Solved

linux request time out to local interface

Posted on 2008-11-02
7
283 Views
Last Modified: 2013-12-23
local interface, 192.168.10.10

virtual network 1, 192.168.20.0/24
virtual network 2, 192.168.30.0/24
virtual network 3, 192.168.40.0/24
virtual network 4, 192.168.50.0/24
virtual network 5, 192.168.60.0/24

from any ip from range of 192.168.10.0/24 i can ping to 192.168.10.10 without any problem

but from any virtual network ranges, i get request time out often to 192.168.10.10

any idea what the problem might be?
0
Comment
Question by:ammadeyy2020
  • 3
  • 2
  • 2
7 Comments
 
LVL 16

Expert Comment

by:ai_ja_nai
ID: 22860873
are you using something like xen? Have you configured the bridge correctly? I belive your VIF are natted and can't see the external network. Provide more details on system, please
0
 

Author Comment

by:ammadeyy2020
ID: 22861214
im using a cisco router routing and L2 cisco switch for vlan

LAN1, Firewall, 192.168.10.0/24
LAN2, DMZ        192.168.20.0/24
LAN3                 192.168.30.0/24

like that i have 8 vlans

instead of linux firewall, if i use microsoft ISA, i dont have any time out issues
but this linux box givin time out
0
 
LVL 16

Expert Comment

by:ai_ja_nai
ID: 22861932
what are your iptables rules?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:ammadeyy2020
ID: 22861949
i tested this way

from PC1 192.168.50.50/24   i get time out to 192.168.10.10

at the same time i ping from PC2 192.168.20.20 to 192.168.10.10, i get time outs

meaning PC1 and PC2 does get time outs, but time varies
if PC1 get time outs, PC2 dont
if PC2 get time outs, PC1 doesnt
0
 
LVL 61

Expert Comment

by:gheist
ID: 22867282
Use traceroute. Whan you get timeout request actually left your machine so it disappeared somewhere else.
0
 

Author Comment

by:ammadeyy2020
ID: 22867609
192.168.50.50, gateway, 192.168.50.1

192.168.50.50 is vlan sub interface on router
192.168.50.80 is vlan on linux, (from my knowledge only way to add different network ranges to linux is by adding vlan)

if i tracert to internet, it goes to
192.168.50.1
192.168.50.80
then it goes to internet

also i found that to tracert between local network eg between 192.168.50.1 & 192.168.50.80 it slow, but when it goes to internet its fast
0
 
LVL 61

Accepted Solution

by:
gheist earned 500 total points
ID: 22867743
You are missing reverse DNS records for your hosts. That makes tracert slow. You have to set up in-addr.arpa zones for your private subnets, or live with 5-30s timeout for your internal tracert without -n parameter.
No low-lever issue at all. Could be ISA does that automatically...
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now