În OVH, am 2 servere ProxMox, fiecare conținând un Firewall și alte câteva gazde. Încerc să folosesc OVH vRack pentru comunicarea privată între ei, dar nu funcționează.
Iată un rezumat al rețelei mele:
Scopul este accesarea PRD1FRM206 de la PRD2FRM201 și invers.
Gazde
- PRD1FRM206 - Gazdă în serverul PVE01
- PRD1FWL100 - Firewall în serverul PVE01
- PRD2FRM201 - Gazdă în serverul PVE02
- PRD2FWL100 - Firewall în serverul PVE02
- PVE01 și PVE02 - Servere dedicate ProxMox, ambele găzduite în OVH, interconectate de OVH VRack
PVE01 Configurare rețea:
# Server pag-01
# interfețe de rețea
#
# Autor: Gilberto Martins
# Creare: 19.03.2021
# =================================
auto lo
iface lo inet loopback
auto enp5s0f0
iface enp5s0f0 inet manual
auto enp5s0f1
iface enp5s0f1 inet manual
# Interfață de internet
auto vmbr0
iface vmbr0 inet dhcp
# Interfață de internet
bridge-ports enp5s0f0
bridge-stp off
punte-fd 0
# Rețeaua de instrumente
auto vmbr1
iface vmbr1 inet manual
# Rede Tools - 172.21.10.0/27
pod-porturi manechin1
bridge-stp off
punte-fd 0
# Rețeaua WebPRD
auto vmbr2
iface vmbr2 inet manual
# Rede WebPRD - 172.21.20.0/27
pod-porturi manechin2
bridge-stp off
punte-fd 0
# Rețeaua WebHML
auto vmbr3
iface vmbr3 inet manual
# Rede WebHML - 172.21.30.0/27
pod-porturi manechin3
bridge-stp off
punte-fd 0
# Interfață PrivateNetwork
# auto vmbr4
# iface vmbr4 inet static
# Rede VRack - NAO USAR
# adresa 192.168.0.10/31
# bridge-ports enp5s0f1
# bridge-stp oprit
# bridge-fd 0
# Rețeaua de site-uri web
auto vmbr5
iface vmbr5 inet manual
# Site-uri web Rede - 172.21.40.0/27
pod-porturi manechin4
bridge-stp off
punte-fd 0
Interfețe curente PVE01:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue stare UNKNOWN grup implicit qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 ::1/128 scope host
valid_lft pentru totdeauna preferred_lft pentru totdeauna
2: enp5s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 stare UP grup implicit qlen 1000
link/eter KK:KK:KK:KK:KK:KK brd ff:ff:ff:ff:ff:ff
3: enp5s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr4 stare UP grup implicit qlen 1000
link/eter YY:YY:YY:YY:YY:YY brd ff:ff:ff:ff:ff:ff
4: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/eter UU:UU:UU:UU:UU:UU brd ff:ff:ff:ff:ff:ff
inet 9.9.9.9/24 brd 9.9.9.255 scope global dynamic vmbr0
valid_lft 56089sec preferred_lft 56089sec
inet6 zz99::zz22:zzbb:zzhh:zzkk/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
5: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 2a:30:fb:a2:d2:f1 brd ff:ff:ff:ff:ff:ff
inet6 fe80::30c0:14ff:fea4:abfd/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
6: vmbr2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 96:b3:67:f5:c3:cd brd ff:ff:ff:ff:ff:ff
inet6 fe80::a849:97ff:fe6c:14e9/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
7: vmbr3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue stare UP grup implicit qlen 1000
link/ether 5e:99:bd:90:12:24 brd ff:ff:ff:ff:ff:ff
inet6 fe80::e033:5fff:fe6d:222a/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
8: vmbr4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/eter AA:AA:AA:AA:AA:AA brd ff:ff:ff:ff:ff:ff
inet6 fe80::a242:3fff:fe47:3cfb/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
9: tap201i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether 2a:30:fb:a2:d2:f1 brd ff:ff:ff:ff:ff:ff
10: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 stare NECUNOSCUT grup implicit qlen 1000
link/ether 1a:61:72:52:5b:a0 brd ff:ff:ff:ff:ff:ff
11: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether 56:16:5b:14:ce:e3 brd ff:ff:ff:ff:ff:ff
