[Users] Re: Re: IPsec packets from VEs sent to wrong interface
Denis V. Lunev
den at parallels.com
Tue Jun 24 04:28:10 EDT 2008
On Tue, 2008-06-24 at 09:39 +0200, Marcus Better wrote:
> Hi,
>
> Denis V. Lunev wrote:
> > I think the problem is in you routing setup.
>
> I've checked but don't see anything suspicious. The routing setup is very simple.
>
> [host:~]# ip route
> 172.16.2.2 dev eth0 scope link src 172.16.1.1
> 172.16.1.101 dev venet0 scope link
> x.y.z.0/25 dev eth0 proto kernel scope link src x.y.z.w
> 172.16.1.0/24 dev br0 proto kernel scope link src 172.16.1.1
> default via x.y.z.1 dev eth0
>
> [host:~]# ip route get 172.16.2.2
> 172.16.2.2 dev eth0 src 172.16.1.1
> cache expires 21334342sec mtu 1500 advmss 1460 hoplimit 64
you are doing a wrong thing. You should ask
ip route get ADDRESS from ADDRESS iif STRING
with both from and iif specified to get a clue.
Regards,
Den
More information about the Users
mailing list