "karthik " and password "godfather".The path shown above also exists in the system
How ever I don't see the configuration file sw1_config_1.txt created at the path specified.
Also I have verified that sshd is running on the PC (192.168.1.10)
Am I doing something wrong here?
It would be great if anyone could help me out.
I have two PC's and a series of Juniper EX-2200 switches connected to form a network.None of the devices are connected to any external network.If I do an ifconfig on the first PC (monitor) I see that that PC only has an ethernet address.It does not have an IP address.I want to use an IP address to use applications such as scp.
So I do the following.
sudo ifconfig eth0 192.168.1.7 netmask 255.255.255.0
Now if I do an ifconfig the PC shows the IP address of 192.168.1.7 as expected.However it does n't seem to retains the IP address.It seems to lose the IP address after some time.I never rebooted the PC.It is likely that I am receiving ARP traffic on this PC.Can that cause the PC to lose the IP address.If yes,How can I cause the PC to retain the IP address
The route -n on the PC produces the following lines.
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
169.254.0.0 0.0.0.0 255.255.255.0 U 1000 0 0 eth0
192.168.1.0 0.0.0.0 255.255.254.0 U 0 0 0 eth0
It looks like the default gateway in this case is 0.0.0.0
I am connecting to Junos OS on Juniper EX-2200 switches using minicom as shown below
minicom -C log_sw1 sw1
Now I have a series of commands that I need to execute on sw1.(example shown below)
cli
request system zeroize
show config
show interface
edit
delete protocols
set system arp aging-timer 240
I want to avoid having to type these commands every time I log into the system.I want to put them in a config file and I want the it to be execute every time I log into the switch using minicom.
Is there any way I can achieve this?
I have a Juniper EX2200-24T switch.It is configured as an L2 switch (i.e the interfaces are configured in such way that they do not have an IP address.).I have manually connected the port ge-0/0/0 of the Switch to my PC eth0 port.
I want to create a simple VLAN on the switch and make that the default L3 interface and be able to ping the swtich from the PC.
I am doing the following commands from the Junos CLI.
1) edit (To enter configuration mode)
2) edit interfaces (Mode to add interfaces to vlans)
3) set get-0/0/1 unit 0 family ethernet-switching vlan members myvlan
4) edit vlans
5) set myvlan interface get-0/0/1.0
6) edit interfaces vlan
7) set unit 100 family inet address 192.168.1.1/32
8) edit vlans
9) set myvaln vlan-id 100
10) set myvlan l3-interface vlan.100
I am able to commit the above changes.But I still cannot ping the IP 192.168.1.1 from the PC.It would be great if anyone can point out to me what I am doing wrong.
I have 2 Ubuntu 64-bit Virtual Machines installed on Virtual Box.Their name and ip addresses are given below.I am trying to establish PPPoE connection between the two machines.
nas 192.168.129.130 (This machine runs the PPPoE server)
home 192.168.129.37 (This machine runs the PPPoE client)
The relevant configuration files on the nas (Network Access Server) is shown below.
/etc/ppp/pppoe-server-options
require-chap
login
lcp-echo-interval 10
lcp-echo-failure 2
defaultroute
noipdefault
/etc/ppp/chap-secrets
#client server secret IP addresses
home * "godfather" *
nas * "godfather" *
/etc/ppp/ipaddress_pool
192.168.129.20-40
/etc/ppp/pppoe_start
PPPOE_IFACE="eth0"
PPPOE_IFACE_ADDR="192.168.129.31"
#Start PPPoE Server
sleep 5
pppoe-server -C isp -L $PPPOE_IFACE_ADDR -p /etc/ppp/ipaddress_pool -I $PPPOE_IFACE -m 1412
/etc/ppp/pppoe_stop
killall pppoe-server
The relevant configurations files on home (the client) are shown below.
