[Users] Re: Re: IPsec packets from VEs sent to wrong interface

Denis V. Lunev den at parallels.com
Tue Jun 24 04:28:10 EDT 2008


On Tue, 2008-06-24 at 09:39 +0200, Marcus Better wrote:
> Hi,
> 
> Denis V. Lunev wrote:
> > I think the problem is in you routing setup.
> 
> I've checked but don't see anything suspicious. The routing setup is very simple. 
> 
> [host:~]# ip route
> 172.16.2.2 dev eth0  scope link  src 172.16.1.1
> 172.16.1.101 dev venet0  scope link
> x.y.z.0/25 dev eth0  proto kernel  scope link  src x.y.z.w
> 172.16.1.0/24 dev br0  proto kernel  scope link  src 172.16.1.1
> default via x.y.z.1 dev eth0
> 
> [host:~]# ip route get 172.16.2.2
> 172.16.2.2 dev eth0  src 172.16.1.1
>     cache  expires 21334342sec mtu 1500 advmss 1460 hoplimit 64

you are doing a wrong thing. You should ask
 ip route get ADDRESS from ADDRESS iif STRING
with both from and iif specified to get a clue.

Regards,
	Den



More information about the Users mailing list