12: tap100i2: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 96:b3:67:f5:c3:cd brd ff:ff:ff:ff:ff:ff
13: tap100i3: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr3 stare NECUNOSCUT grup implicit qlen 1000
link/ether 5e:99:bd:90:12:24 brd ff:ff:ff:ff:ff:ff
14: tap100i4: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr4 stare NECUNOSCUT grup implicit qlen 1000
link/ether ae:84:54:57:7f:46 brd ff:ff:ff:ff:ff:ff
15: tap203i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/eter aa:dd:66:e9:fd:74 brd ff:ff:ff:ff:ff:ff
17: tap204i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether ce:6b:9e:cb:ca:25 brd ff:ff:ff:ff:ff:ff
18: tap205i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether f2:76:a3:12:48:da brd ff:ff:ff:ff:ff:ff
19: tap206i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether be:92:f0:2e:54:2b brd ff:ff:ff:ff:ff:ff
21: tap402i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 5a:4b:71:1c:b1:6e brd ff:ff:ff:ff:ff:ff
22: tap403i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether ba:0a:25:76:01:6e brd ff:ff:ff:ff:ff:ff
23: tap301i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr3 stare NECUNOSCUT grup implicit qlen 1000
link/ether 9e:2c:dd:7b:fb:8a brd ff:ff:ff:ff:ff:ff
24: tap302i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr3 stare NECUNOSCUT grup implicit qlen 1000
link/ether 6e:50:73:30:67:ae brd ff:ff:ff:ff:ff:ff
25: tap303i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr3 stare NECUNOSCUT grup implicit qlen 1000
link/ether ae:96:60:a4:bc:21 brd ff:ff:ff:ff:ff:ff
26: veth900i0@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1 stare UP grup implicit qlen 1000
link/ether fe:92:fa:19:f1:93 brd ff:ff:ff:ff:ff:ff link-netnsid 0
29: tap304i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr3 stare NECUNOSCUT grup implicit qlen 1000
link/ether f2:14:af:70:17:42 brd ff:ff:ff:ff:ff:ff
31: tap404i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 8e:3e:76:76:fb:29 brd ff:ff:ff:ff:ff:ff
32: tap401i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether e2:af:68:37:ed:7e brd ff:ff:ff:ff:ff:ff
33: dummy4: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr5 stare UNKNOWN grup implicit qlen 1000
link/ether c2:7e:27:1c:0c:af brd ff:ff:ff:ff:ff:ff
34: vmbr5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue stare UP grup implicit qlen 1000
link/ether c2:7e:27:1c:0c:af brd ff:ff:ff:ff:ff:ff
inet6 fe80::c07e:27ff:fe1c:caf/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
35: tap100i5: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr5 stare NECUNOSCUT grup implicit qlen 1000
link/ether 92:cb:02:fe:5f:86 brd ff:ff:ff:ff:ff:ff
42: tap501i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr5 stare NECUNOSCUT grup implicit qlen 1000
link/ether 8a:80:41:55:95:0c brd ff:ff:ff:ff:ff:ff
49: tap202i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether c6:2e:7c:40:b8:02 brd ff:ff:ff:ff:ff:ff
PVE02 Configurare rețea:
# Server pag-02
# interfețe de rețea
#
# Autor: Gilberto Martins
# Creare: 06/08/2021
# =================================
auto lo
iface lo inet loopback
auto eno1
iface eno1 inet manual
auto eno2
iface eno2 inet manual
# Interfață de internet
auto vmbr0
iface vmbr0 inet dhcp
# Interfață externă - NAO USAR
bridge-ports eno1
bridge-stp off
punte-fd 0
# Rețeaua de instrumente
auto vmbr1
iface vmbr1 inet manual
# Tools Network - 172.22.10.0/27
pod-porturi manechin1
bridge-stp off
punte-fd 0
# Rețeaua bazei de date
auto vmbr2
iface vmbr2 inet manual