/etc/ppp/chap_secrets
# Secrets for authentication using CHAP
# client server secret IP addresses
nas * "godfather" *
home * "godfather" *
/etc/ppp/peers/myisp
plugin rp-pppoe.so
eth0
user root
I start the PPPoE server using the following command.
sudo /etc/ppp/pppoe_start
I start the client using the following command
sudo pppd call myisp
I run tcpdump on eth0 to look at PADI,PADO,PADR,PADS and PADT.The output of the tcpdump run on the nas server is shown below.
sudo tcpdump -i eth0 -n ether proto 0x8863 '||' ether proto 0x8864 [sudo] password for karthik:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
12:47:25.173507 PPPoE PADI [Service-Name] [Host-Uniq 0xCF0A0000]
12:47:25.173609 PPPoE PADO [AC-Name "nzhmlbld06l"] [Service-Name] [AC-Cookie 0x18F0FDB21859639108D61444C8A611F4D2080000] [Host-Uniq 0xCF0A0000]
12:47:25.173661 PPPoE PADO [AC-Name "isp"] [Service-Name] [AC-Cookie 0xF07AE7E13B3BDFACCCE03C14A0A60C7D49090000] [Host-Uniq 0xCF0A0000]
12:47:25.173777 PPPoE PADR [Service-Name] [Host-Uniq 0xCF0A0000] [AC-Cookie 0x18F0FDB21859639108D61444C8A611F4D2080000]
12:47:25.174239 PPPoE PADS [ses 0xa] [Service-Name] [Host-Uniq 0xCF0A0000]
12:47:25.174929 PPPoE [ses 0xa] LCP, Conf-Request (0x01), id 1, length 21
12:47:26.180431 PPPoE [ses 0xa] LCP, Conf-Request (0x01), id 1, length 16
12:47:26.180676 PPPoE [ses 0xa] LCP, Conf-Ack (0x02), id 1, length 16
12:47:28.177393 PPPoE [ses 0xa] LCP, Conf-Request (0x01), id 1, length 21
12:47:28.179020 PPPoE [ses 0xa] LCP, Conf-Reject (0x04), id 1, length 11
12:47:28.179295 PPPoE [ses 0xa] LCP, Conf-Request (0x01), id 2, length 16
12:47:28.181036 PPPoE [ses 0xa] LCP, Conf-Ack (0x02), id 2, length 16
12:47:28.181045 PPPoE [ses 0xa] LCP, Echo-Request (0x09), id 0, length 10
12:47:28.181464 PPPoE [ses 0xa] LCP, Echo-Request (0x09), id 0, length 10
12:47:28.181638 PPPoE [ses 0xa] LCP, Term-Request (0x05), id 3, length 34
12:47:28.182984 PPPoE [ses 0xa] LCP, Echo-Reply (0x0a), id 0, length 10
12:47:28.182992 PPPoE [ses 0xa] LCP, Term-Ack (0x06), id 3, length 6
12:47:31.217784 PPPoE PADT [ses 0xa] [Generic-Error "RP-PPPoE: Child pppd process terminated"]
I am unable to understand why "Generic-Error "RP-PPPoE: Child pppd process terminated" error message is being printed.Am I doing something wrong with the configuration?Any suggestions or pointers will be highly appreciated.
I have added debug dump for client and the server and this is the /var/log/syslog that I got on the client.
Aug 19 08:42:22 home pppd[2183]: Plugin rp-pppoe.so loaded.
Aug 19 08:42:22 home pppd[2183]: pppd options in effect:
Aug 19 08:42:22 home pppd[2183]: debug#011#011# (from /etc/ppp/peers/myisp)
Aug 19 08:42:22 home pppd[2183]: dump#011#011# (from /etc/ppp/peers/myisp)
Aug 19 08:42:22 home pppd[2183]: plugin rp-pppoe.so#011#011# (from /etc/ppp/peers/myisp)
Aug 19 08:42:22 home pppd[2183]: +chap#011#011# (from /etc/ppp/options)
Aug 19 08:42:22 home pppd[2183]: user root#011#011# (from /etc/ppp/peers/myisp)
Aug 19 08:42:22 home pppd[2183]: eth0#011#011# (from /etc/ppp/peers/myisp)
Aug 19 08:42:22 home pppd[2183]: eth0#011#011# (from /etc/ppp/peers/myisp)
Aug 19 08:42:22 home pppd[2183]: asyncmap 0#011#011# (from /etc/ppp/options)
Aug 19 08:42:22 home pppd[2183]: lcp-echo-failure 4#011#011# (from /etc/ppp/options)
Aug 19 08:42:22 home pppd[2183]: lcp-echo-interval 30#011#011# (from /etc/ppp/options)
Aug 19 08:42:22 home pppd[2183]: hide-password#011#011# (from /etc/ppp/options)
Aug 19 08:42:22 home pppd[2183]: noipx#011#011# (from /etc/ppp/options)
Aug 19 08:42:22 home pppd[2184]: pppd 2.4.5 started by root, uid 0
Aug 19 08:42:22 home pppd[2184]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Aug 19 08:42:22 home pppd[2184]: dst ff:ff:ff:ff:ff:ff src 8:0:27:21:a9:d
Aug 19 08:42:22 home pppd[2184]: [service-name] [host-uniq 88 08 00 00]
Aug 19 08:42:22 home pppd[2184]: Recv PPPOE Discovery V1T1 PADO session 0x0 length 51
Aug 19 08:42:22 home pppd[2184]: dst 8:0:27:21:a9:d src c8:60:0:ca:eb:83
Aug 19 08:42:22 home pppd[2184]: [AC-name nzhmlbld06l] [service-name] [AC-cookie 18 f0 fd b2 18 59 63 91 08 d6 14 44 c8 a6 11 f4 d2 08 00 00] [host-uniq 88 08 00 00]
Aug 19 08:42:22 home pppd[2184]: Send PPPOE Discovery V1T1 PADR session 0x0 length 36
Aug 19 08:42:22 home pppd[2184]: dst c8:60:0:ca:eb:83 src 8:0:27:21:a9:d
Aug 19 08:42:22 home pppd[2184]: [service-name] [host-uniq 88 08 00 00] [AC-cookie 18 f0 fd b2 18 59 63 91 08 d6 14 44 c8 a6 11 f4 d2 08 00 00]
Aug 19 08:42:22 home pppd[2184]: Recv PPPOE Discovery V1T1 PADO session 0x0 length 43
Aug 19 08:42:22 home pppd[2184]: dst 8:0:27:21:a9:d src 8:0:27:50:1d:d3
Aug 19 08:42:22 home pppd[2184]: [AC-name isp] [service-name] [AC-cookie ff 29 7b e4 ad 78 bd 39 db 78 61 ff f7 92 ff 0c f2 0a 00 00] [host-uniq 88 08 00 00]
Aug 19 08:42:22 home pppd[2184]: Recv PPPOE Discovery V1T1 PADS session 0x15 length 12
Aug 19 08:42:22 home pppd[2184]: dst 8:0:27:21:a9:d src c8:60:0:ca:eb:83
Aug 19 08:42:22 home pppd[2184]: [service-name] [host-uniq 88 08 00 00]
Aug 19 08:42:22 home pppd[2184]: PADS: Service-Name: ''
Aug 19 08:42:22 home pppd[2184]: PPP session is 21
Aug 19 08:42:22 home pppd[2184]: Connected to c8:60:00:ca:eb:83 via interface eth0
Aug 19 08:42:22 home pppd[2184]: using channel 4
Aug 19 08:42:22 home pppd[2184]: Using interface ppp0
Aug 19 08:42:22 home pppd[2184]: Connect: ppp0 <--> eth0
Aug 19 08:42:22 home pppd[2184]: sent [LCP ConfReq id=0x1 <mru 1492> <auth chap MD5> <magic 0x936c3d3f>]
Aug 19 08:42:22 home NetworkManager[521]: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Aug 19 08:42:22 home NetworkManager[521]: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Aug 19 08:42:23 home pppd[2184]: rcvd [LCP ConfReq id=0x1 <auth pap> <magic 0x4c48e2bb>]
Aug 19 08:42:23 home pppd[2184]: sent [LCP ConfAck id=0x1 <auth pap> <magic 0x4c48e2bb>]
Aug 19 08:42:25 home pppd[2184]: sent [LCP ConfReq id=0x1 <mru 1492> <auth chap MD5> <magic 0x936c3d3f>]
Aug 19 08:42:25 home pppd[2184]: rcvd [LCP ConfRej id=0x1 <auth chap MD5>]
Aug 19 08:42:25 home pppd[2184]: sent [LCP ConfReq id=0x2 <mru 1492> <magic 0x936c3d3f>]
Aug 19 08:42:25 home pppd[2184]: rcvd [LCP ConfAck id=0x2 <mru 1492> <magic 0x936c3d3f>]
Aug 19 08:42:25 home pppd[2184]: sent [LCP EchoReq id=0x0 magic=0x936c3d3f]
Aug 19 08:42:25 home pppd[2184]: peer refused to authenticate: terminating link
Aug 19 08:42:25 home pppd[2184]: sent [LCP TermReq id=0x3 "peer refused to authenticate"]
Aug 19 08:42:25 home pppd[2184]: rcvd [LCP EchoReq id=0x0 magic=0x4c48e2bb]
Aug 19 08:42:25 home pppd[2184]: rcvd [LCP EchoRep id=0x0 magic=0x4c48e2bb]
Aug 19 08:42:25 home pppd[2184]: rcvd [LCP TermAck id=0x3]
Aug 19 08:42:25 home pppd[2184]: Connection terminated.
