Re: Gateway between CIP and VIP on LVS-NAT.

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: Gateway between CIP and VIP on LVS-NAT.
From: Joseph Mack <mack.joseph@xxxxxxx>
Date: Thu, 28 Feb 2002 06:11:42 -0500
"Carlos J. Ramos" wrote:

Summarising here: you have a one-net LVS-NAT setup which works perfectly - ie
you can get to the LVS'ed services from the gateway just fine and you see the
connections being sent to the various realservers.

But it doesn't work from a machine outside the gateway.

Do you have filter rules on the gateway, 
can you sent packets between the director and the remote machine?


> As I said, yes i can do this.
> The problem is that there is a gateway between the CIP and VIP,
> CIP( it is not in the same network that VIP(,
> but the CIP needs to go through a gateway ( &,
> and this gateway it is in the same network of the VIP.
> So using the information of this URL ...O/LVS-HOWTO-12.html#ss12.12 , I
> can do request from the gateway (acting as the CIP) to the VIP. But not
> from the computer that has to be the CIP: doctor, in the other side of
> the gateway...
> Doctor-------------------Gateway----------------Director
> eth1  eth0   public IP       eth0   public IP
> eth2  public IP          eth1     eth0:1
>                           eth1:0    eth1
>                                                      |
>        /----------------------|-----------------|----/
>       |                       |                 |
> RealServer1            RealServer2             Realserver3
> eth0 eth0  eth0
> Thanks a lot.
> --
> --------------------------------------------------------
> Carlos J. Ramos                 Genasys II Spain, S.A.U.
> Administrador de Sistemas       Ventura de la Vega 5
> Tel:+34-91-3649100 ext 170      28014 Madrid
> Fax:+34-91-3649119
>         Spain
> Email:  cjramos@xxxxxxxxxx
> --------------------------------------------------------
> _______________________________________________
> mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to

Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center, 
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA

<Prev in Thread] Current Thread [Next in Thread>