# Rețeaua bazei de date - 172.22.20.0/27
pod-porturi manechin2
bridge-stp off
punte-fd 0
# Rețeaua VRack
# auto vmbr3
# iface vmbr3 inet static
# Rețeaua VRack
# adresa 192.168.0.11/31
# bridge-ports eno2
# bridge-stp oprit
# bridge-fd 0
Interfețe curente PVE02:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue stare UNKNOWN grup implicit qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 ::1/128 scope host
valid_lft pentru totdeauna preferred_lft pentru totdeauna
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr0 stare UP grup implicit qlen 1000
link/ether d0:50:99:fb:24:13 brd ff:ff:ff:ff:ff:ff
3: eno2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master vmbr3 stare UP grup implicit qlen 1000
link/ether d0:50:99:fb:24:12 brd ff:ff:ff:ff:ff:ff
4: enp0s20f0u8u3c2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 26:fc:24:e9:66:dc brd ff:ff:ff:ff:ff:ff
5: vmbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/eter RR:RR:RR:RR:RR:RR brd ff:ff:ff:ff:ff:ff
inet 4.4.4.4/24 brd 4.4.4.255 scope global dynamic vmbr0
valid_lft 73446sec preferred_lft 73446sec
inet6 fe80::d250:99ff:fefb:2413/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
6: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue stare UP grup implicit qlen 1000
link/ether ba:32:c1:5c:c7:77 brd ff:ff:ff:ff:ff:ff
inet6 fe80::ccf5:5bff:fead:bf80/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
7: vmbr2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue stare UP grup implicit qlen 1000
link/ether 46:c7:8c:94:01:4b brd ff:ff:ff:ff:ff:ff
inet6 fe80::58d2:51ff:fe31:6516/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
8: vmbr3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue stare UP grup implicit qlen 1000
link/ether d0:50:99:fb:24:12 brd ff:ff:ff:ff:ff:ff
inet6 fe80::d250:99ff:fefb:2412/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
13: tap100i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr0 stare NECUNOSCUT grup implicit qlen 1000
link/ether 9a:de:c5:ba:40:80 brd ff:ff:ff:ff:ff:ff
14: tap100i1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr1 stare NECUNOSCUT grup implicit qlen 1000
link/ether ba:32:c1:5c:c7:77 brd ff:ff:ff:ff:ff:ff
15: tap100i2: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 46:c7:8c:94:01:4b brd ff:ff:ff:ff:ff:ff
16: tap100i3: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr3 stare NECUNOSCUT grup implicit qlen 1000
link/ether a2:e9:f1:ba:f1:a9 brd ff:ff:ff:ff:ff:ff
17: tap301i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 66:ba:b1:22:e8:22 brd ff:ff:ff:ff:ff:ff
18: tap302i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether e2:f8:74:ad:e4:77 brd ff:ff:ff:ff:ff:ff
19: tap303i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 3e:b1:f0:42:8d:75 brd ff:ff:ff:ff:ff:ff
20: tap304i0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master vmbr2 stare NECUNOSCUT grup implicit qlen 1000
link/ether 52:7a:ec:b5:46:4b brd ff:ff:ff:ff:ff:ff
21: veth201i0@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master fwbr201i0 stare UP grup implicit qlen 1000
link/ether fe:0c:f2:09:62:fe brd ff:ff:ff:ff:ff:ff link-netnsid 0
22: fwbr201i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue stare UP grup implicit qlen 1000
link/ether ae:fd:8d:06:38:c5 brd ff:ff:ff:ff:ff:ff
23: fwpr201p0@fwln201i0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master vmbr1 stare UP grup implicit qlen 1000
link/ether 52:58:a1:6d:db:00 brd ff:ff:ff:ff:ff:ff
24: fwln201i0@fwpr201p0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master fwbr201i0 stare UP grup implicit qlen 1000