Aug 19 08:42:25 home avahi-daemon[523]: Withdrawing workstation service for ppp0.
Aug 19 08:42:25 home NetworkManager[521]: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Aug 19 08:42:25 home pppd[2184]: Exit.
I have now modified my /etc/ppp/pap-secrets file to look like below.
# INBOUND connections
# Every regular user can use PPP and has to use passwords from /etc/passwd
karthik * "godfather" *
#karthik * "godfather" *
#home * "godfather" *
# UserIDs that cannot use PPP at all. Check your /etc/passwd and add any
# other accounts that should not be able to use pppd!
guest hostname "*" -
master hostname "*" -
#root hostname "*" -
support hostname "*" -
stats hostname "*" -
the /etc/ppp/pap-secrets file on the server looks like below.
# OUTBOUND connections
# Here you should add your userid password to connect to your providers via
# PAP. The * means that the password is to be used for ANY host you connect
# to. Thus you do not have to worry about the foreign machine name. Just
# replace password with your password.
# If you have different providers with different passwords then you better
# remove the following
* "godfather"
I have also changed the user in my /etc/ppp/peers/myisp from root to karthik.From the debug messages (/var/log/syslog) I get the following on the client.
Aug 19 11:24:55 home pppd[2920]: Plugin rp-pppoe.so loaded.
Aug 19 11:24:55 home pppd[2920]: pppd options in effect:
Aug 19 11:24:55 home pppd[2920]: debug#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: dump#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: plugin rp-pppoe.so#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: noauth#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: user karthik#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: eth0#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: eth0#011#011# (from /etc/ppp/peers/myisp)
Aug 19 11:24:55 home pppd[2920]: asyncmap 0#011#011# (from /etc/ppp/options)
Aug 19 11:24:55 home pppd[2920]: lcp-echo-failure 4#011#011# (from /etc/ppp/options)
Aug 19 11:24:55 home pppd[2920]: lcp-echo-interval 30#011#011# (from /etc/ppp/options)
Aug 19 11:24:55 home pppd[2920]: show-password#011#011# (from /etc/ppp/options)
Aug 19 11:24:55 home pppd[2920]: noipx#011#011# (from /etc/ppp/options)
Aug 19 11:24:55 home pppd[2921]: pppd 2.4.5 started by root, uid 0
Aug 19 11:24:55 home pppd[2921]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Aug 19 11:24:55 home pppd[2921]: dst ff:ff:ff:ff:ff:ff src 8:0:27:21:a9:d
Aug 19 11:24:55 home pppd[2921]: [service-name] [host-uniq 69 0b 00 00]
Aug 19 11:24:55 home pppd[2921]: Recv PPPOE Discovery V1T1 PADO session 0x0 length 51
Aug 19 11:24:55 home pppd[2921]: dst 8:0:27:21:a9:d src c8:60:0:ca:eb:83
Aug 19 11:24:55 home pppd[2921]: [AC-name nzhmlbld06l] [service-name] [AC-cookie 18 f0 fd b2 18 59 63 91 08 d6 14 44 c8 a6 11 f4 d2 08 00 00] [host-uniq 69 0b 00 00]
Aug 19 11:24:55 home pppd[2921]: Send PPPOE Discovery V1T1 PADR session 0x0 length 36
Aug 19 11:24:55 home pppd[2921]: dst c8:60:0:ca:eb:83 src 8:0:27:21:a9:d
Aug 19 11:24:55 home pppd[2921]: [service-name] [host-uniq 69 0b 00 00] [AC-cookie 18 f0 fd b2 18 59 63 91 08 d6 14 44 c8 a6 11 f4 d2 08 00 00]
Aug 19 11:24:55 home pppd[2921]: Recv PPPOE Discovery V1T1 PADS session 0x12 length 12
Aug 19 11:24:55 home pppd[2921]: dst 8:0:27:21:a9:d src c8:60:0:ca:eb:83
Aug 19 11:24:55 home pppd[2921]: [service-name] [host-uniq 69 0b 00 00]
Aug 19 11:24:55 home pppd[2921]: PADS: Service-Name: ''
Aug 19 11:24:55 home pppd[2921]: PPP session is 18
Aug 19 11:24:55 home pppd[2921]: Connected to c8:60:00:ca:eb:83 via interface eth0
Aug 19 11:24:55 home pppd[2921]: using channel 61
Aug 19 11:24:55 home NetworkManager[626]: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Aug 19 11:24:55 home NetworkManager[626]: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Aug 19 11:24:55 home pppd[2921]: Using interface ppp0
Aug 19 11:24:55 home pppd[2921]: Connect: ppp0 <--> eth0
Aug 19 11:24:55 home pppd[2921]: sent [LCP ConfReq id=0x1 <mru 1492> <magic 0xd1bab5a5>]
Aug 19 11:24:56 home pppd[2921]: rcvd [LCP ConfReq id=0x1 <auth pap> <magic 0x7d403be7>]
Aug 19 11:24:56 home pppd[2921]: sent [LCP ConfAck id=0x1 <auth pap> <magic 0x7d403be7>]
Aug 19 11:24:58 home pppd[2921]: sent [LCP ConfReq id=0x1 <mru 1492> <magic 0xd1bab5a5>]
Aug 19 11:24:58 home pppd[2921]: rcvd [LCP ConfAck id=0x1 <mru 1492> <magic 0xd1bab5a5>]
Aug 19 11:24:58 home pppd[2921]: sent [LCP EchoReq id=0x0 magic=0xd1bab5a5]
Aug 19 11:24:58 home pppd[2921]: sent [PAP AuthReq id=0x1 user="karthik" password="godfather"]
Aug 19 11:24:58 home pppd[2921]: rcvd [LCP EchoReq id=0x0 magic=0x7d403be7]
Aug 19 11:24:58 home pppd[2921]: sent [LCP EchoRep id=0x0 magic=0xd1bab5a5]
Aug 19 11:24:58 home pppd[2921]: rcvd [LCP EchoRep id=0x0 magic=0x7d403be7]
Aug 19 11:24:58 home pppd[2921]: rcvd [PAP AuthNak id=0x1 "Login incorrect"]
Aug 19 11:24:58 home pppd[2921]: Remote message: Login incorrect
Aug 19 11:24:58 home pppd[2921]: PAP authentication failed
Aug 19 11:24:58 home pppd[2921]: sent [LCP TermReq id=0x2 "Failed to authenticate ourselves to peer"]
Aug 19 11:24:58 home pppd[2921]: rcvd [LCP TermReq id=0x2 "Authentication failed"]
Aug 19 11:24:58 home pppd[2921]: sent [LCP TermAck id=0x2]
Aug 19 11:24:58 home pppd[2921]: rcvd [LCP TermAck id=0x2]
Aug 19 11:24:58 home pppd[2921]: Connection terminated.
Aug 19 11:24:58 home avahi-daemon[628]: Withdrawing workstation service for ppp0.
Aug 19 11:24:58 home NetworkManager[626]: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Aug 19 11:24:58 home pppd[2921]: Exit.
