Re: NFS between private subnets


Subject: Re: NFS between private subnets
From: Ken Schweigert (ken@byte-productions.com)
Date: Mon Feb 11 2002 - 13:05:55 MST


John,

Are you able to communicate between the subnets? ping,traceroute?

> 192.168.1.0 * 255.255.255.255 U 0 0 0 eth0

With the netmask having 4 octets of 255 for your 192.168.1.0 subnet
would specify a single IP. I believe it should be 255.255.255.0

That was the first thing that jumped out at me.

HTH

-- 
-Ken Schweigert, Aspiring Network Administrator
Byte Productions, LLC
http://www.byte-productions.com

On Mon, Feb 11, 2002 at 12:05:47PM +0100, John Duarte wrote: > I am trying to allow NFS access between two private subnets. The > masquerading appears to be causing me some trouble. Here's my set up. > > router > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use Iface > 192.168.1.3 * 255.255.255.255 UH 0 0 0 eth0 > 192.168.2.3 * 255.255.255.255 UH 0 0 0 eth1 > 192.168.2.0 * 255.255.255.0 U 0 0 0 eth1 > 192.168.1.0 * 255.255.255.255 U 0 0 0 eth0 > 127.0.0.0 * 255.0.0.0 U 0 0 > 0 lo > > #ipchains -L > Chain input (policy ACCEPT): > Chain forward (policy ACCEPT): > target prot opt source destination ports > MASQ all ------ 192.168.1.0/24 192.168.2.0/24 n/a > MASQ all ------ 192.168.2.0/24 192.168.1.0/24 n/a > ACCEPT all ------ 192.168.1.0/24 192.168.2.0/24 n/a > ACCEPT all ------ 192.168.2.0/24 192.168.1.0/24 n/a > Chain output (policy ACCEPT): > > I've inserted the ip_masq_ftp module to allow ftp to get around the > masquerading problem. Is there a similar fix for NFS? > > Thanks > > --------------------------- > John Duarte Key Lithograph, 2050 NW Vaughn St., Portland, OR 97209 > Ph: 503-222-9191 Fx: 503-248-9974 > e-mail: john@keylitho.com > --------------------------- > > >



This archive was generated by hypermail 2a24 : Mon Feb 11 2002 - 13:21:06 MST