[prev in list] [next in list] [prev in thread] [next in thread]
List: ietf-vrrp
Subject: Re: RE: [VRRP] Vrrp Implementation issue over LinuxIp
From: "MUNEER CH" <muneerch () rediffmail ! com>
Date: 2005-10-31 6:20:29
Message-ID: 20051031062029.10608.qmail () webmail49 ! rediffmail ! com
[Download RAW message or body]
This is a multipart mime message
[Attachment #2 (multipart/alternative)]
This is a multipart mime message
Hi,
I was trying to implement VRRP on linux IP. I have applied a kernel patch to alter \
the real mac address with the virtual mac address when a host requests for arp \
resolve for VRIP. But the problem I encountered is, a data packet with this faked mac \
is getting dropped by kernel. Is there any way to make a kernel to accept a packet \
with virtual mac?
Thanks in advance
Regards
Muneer CH
On Wed, 19 Oct 2005 Don Provan wrote :
> Hope the list doesn't mind this Linux specific conversation....
>
> > We are planning to run VRRP over a Logical Interface
> > created in Linux
> > IP.(similar to eth0)
>
> I'm not sure what this means. I run VRRP over an ethernet
> interface. Is what you're doing significantly different?
>
> > How we can I prevent that Linux Interface from sending arp
> > reply when it is in Backup State?
>
> Well, I think you're asking the wrong question. The real
> question is how to you make the interface send an ARP reply
> when it's supposed to. I always find it fascinating that
> there's really no good reason for the non-owner system to
> know the VR IP address at all except for ARP, so you're
> best off if you can avoid attaching it to an interface
> to begin with instead of attaching it and trying to
> suppress the results.
>
> I manipulate the ARP table directly, although in
> the 2.4 kernel I had to extend to kernel's ARP code to
> allow setting an ARP entry with a specific MAC address.
> (I don't know if 2.6 supports that out of the box.)
>
> > Also,How can we to associate various virtual MacAddresses
> > to that Linux Interface?
>
> You just add them as if they were multicast MAC addresses
> you want your hardware to accept for delivery
> Remember, the kernel should always use the natural MAC
> address for all packets it sends. Only the VRRP packets
> that your VRRP app generates should have the VR MAC
> address as the source.
>
> -don
> _______________________________________________
> vrrp mailing list
> vrrp@ietf.org
> https://www1.ietf.org/mailman/listinfo/vrrp
[Attachment #5 (text/html)]
<P>
<BR>
<BR>
Hi,<BR>
I was trying to implement VRRP on linux IP. I have applied a kernel patch to \
alter the real mac address with the virtual mac address when a host requests for arp \
resolve for VRIP.<BR> But the problem I encountered is, a data packet with this faked \
mac is getting dropped by kernel. Is there any way to make a kernel to accept a \
packet with virtual mac?<BR> <BR>
Thanks in advance<BR>
Regards<BR>
Muneer CH<BR>
<BR>
On Wed, 19 Oct 2005 Don Provan wrote :<BR>
>Hope the list doesn't mind this Linux specific conversation....<BR>
><BR>
> > We are planning to run VRRP over a Logical Interface<BR>
> > created in Linux<BR>
> > IP.(similar to eth0)<BR>
><BR>
>I'm not sure what this means. I run VRRP over an ethernet<BR>
>interface. Is what you're doing significantly different?<BR>
><BR>
> > How we can I prevent that Linux Interface from sending arp<BR>
> > reply when it is in Backup State?<BR>
><BR>
>Well, I think you're asking the wrong question. The real<BR>
>question is how to you make the interface send an ARP reply<BR>
>when it's supposed to. I always find it fascinating that<BR>
>there's really no good reason for the non-owner system to<BR>
>know the VR IP address at all except for ARP, so you're<BR>
>best off if you can avoid attaching it to an interface<BR>
>to begin with instead of attaching it and trying to<BR>
>suppress the results.<BR>
><BR>
>I manipulate the ARP table directly, although in<BR>
>the 2.4 kernel I had to extend to kernel's ARP code to<BR>
>allow setting an ARP entry with a specific MAC address.<BR>
>(I don't know if 2.6 supports that out of the box.)<BR>
><BR>
> > Also,How can we to associate various virtual MacAddresses<BR>
> > to that Linux Interface?<BR>
><BR>
>You just add them as if they were multicast MAC addresses<BR>
>you want your hardware to accept for delivery<BR>
>Remember, the kernel should always use the natural MAC<BR>
>address for all packets it sends. Only the VRRP packets<BR>
>that your VRRP app generates should have the VR MAC<BR>
>address as the source.<BR>
><BR>
>-don<BR>
>_______________________________________________<BR>
>vrrp mailing list<BR>
>vrrp@ietf.org<BR>
>https://www1.ietf.org/mailman/listinfo/vrrp<BR>
</P>
<br><br>
<a href="http://adworks.rediff.com/cgi-bin/AdWorks/sigclick.cgi/www.rediff.com/signature-home.htm/1507191490@Middle5?PARTNER=3"><IMG \
SRC="http://adworks.rediff.com/cgi-bin/AdWorks/sigimpress.cgi/www.rediff.com/signature-home.htm/1963059423@Middle5?OAS_query=null&PARTNER=3" \
BORDER=0 VSPACE=0 HSPACE=0></a>
_______________________________________________
vrrp mailing list
vrrp@ietf.org
https://www1.ietf.org/mailman/listinfo/vrrp
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic