Re: VMAC problems

Hi,

Sorry for the laaaaate reply, but I've been working on other projects
and had no time for this one.
I'm still unable to get it to work. The mac address is still the one of
the nic.
I should now deploy a centos 7 and try there, maybe in two weeks I can
get to it.
This is my setup:

Two hosts - haproxy01, ens160=192.168.110.100   00:50:56:01:04:15
                                       vrrp.50 (master)
=192.168.110.105  00:00:5e:00:01:32
                                        vrrp.51 (slave)

                    haproxy02, ens160=192.168.110.110   00:50:56:01:04:16
                                       vrrp.50 (slave)
                                        vrrp.51 (master) =
192.168.110.106    00:00:5e:00:01:33
kernel: 3.14.7-200.fc20.x86_64
keepalived: keepalived.x86_64-1.2.13-1.fc20                           
           


if I ping to the vip of the master

192.168.110.110 > 192.168.110.105: ICMP echo request, id 28770, seq 4,
length 64
10:50:53.998534 00:50:56:01:04:15 > 00:50:56:01:04:16, ethertype IPv4
(0x0800), length 98: (tos 0x0, ttl 64, id 61930, offset 0, flags [none],
proto ICMP (1), length 84)

Using promiscuos mode didn't make the trick:

2: ens160: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP group default qlen 1000

13:57:05.521292 00:50:56:01:04:15 > 00:50:56:01:04:16, ethertype IPv4
(0x0800), length 98: (tos 0x0, ttl 64, id 61945, offset 0, flags [none],
proto ICMP (1), length 84)

Thanks in advance


El 31/07/14 a las 20:45, Jon Foster escibió:
> ITS WORKING!!!
>
> This is what I needed to do:
>
> sysctl -w net.ipv4.conf.all.rp_filter=0
> sysctl -w net.ipv4.conf.eth1.rp_filter=0
> sysctl -w net.ipv4.conf.vrrp/20.rp_filter=0
> sysctl -w net.ipv4.conf.all.arp_ignore=1
>
> "eth1" was my physical interface. "vrrp/20" (vrrp.20) was my virtual
> interface. I had to make the rp_filter change at the "all" level
> before it had any impact on any of the other interfaces. Apparently
> they are doing something like taking the maximum value of "all" and
> the interface's value. I'm not sure that the rp_filter had to be '0'
> at the physical interface since the virtual IP address falls within
> the range that is attached to the physical interface. Since all of the
> interfaces were being created with rp_filter=1, because
> net.ipv4.conf.default.rp_filter=1, I had to also set it to 0 on the
> virtual interface.
>
> "arp_ignore" needs to be set to 1 on the physical and virtual
> interfaces, or on all, in order to make sure the virtual mac address
> gets sent. This was especially true in my case because I am running
> multiple VMACs on a single physical NIC. If you only had a single VIP
> then arp_ignore only needs to be set on the physical interface.
>
> I did not need any of the other sysctls that were described in
> "doc/NOTE_vrrp_vmac.txt".
>
> On a Debian test system I also had to enable promiscuous mode on the
> physical adapter. This was not necessary on the Gentoo system ... but
> I think that may be a driver / hardware difference. If it doesn't work
> throwing the physical adapter into promiscuous mode may get things going.
>
> I was also not able to get the macvlan driver to work in all cases via
> WiFi. But I don't believe this has much impact on this audience.
>
> THX - Jon
>
>
> Jon Foster wrote:
>> "rp_filter" didn't help me either. But then logging martians didn't log
>> anything. We are setting up a Gentoo system with kernel v3.12.21 to see
>> if it improves things. I will post my results here.
>>
>> THX - Jon
>>
>> Juan Pablo Lorier wrote:
>>   
>>> Hi Ranjith,
>>>
>>> In my case, rp_filter does not change anything. I'm going to try it on
>>> centos 7 now that it's out, but this can take several days before I can
>>> set the vm for testing.
>>> What I can tell is that I either get the reply with the nic mac address
>>> or don't get any reply (all.arp_ignore=1) but I can see the who has
>>> comming from the net by using tcpdump (with all.arp_ignore=0):
>>>
>>> [...]
>>>   
>>>     
>>
>>   
>
> -- 
> Sent from my Debian Linux laptop -- http://www.debian.org/intro/about
>
> Jon Foster
> JF Possibilities, Inc.
> [email protected]
> 541-410-2760
> Making computers work for you!

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel