Dual NIC routing (?) problem

[The MadDaemon]

(Sorry, I replied to Yuri only by mistake)

On Thu, Jun 19, 2008 at 10:49 AM, The MadDaemon <maddaemon at gmail.com> wrote:
> On Tue, Jun 17, 2008 at 3:47 PM, Yuri Pankov <yuri.pankov at gmail.com> wrote:
>> The MadDaemon wrote:
>>>
>>> List,
>>>
>>> I'm having a problem with a dual-homed host running 7.0-RELEASE with
>>> regards to traffic on one of the interfaces that I'm hoping someone
>>> knows something about.
>>>
>>> The goal of this box is to run Nessus on bge0 only (which is plugged
>>> into a trunk port on a switch), keeping fxp0 free as the admin
>>> interface and for serving web pages on my LAN.
>>>
>>> Here's ifconfig:
>>>
>>> bge0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
>>>        options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
>>>        ether 00:19:b9:22:a8:22
>>>        inet 0.0.0.0 netmask 0xffffff00 broadcast 0.0.0.255
>>>        media: Ethernet autoselect (100baseTX <full-duplex>)
>>>        status: active
>>> fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>>>        options=b<RXCSUM,TXCSUM,VLAN_MTU>
>>>        ether 00:02:b3:bb:59:17
>>>        inet 10.20.10.24 netmask 0xffffff00 broadcast 172.20.10.255
>>>        inet 10.20.10.28 netmask 0xffffffff broadcast 172.20.10.28
>>>        inet 10.20.10.29 netmask 0xffffffff broadcast 172.20.10.29
>>>        media: Ethernet autoselect (100baseTX <full-duplex>)
>>>        status: active
>>>
>>> /etc/rc.conf section:
>>>
>>> # Created: Mon Jun  9 09:32:52 2008
>>> defaultrouter="10.20.10.254"
>>> hostname="darkhorse.mydomain.local"
>>> ifconfig_fxp0="inet 10.20.10.24  netmask 255.255.255.0"
>>> ifconfig_fxp0_alias0="inet 10.20.10.28 netmask 255.255.255.255"
>>> ifconfig_fxp0_alias1="inet 10.20.10.29 netmask 255.255.255.255"
>>> ifconfig_bge0="inet 0.0.0.0 netmask 255.255.255.0"
>>
>> Try using ifconfig_bge0="up" in /etc/rc.conf instead of assigning bogus
>> (probably) address.
>
> Tried that as well and it didn't work.  I found a few different things
> regarding VLAN setup, so my new (and not working) configuration is
> this (in part):
>
> ######################
> # VLAN Configuration #
> ######################
> cloned_interface="vlan2"
> ifconfig_vlan2="inet 10.21.1.245 netmask 255.255.255.0 vlan 2 vlandev bge0"
> cloned_interface="vlan5"
> ifconfig_vlan5="inet 10.20.8.245 netmask 255.255.255.0 vlan 5 vlandev bge0"
> cloned_interface="vlan6"
> ifconfig_vlan6="inet 10.20.7.245 netmask 255.255.255.0 vlan 6 vlandev bge0"
>
> (I got the VLAN IDs straight from the router, so they are correct for
> each VLAN.)
>
> root at darkhorse [~]# ifconfig bge0 inet 10.20.8.245 netmask 255.255.255.0
> root at darkhorse [~]# ifconfig bge0 up
> root at darkhorse [~]# ifconfig bge0
> bge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>        options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
>        ether 00:19:b9:22:a8:22
>        inet 10.20.8.245 netmask 0xffffff00 broadcast 10.20.8.255
>        media: Ethernet autoselect (100baseTX <full-duplex>)
>        status: active
> root at darkhorse [~]# ping -c 2 10.20.8.4
> PING 10.20.8.4 (10.20.8.4): 56 data bytes
>
> --- 10.20.8.4 ping statistics ---
> 2 packets transmitted, 0 packets received, 100.0% packet loss
>



-- 
It said "use Linux 2.4 kernel or better" so I installed FreeBSD. Now
everything runs better. Why didn't they just tell me to do that to
begin with?