routing question

Hi all,

i want to set up a little "infrastructure" at home:
- Workstation with 1 GBit and 100 MBit Card.
- File-Server with 1 GBit Card
- Firewall/Router with 100 MBit card

I want to connect the workstation with the file-server on eth0 (1 GBit)
and the firewall on eth1 (100 MBit).
The firewall also is connected to the Internet-Router on eth1.

I tried to set it up, but it didn't work. The workstation can't connect
to/ping the file-server and the firewall.
I did the following:

workstation:
Destination Gateway Genmask Flags Iface
192.168.2.0 * 255.255.255.0 U eth0
192.168.1.0 * 255.255.255.0 U eth1
loopback * 255.0.0.0 U lo
default <firewall> 0.0.0.0 UG eth1

file-server:
Destination Gateway Genmask Flags Use Iface
192.168.2.0 * 255.255.255.0 U eth0
loopback * 255.0.0.0 U lo

firewall:
Destination Gateway Genmask Flags Iface
<provider> * 255.255.255.255 UH ppp0
192.168.100.0 * 255.255.255.0 U eth1
192.168.1.0 * 255.255.255.0 U eth0
loopback * 255.0.0.0 U lo
default <provider> 0.0.0.0 UG ppp0

What's wrong in this concept?

Thanks a lot in advance.

greetz,
gimickser

On Fri, 14 Jan 2005 23:27:32 +0100, gimickser wrote:
>
> i want to set up a little "infrastructure" at home:

You may want to read http://www.catb.org/~esr/faqs/smart-questions.html
You might get better answers when you provide operating system,
verision and if mandrake, cooker, community, offical.

> - Workstation with 1 GBit and 100 MBit Card.
> - File-Server with 1 GBit Card
> - Firewall/Router with 100 MBit card
>
> I want to connect the workstation with the file-server on eth0 (1 GBit)
> and the firewall on eth1 (100 MBit).
> The firewall also is connected to the Internet-Router on eth1.
>
> I tried to set it up, but it didn't work. The workstation can't connect
> to/ping the file-server and the firewall.

When you do a route -n on every node, you should see the gateway line.
$ route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 192.168.2.1 0.0.0.0 UG 0 0 0 eth0

Se the last line with the UG flag. G is gateway ip address.

Hidding address does not help us trouble shoot your problem if you
have an incorrect address. 192.168.x.x address are not routed past
your gateway so hiding them is a waste of time.

gimickser <gimickser@gmx.net> wrote:

....

>firewall:
>Destination Gateway Genmask Flags Iface
><provider> * 255.255.255.255 UH ppp0
>192.168.100.0 * 255.255.255.0 U eth1
>192.168.1.0 * 255.255.255.0 U eth0
>loopback * 255.0.0.0 U lo
>default <provider> 0.0.0.0 UG ppp0
>
>What's wrong in this concept?

I can't see anything wrong with it, as long as eth0 on the firewall
is connected to eth1 on the workstation.

Are you pinging by IP address, or by host name? Can you see the
activity lights on each individual interface blink when you do a
ping? Are the cables good?

Do ifconfig on each interface, and note the packet counts. then
do ping using the IP addresses, and then check to see which
packet counts have changed. That will indicate if you are
sending, if it is being received, if a return is being sent, and
if that is being received.

--
Floyd L. Davidson <http://web.newsguy.com/floyd_davidson>
Ukpeagvik (Barrow, Alaska) floyd@barrow.com

Bit Twister wrote:
> On Fri, 14 Jan 2005 23:27:32 +0100, gimickser wrote:
>
> You may want to read http://www.catb.org/~esr/faqs/smart-questions.html

Thanks, great documentation. This will help in the future.

greetz