link/ether ae:fd:8d:06:38:c5 brd ff:ff:ff:ff:ff:ff
PRD1FWL100 Configurare rețea:
# Aceasta este configurația rețelei scrisă de „subiquity”
#
# Autor: Gilberto Martins
# Modificat: 19.03.2021
# ================================
reţea:
ethernet:
# IP extern
ens18:
# IP-ul și Gateway-ul au fost schimbate intenționat
adrese:
- 1.1.1.1/32
gateway4: 1.1.1.254
# trasee obligatorii OVH
rute:
- la: 1.1.1.154/32
prin: 1.1.1.1
- până la: 0.0.0.0/0
prin: 1.1.1.1
servere de nume:
adrese:
- 172.21.10.2
căutare:
- kprd1
# Rețeaua de instrumente
ens19:
adrese:
- 172.21.10.1/27
# Rețeaua WebPrd
ens20:
adrese:
- 172.21.20.1/27
# WebHml Network
ens21:
adrese:
- 172.21.30.1/27
# Rețea Vrack (RFC 3021)
ens22:
adrese:
- 172.30.0.0/31
rute:
# Rețeaua de instrumente la kprd2
- la: 172.22.10.0/27
prin: 172.30.0.0
# Rețeaua bazei de date la kprd2
- la: 172.22.20.0/27
prin: 172.30.0.0
# VRack <-> VRack
- la: 172.30.0.1
prin: 172.30.0.0
# WebServer Network
ens23:
adrese:
- 172.21.50.1/27
versiunea: 2
Interfețe curente PRD1FWL100:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue stare UNKNOWN grup implicit qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 ::1/128 scope host
valid_lft pentru totdeauna preferred_lft pentru totdeauna
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/eter XS:XS:XS:XS:XS:XS brd ff:ff:ff:ff:ff:ff
inet 9.9.9.9/32 scope global ens18
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::ff:fe41:b0ec/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
3: ens19: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 22:a9:69:cd:9a:08 brd ff:ff:ff:ff:ff:ff
inet 172.21.10.1/27 brd 172.21.10.31 scope global ens19
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::20a9:69ff:fecd:9a08/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
4: ens20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 96:c5:9a:8e:13:0d brd ff:ff:ff:ff:ff:ff
inet 172.21.20.1/27 brd 172.21.20.31 scope global ens20
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::94c5:9aff:fe8e:130d/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
5: ens21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 36:b2:5a:cc:a4:91 brd ff:ff:ff:ff:ff:ff
inet 172.21.30.1/27 brd 172.21.30.31 scope global ens21
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::34b2:5aff:fecc:a491/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
6: ens22: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 92:5b:ab:3c:75:2f brd ff:ff:ff:ff:ff:ff
inet 172.30.0.0/31 scope global ens22
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::905b:abff:fe3c:752f/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
7: ens23: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 9a:a2:c1:97:59:54 brd ff:ff:ff:ff:ff:ff
inet 172.21.50.1/27 brd 172.21.50.31 scope global ens23
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::98a2:c1ff:fe97:5954/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
8: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state NECUNOSCUT grup implicit qlen 100
link/niciuna
inet 10.10.1.1/29 brd 10.10.1.7 scope global tun0
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::ece8:6abc:f8bd:d5f4/64 scope link stabil-privacy
valid_lft pentru totdeauna preferred_lft pentru totdeauna
PRD1FWL100 tabel de rutare curent
Notă: Adresele externe au fost ascunse
user@prd1fwl100:~$ ruta IP
implicit prin 9.9.9.9 dev ens18 proto static
10.10.1.0/29 dev tun0 proto kernel scope link src 10.10.1.1
9.9.9.9 prin 8.8.8.8 dev ens18 proto static
172.21.10.0/27 dev ens19 proto kernel scope link src 172.21.10.1