From the log it looks like the client is sending the right user name and password to the server.But the server is for some reason failing to authenticate the user karthik with the secret "godfather".I suspect that there is some mistake in configuration of pap-secrets file on the server.But can't figure out what.Can anyone point me in the right direction?
I have a VirtualBox installed on my Host OS Ubunut 11.04. (64-bit)
I have 4 virtual machines installed all of them in turn Ubunutu 11.04 (64-bit)
I want all the 4 machines to be a part of the single network and I need connectivity among them.I do not want connectivity with other machines on the host's physical network or even to the host's network adapter.
What network mode should I configure the machines in.I have tried the different options on Virtual Box.I have written a simple ping test which does a ping from one VM to all the other three
1) NAT Mode - ping test fails 2) Bridged Adapter - ping test succeeds.But I get packets (ICMP packets captured using libpcap) from strange IP addresses.I am assuming those machines are a part of the host's network.I want to avoid this.Is there any way by which I can achieve that.
I have installed 3 VM's on my PC.(Ubuntu 11.04).I want to setup an IPV6 network to review and test some of the IPV6 tools like NDPMonitor.(monitors ICMP messages of Neighbour Discovery Protocol.)
IP v6 addresses are as follows.
linux_router - fe80::a00:27ff:fed5:f7e9/64 labhack1 - fe80::a00:27ff:fed2:8bd1/64 labhack2 - fe80::a00:27ff:fed7:2f2d/64
The below commands have been run on both linux_router and labhack1.
sudo ip r a 2001:468:181:f100::/64 dev eth0
sudo vim /etc/radvd.conf /file looks like below./
interface eth0
{
AdvSendAdvert on; /*means that we are sending out advertisments.*/
MinRtrAdvInterval 5; /*these options control how often advertisments are sent*/
MaxRtrAdvInterval 15; /*these are not mandatory but valueable settings.*/
prefix fe80::a00:27ff::/64
{
AdvOnLink on; /*Says to the host everyone sharing this prefix is on the sam local link as you.*/
AdvAutonomous on; /*Says to a host: "Use this prefix to autoconfigure your address"*/
};
};
sudo sysctl -w net.ipv6.conf.all.forwarding=1
I try to do a
ping6 -I eth0 fe80::a00:27ff:fed5:f7e9
I get Destination unreachable: Address unreachable.I am not sure what I am doing wrong here.I am a beginner at linux administration.Basically I think I am missing whatever is analogous to physically connecting VM's.Any help that would point me in the right direction would be greatly appreciated.
I have an IP packet of header length of 20 Bytes and data length of 4096 Bytes. The maximum transfer unit of the network is only 1500 Bytes. As I understand fragmentation, the fragmented packet will look like below.
FRAGMENT 1 will carry 0-1499 Bytes of data.
FRAGMENT 2 will carry 1500-2999 Bytes of data
FRAGMENT 3 will carry 3000 - 4096 Bytes of data
The fragment offset field values should be as below.
FRAGMENT 1 - 0/8 = 0;
FRAGMENT 2 - 1500/8 = 187.5 (Does this means that we will add 4 Bytes of padding and set the fragment offset field as 188? From my understanding of networking, this should be obvious way to do it but I can't seem to find any info on Google to support this.)
FRAGMENT 3 = 3000/8 = 375.
Any suggestions would be appreciated.
I am trying to write a bash function shown below. I am trying to scp my .bashrc to the target machine. I want to do modify the following function in the below two ways.
I want to enter the password only once. Can I cache the password entered for scp and use the same for ssh.
I also want to execute bash --rcfile from the server rather then from my machine.
My starting example code is below:
export_bashrc() {
scp ~/.bashrc $1:/root/ws_karthik
ssh $1
bash --rcfile /root/ws_karthik/.bashrc
}
Can anyone suggest how to get around this issue?
I have my bashrc file set up to my liking.I usually work on a hardware that is plugged into a remote server.I ssh into that remote server.I would like my .bashrc to be run when I ssh into the remote server,instead of the bashrc on the server.Is there anyway by which I can accomplish this.?