[SunHELP] routing?

[sunhelp at sunhelp.org]

Ascii Picture:

10.0.0.1 -----\
	      |
   10.0.0.10 -|-- [router] --- [Firewall] --- (10.0.1.20)
	      |
10.0.0.2 -----/

So basically, .1 and .2 are physical machines, and .10 is an ip address
which goes between the 2 physical machines depending on which has been
assigned Primary server.

The .20 machine needs to rmsh over to the .10 (floating ip) to pick up
files, which it rcps back to 10.0.1.20.

However, the problem arises when it goes to rcp back and the firewall will
not allow either .1 or .2 back through, but only the floating ip.

So, I want to force any traffic going to 10.0.1.20 to set its origin ip to
the floating ip 10.0.0.10. But it still needs to go out the default route
or a new route with the same default routers ip.



On Thu, 26 Jul 2001, James Fogg wrote:

> On Thu, 26 Jul 2001, THOU SPAKE:
> > Hey... What I have are 2 machines, each machine has it's own static ip
> > obviously, then there is a floating ip which goes between the 2 of them.
> >
> > So say 10.0.0.1, 10.0.0.2, and 10.0.0.10. .10 being the floating ip. And
> > the 10.0.0.10 address is bound as a virtual ip, so hme0:1 type of thing.
> >
> > There is one router to take you off the subnet, which is 10.0.0.100.
> >
> >
> > There is a machine 10.0.1.20 which I need to rcp files to, however only
> > the machine with the floating IP needs to rcp the files to the 10.0.1.20
> > machine. And when I rcp files to 10.0.1.20 I want the origin IP to be
> > 10.0.0.10, which is the floating IP.
> >
> > How can I do this without effecting how the machine sends or does any of
> > its other work.
>
> First, a picture (ascii text is preferred) of the network would help.
>
> Your description of the problem is rather unclear. I don't know what a "virtual
> IP address" is (do you mean its an alias IP - as in a second ip address on
> the port?). And if its an alias IP, why are you using it. What purpose does an
> alias ip in the same subnet serve?
>
> Since the alias IP and the primary IP are both in the same net, you have no way
> to make the alias distinctive from a "routing" perspective. This is actually
> not a "routing" question.
>
> Most O/S's, in your situation, would use the lowest IP address available in a
> subnet as the source address. If that is what is happening you can swap you
> alias ip and primary ip.
>
> But again, if I understand what you've written, *why* do you have a primary and
> alias IP address in the same subnet?