172.21.20.0/27 dev ens20 proto kernel scope link src 172.21.20.1
172.21.30.0/27 dev ens21 proto kernel scope link src 172.21.30.1
172.21.50.0/27 dev ens23 proto kernel scope link src 172.21.50.1
172.22.10.0/27 prin 172.30.0.0 dev ens22 proto static
172.22.20.0/27 prin 172.30.0.0 dev ens22 proto static
172.30.0.1 prin 172.30.0.0 dev ens22 proto static
user@prd1fwl100:~$ ip route show table local
difuzare 10.10.1.0 dev tun0 proto kernel scope link src 10.10.1.1
local 10.10.1.1 dev tun0 proto kernel scope host src 10.10.1.1
difuzare 10.10.1.7 dev tun0 proto kernel scope link src 10.10.1.1
difuzare 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
difuzare 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
local 9.9.9.9 dev ens18 proto kernel scope host src 9.9.9.9
difuzare 172.21.10.0 dev ens19 proto kernel scope link src 172.21.10.1
local 172.21.10.1 dev ens19 proto kernel scope host src 172.21.10.1
difuzare 172.21.10.31 dev ens19 proto kernel scope link src 172.21.10.1
difuzare 172.21.20.0 dev ens20 proto kernel scope link src 172.21.20.1
local 172.21.20.1 dev ens20 proto kernel scope host src 172.21.20.1
difuzare 172.21.20.31 dev ens20 proto kernel scope link src 172.21.20.1
difuzare 172.21.30.0 dev ens21 proto kernel scope link src 172.21.30.1
local 172.21.30.1 dev ens21 proto kernel scope host src 172.21.30.1
difuzare 172.21.30.31 dev ens21 proto kernel scope link src 172.21.30.1
difuzare 172.21.50.0 dev ens23 proto kernel scope link src 172.21.50.1
local 172.21.50.1 dev ens23 proto kernel scope host src 172.21.50.1
difuzare 172.21.50.31 dev ens23 proto kernel scope link src 172.21.50.1
local 172.30.0.0 dev ens22 proto kernel scope host src 172.30.0.0
PRD2FWL100 Configurare rețea:
# Acest fișier este generat din informațiile furnizate de sursa de date. Schimbări
# nu va persista la o repornire a instanței. Pentru a dezactiva cloud-init
# capabilități de configurare a rețelei, scrieți un fișier
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg cu următoarele:
# network: {config: disabled}
reţea:
versiunea: 2
ethernet:
# Interfață de internet
eth0:
# Informațiile sensibile de adresare au fost modificate în mod intenționat
adrese:
- 3.3.3.3/32
gateway4: 3.3.3.254
Meci:
adresa maca: XX:XX:XX:XX:XX:XX
# trasee obligatorii OVH
rute:
- la: 3.3.3.3/32
prin: 3.3.3.8
- până la: 0.0.0.0/0
prin: 3.3.3.8
servere de nume:
adrese:
- 172.22.10.2
căutare:
- kprd2
nume-setare: eth0
# Interfață instrumente
eth1:
adrese:
- 172.22.10.1/27
Meci:
adresa maca: 6a:6d:d1:0a:de:10
servere de nume:
adrese:
- 172.22.10.2
căutare:
- kprd2
nume-set: eth1
# Interfață bază de date
eth2:
adrese:
- 172.22.20.1/27
Meci:
macadress: aa:89:70:41:ed:22
nume-set: eth2
# Rețeaua VRack
eth3:
adrese:
- 172.30.0.1/31
Meci:
adresa maca: ZZ:ZZ:ZZ:ZZ:ZZ:ZZ
rute:
# Rețeaua de instrumente la kprd1
- la: 172.21.10.0/27
prin: 172.30.0.1
# Rețeaua WebPrd la kprd1
- la: 172.21.20.0/27
prin: 172.30.0.1
# Rețeaua WebHml la kprd1
- la: 172.21.30.0/27
prin: 172.30.0.1
# Rețeaua WebServer la kprd1
- la: 172.21.50.0/27
prin: 172.30.0.1
# VRack <-> VRack
- la: 172.30.0.0
prin: 172.30.0.1
nume-set: eth3
Interfețe curente PRD2FWL100:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue stare UNKNOWN grup implicit qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 ::1/128 scope host
valid_lft pentru totdeauna preferred_lft pentru totdeauna
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/eter FE:FE:FE:FE:FE brd ff:ff:ff:ff:ff:ff
inet 7.7.7.7/32 domeniu global eth0
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::ff:fe92:ec0/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 6a:6d:d1:0a:de:10 brd ff:ff:ff:ff:ff:ff
inet 172.22.10.1/27 brd 172.22.10.31 scope global eth1
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::686d:d1ff:fe0a:de10/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP grup implicit qlen 1000
link/ether aa:89:70:41:ed:22 brd ff:ff:ff:ff:ff:ff
inet 172.22.20.1/27 brd 172.22.20.31 scope global eth2
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::a889:70ff:fe41:ed22/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP grup implicit qlen 1000
link/eter d6:9f:c5:e4:93:9d brd ff:ff:ff:ff:ff:ff
inet 172.30.0.1/31 domeniul de aplicare global eth3
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::d49f:c5ff:fee4:939d/64 scope link
valid_lft pentru totdeauna preferred_lft pentru totdeauna
6: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN grup implicit qlen 100
link/niciuna
inet 10.10.2.1/29 brd 10.10.2.7 scope global tun0
valid_lft pentru totdeauna preferred_lft pentru totdeauna
inet6 fe80::d63:c98b:2e1:ad3d/64 scope link stabil-privacy
valid_lft pentru totdeauna preferred_lft pentru totdeauna
Tabel de rutare PRD2FWL100
Notă: Adresele externe au fost ascunse
user@prd2fwl100:~$ ruta IP
implicit prin 144.217.125.8 dev eth0 proto static
10.10.2.0/29 dev tun0 proto kernel scope link src 10.10.2.1
9.9.9.9 prin 8.8.8.8 dev eth0 proto static
172.21.10.0/27 prin 172.30.0.1 dev eth3 proto static
172.21.20.0/27 prin 172.30.0.1 dev eth3 proto static
172.21.30.0/27 prin 172.30.0.1 dev eth3 proto static
172.21.50.0/27 prin 172.30.0.1 dev eth3 proto static
172.22.10.0/27 dev eth1 proto kernel scope link src 172.22.10.1
172.22.20.0/27 dev eth2 proto kernel scope link src 172.22.20.1
172.30.0.0 prin 172.30.0.1 dev eth3 proto static
user@prd2fwl100:~$ ip route show table local
difuzare 10.10.2.0 dev tun0 proto kernel scope link src 10.10.2.1
local 10.10.2.1 dev tun0 proto kernel scope host src 10.10.2.1
difuzare 10.10.2.7 dev tun0 proto kernel scope link src 10.10.2.1
difuzare 127.0.0.0 dev la proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
difuzare 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
local 8.8.8.8 dev eth0 proto kernel scope host src 8.8.8.8
difuzare 172.22.10.0 dev eth1 proto kernel scope link src 172.22.10.1
local 172.22.10.1 dev eth1 proto nucleu domeniu gazdă src 172.22.10.1
difuzare 172.22.10.31 dev eth1 proto kernel scope link src 172.22.10.1
difuzare 172.22.20.0 dev eth2 proto kernel scope link src 172.22.20.1
local 172.22.20.1 dev eth2 proto nucleu domeniu gazdă src 172.22.20.1
difuzare 172.22.20.31 dev eth2 proto kernel scope link src 172.22.20.1
local 172.30.0.1 dev eth3 proto nucleu domeniu gazdă src 172.30.0.1
PRD1FRM206 Configurare rețea:
# Acest fișier este generat din informațiile furnizate de sursa de date. Schimbări
# nu va persista la o repornire a instanței. Pentru a dezactiva cloud-init
# capabilități de configurare a rețelei, scrieți un fișier
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg cu următoarele:
# network: {config: disabled}
reţea:
versiunea: 2
ethernet:
eth0:
adrese:
- 172.21.10.7/27
gateway4: 172.21.10.1
Meci:
macadress: ca:7a:03:34:a0:43
servere de nume:
adrese:
- 172.21.10.2
căutare:
- kprd1
nume-setare: eth0
PRD2FRM201 Configurare rețea:
PRD2FRM201 este o gazdă LXC cu următoarea configurație la ProxMox:
- IP 172.22.10.2/27
- Gateway 172.22.10.1
- Podul vmbr1
Teste de comunicare:
De la PRD2FWL100, pot face ping toate hop înainte de PRD1FRM206:
user@prd2fwl100:~$ ping 172.30.0.0 -c1
PING 172.30.0.0 (172.30.0.0) 56(84) octeți de date.
64 de octeți de la 172.30.0.0: icmp_seq=1 ttl=64 time=0,671 ms
--- 172.30.0.0 statistici ping ---
1 pachet transmis, 1 primit, 0% pierdere de pachete, timp 0 ms
rtt min/avg/max/mdev = 0,671/0,671/0,671/0,000 ms
user@prd2fwl100:~$ ping 172.21.10.1 -c1
PING 172.21.10.1 (172.21.10.1) 56(84) octeți de date.
64 de octeți din 172.21.10.1: icmp_seq=1 ttl=64 time=0,822 ms
--- 172.21.10.1 statistici ping ---
1 pachet transmis, 1 primit, 0% pierdere de pachete, timp 0 ms
rtt min/avg/max/mdev = 0,822/0,822/0,822/0,000 ms
Dar nu pot da ping sau arping PRD1FRM206:
user@prd2fwl100:~$ ping 172.21.10.7 -c1
PING 172.21.10.7 (172.21.10.7) 56(84) octeți de date.
De la 172.30.0.1 icmp_seq=1 Gazdă destinație inaccesabilă
--- 172.21.10.7 statistici ping ---
1 pachet transmis, 0 primit, +1 erori, 100% pierdere pachet, timp 0 ms
user@prd2fwl100:~$ arping 172.21.10.7 -c1
ARPING 172.21.10.7 din 172.30.0.1 eth3
A trimis 1 sonde (1 difuzare(e))
A primit 0 răspuns(uri)
În continuare, voi încerca să ping toate IP-urile de la PRD2FRM201 la PRD1FRM206:
user@PRD2FRM201:~$ sudo ping 172.22.10.1 -c1
PING 172.22.10.1 (172.22.10.1) 56(84) octeți de date.
64 de octeți din 172.22.10.1: icmp_seq=1 ttl=64 time=0,134 ms
--- 172.22.10.1 statistici ping ---
1 pachet transmis, 1 primit, 0% pierdere de pachete, timp 0 ms
rtt min/avg/max/mdev = 0,134/0,134/0,134/0,000 ms
utilizator@PRD2FRM201:~$ sudo ping 172.30.0.1 -c1
PING 172.30.0.1 (172.30.0.1) 56(84) octeți de date.
64 de octeți de la 172.30.0.1: icmp_seq=1 ttl=64 time=0,159 ms
--- 172.30.0.1 statistici ping ---
1 pachet transmis, 1 primit, 0% pierdere de pachete, timp 0 ms
rtt min/avg/max/mdev = 0,159/0,159/0,159/0,000 ms
De asemenea, există un loc în care nu pot merge mai departe:
utilizator@PRD2FRM201:~$ sudo ping 172.30.0.0 -c1
PING 172.30.0.0 (172.30.0.0) 56(84) octeți de date.
--- 172.30.0.0 statistici ping ---
1 pachet transmis, 0 primit, 100% pierdere de pachete, timp 0 ms
user@PRD2FRM201:~$ sudo arping 172.30.0.0 -c1
ARPING 172.30.0.0 din 172.22.10.2 eth0
A trimis 1 sonde (1 difuzare(e))
A primit 0 răspuns(uri)
Ce trebuie să fac pentru a putea rezolva această problemă?
