00:01 | <JayPerez1> What's the theory with ipforwarding relative to what we're trying to implement in my situation >
| |
00:05 | <booghotfoot> it is the same thing as NAT (network address translation)--just another name for it
| |
00:05 | do you want a brief explanation of NAT?
| |
00:06 | <JayPerez1> Thanks. I just did the command to check the status and it came back with a '0' Tried using the command line they provide to set it to '1' on the fly but still showing a '0'
| |
00:06 | <booghotfoot> hmmm
| |
00:07 | <JayPerez1> Yes, if you don't mind. I have a limited understanding of it but it may be inaccurate.
| |
00:08 | <booghotfoot> ok, your server has two nics, but only one of them is connected to the modem. That nic is the only one that can connect to the Internet
| |
00:08 | that nic has an external address if it is directly connected to the modem. Do you know its address?
| |
00:09 | it is a public "routable" address
| |
00:10 | <JayPerez1> Got it to set to a '1' !!!
| |
00:10 | <booghotfoot> anyway, the second nic is what is called the internal or inside nic. it has a private network address
| |
00:10 | cool
| |
00:12 | <JayPerez1> I'm going to run downstairs and try my winbox. Do I need to do any kind of restart on the server or on my winbox to get it to recognize the change ?
| |
00:12 | <booghotfoot> no. see if a winbox can now ping a site on the internet, ping www.google.com
| |
00:13 | if this works, you should set up a firewall on the ubuntu box, so you can limit what traffic can come in.
| |
00:14 | see http://ubuntulinuxhowto.blogspot.com/2006/06/setup-your-computer-to-be-router.html
| |
00:14 | there is an easier way to do all of this too.
| |
00:14 | <JayPerez1> No joy getting a web browser to google but will go try to ping it.
| |
00:15 | <booghotfoot> 1. set up your cable router back on the network.
| |
00:15 | 2. disable DHCP on the cable router
| |
00:16 | 3. Set the private ip address on the cable router to be 192.168.0.254 (or whatever scheme you use)
| |
00:17 | <JayPerez1> I'm listening ...
| |
00:17 | <booghotfoot> cancel 3.
| |
00:18 | <JayPerez1> No reply pinging google. ALSO no reply pinging 192.168.0.1 gateway address ...
| |
00:18 | I DID get reply pinging the server's IP 192.168.0.254
| |
00:19 | <booghotfoot> here is what i reccommend. Let your router do NAT for you and serve as the gateway for all devices
| |
00:19 | that is interesting. so, which device is 254
| |
00:19 | <JayPerez1> Including the Edubuntu thin-clients ?
| |
00:19 | <booghotfoot> yes
| |
00:20 | <JayPerez1> 254 is the IP of the server on the inside NIC, I think
| |
00:20 | <booghotfoot> at work, i have an edubuntu server doinng ltsp, with thin clients. my server hands out addresses, dns and gateway infomration, but does not do the NAT.
| |
00:21 | The nat is handled by a router.
| |
00:22 | <JayPerez1> I started down that path but then have to figure out how to reconfigure the server not to do DHCP and to tell the thin-clients to get their stuff off the router. from your last note I may not have had to do all that ?
| |
00:22 | <booghotfoot> So, the server hands out the address, and the dhcpd.conf file tells computers where the gateway and dns is obtained.
| |
00:22 | <JayPerez1> I'm confusing NAT with DHCP.
| |
00:23 | Is that the gateway and dns of my ISP ???
| |
00:23 | <booghotfoot> dhcp does 3 things. it gives your computer an address. tells it which dns server to use when lookingn up names, and tells it where to go to get out to the internet (gateway)
| |
00:23 | <JayPerez1> I didn't realize that
| |
00:24 | <booghotfoot> the gateway does the NAT --transfers the client's request to the internet
| |
00:24 | and brings a response back to the client. the client is hidden from the internet
| |
00:25 | <JayPerez1> I think I understand that now but didn't know the DHCP was doing all three things.
| |
00:25 | <booghotfoot> so, it sounds like your dhcp server is telling your clients that the gateway is 192.168.0.1, but the 2nd nic on your server, which is acting as the gateway device has an address of 192.168.0.254
| |
00:25 | <JayPerez1> A Haaa !
| |
00:26 | <booghotfoot> and it is telling them that the dns server is 192.168.0.1 too. So, they cannot look up addresses
| |
00:27 | <JayPerez1> The ifconfig command never mentions 'gateway' ... where do I see that on the server ?
| |
00:27 | <booghotfoot> can you open the network gui under the system/administration menu?
| |
00:28 | the server's gateway is the first nic. You need to look a the contents of /etc/dhcpd.conf
| |
00:28 | <JayPerez1> I think I see it now. It's called 'inet addr' and is set to 254 ...
| |
00:29 | <booghotfoot> that is the network address of the second nic
| |
00:30 | try cat /etc/dhcpd.conf | more this will display the config file for dhcp. hit the space bar to advance the screen
| |
00:30 | <JayPerez1> Unfortunately my wife was logged in when I sat down and her account does not have admin privileges so I can't get to that app of the menus
| |
00:30 | <booghotfoot> go to terminal window and use above command
| |
00:31 | <JayPerez1> Did that and it says no such command
| |
00:31 | I mean 'no such file or directory'
| |
00:32 | <booghotfoot> sudo cat /etc/dhcpd.conf | more
| |
00:32 | <JayPerez1> I really appreciate your help but I don't want to keep you up all night.
| |
00:33 | <booghotfoot> I have been in your shoes on this forum--just paying it forward
| |
00:35 | <JayPerez1> Thanks.
| |
00:36 | Still reports no file so I went into the /etc directory and can see the file sitting there. Did a cat command right inside the directory and still says no such file.
| |
00:36 | <booghotfoot> it might be dhcpd.config
| |
00:36 | <JayPerez1> No, you had it right. It's owned by root.
| |
00:36 | <booghotfoot> it's a permissions thing. type ls -la dhcpd*
| |
00:36 | <JayPerez1> more dhcpd.conf
| |
00:37 | Opps. meant to type that in the terminal window
| |
00:37 | <booghotfoot> are you open to letting your router do the nat /gateway services for you?
| |
00:38 | <JayPerez1> Yes, I started to go that route but just don't have the knowledge to make it happen.
| |
00:39 | <booghotfoot> i think it owuld be easier in this case, and probably more secure
| |
00:39 | <JayPerez1> I've actually had this whole thing working several different ways but none of them allowed me to have all my PCs and thin-clients on a single subnet.
| |
00:40 | <booghotfoot> we can do it if the router is doing the nat.
| |
00:41 | all pcs, thin clients, and server on same network 192.168.0.x
| |
00:42 | server has address of 192.168.0.254
| |
00:42 | router has address of 192.168.0.1
| |
00:42 | server tells clients that their gateway and dns is 192.168.0.1
| |
00:43 | router wan port plugged into modem
| |
00:43 | enable nat on router (probably already done)
| |
00:43 | wan side of router plugged into your switch
| |
00:43 | <JayPerez1> Boy I hope I can save this chat !!!
| |
00:43 | <booghotfoot> make sure router is NOT doing dhcp
| |
00:44 | Ctrl-A to highligh it all and drop it into gedit
| |
00:45 | your windnows boxes will get an address from ubuntu server, they will be told that the router is their gateway and dns server.
| |
00:45 | <JayPerez1> So where/how do I tell server to use the router for NAT ?
| |
00:46 | <booghotfoot> disable the 1st nic on the server. Set the address statically on the second nic. set it to 192.168.0.254 set the subnet to 255.255.255.0 set the gateway to 192.168.0.1
| |
00:46 | do this in system/administration/network
| |
00:48 | make sure the second nic is plugged into the switch
| |
00:48 | error above --make sure lan side of router is plugged into switch, not wan side.
| |
00:51 | <JayPerez1> On a personal note, I live in Rochester, NY. Worked for Kodak for 30 years but they have downsized so much they've almost disappeared. They've torn down 100 buildings over the last few years and they're imploding two more in the morning. That will be five they've blown up this year. Pretty impressive events so I'll be going to watch with my brother.
| |
00:51 | <booghotfoot> better get some sleep then. Sounds like a lot of history going up in dust.
| |
00:52 | I live in Grand Rapids, MN - about 125 south of canada
| |
00:52 | <JayPerez1> Can I eventually remove the one NIC from the server ?
| |
00:52 | <booghotfoot> yes.
| |
00:53 | With this setup, you need only one, since your have a router available. Ubuntu does not have a firewall built in, and you need one desparately if ubuntu is going to do the routing.
| |
00:53 | <JayPerez1> A lot of our colder winter days seem to come from your neck of the woods ;-)
| |
00:53 | <booghotfoot> but since your router will handle this, you do not need it on ubuntu.
| |
00:54 | <JayPerez1> Good. I understand.
| |
00:55 | <booghotfoot> good luck. draw a picture of what you want to configure. it will be a good resource for when want to change something.
| |
00:55 | <JayPerez1> i have a pretty good diagram of the two ways I've wired everything and it does help.
| |
00:56 | <booghotfoot> I hope this works out well. drop back here later this weekend if you still have trouble, and I will write up something more clearly with illustrations that you can download.
| |
00:56 | <JayPerez1> Regarding the wiring, cable modem to router, router to switch, server to switch, all PCs to switch ???
| |
00:57 | <booghotfoot> yup
| |
00:57 | <JayPerez1> Thanks booghotfoot. I learned a lot tonight. You write very clearly.
| |
00:58 | <booghotfoot> this means that everything goes to the switch, and the switch to the router, and the router to the web. The router will keep track of who requested a file, and get it back to the correct host.
| |
00:58 | <JayPerez1> Gotta do a Cntl-A now !!!
| |
00:58 | <booghotfoot> good nite. glad to be of assitance.
| |
00:59 | <JayPerez1> I had it setup that way once but didn't know how to configure the server. Will try it again with your instructions.
| |
00:59 | Good night.
| |
00:59 | <booghotfoot> if you are using Konversation for an irc client, you can open a log window, and save this session to a file
| |
00:59 | bye
| |
00:59 | booghotfoot has left #ltsp | |
01:10 | spectra has quit IRC | |
01:42 | cyberorg_ is now known as cyberorg | |
02:33 | plamengr has joined #ltsp | |
02:47 | sepski has joined #ltsp | |
03:47 | Q-FUNK has joined #ltsp | |
04:24 | fernando110 has quit IRC | |
04:32 | Amaranth_ has joined #ltsp | |
04:32 | Amaranth has quit IRC | |
04:32 | Amaranth_ is now known as Amaranth | |
05:27 | Q-FUNK has quit IRC | |
05:45 | Tefad has left #ltsp | |
05:48 | Q-FUNK has joined #ltsp | |
05:55 | Avatara has joined #ltsp | |
06:36 | fernando110 has joined #ltsp | |
06:37 | fernando110 has quit IRC | |
06:54 | Amaranth has quit IRC | |
06:55 | bobby_C has joined #ltsp | |
07:00 | Avatara has quit IRC | |
07:02 | sepski has left #ltsp | |
07:02 | Amaranth has joined #ltsp | |
07:30 | fernando110 has joined #ltsp | |
07:37 | cyberorg has quit IRC | |
07:40 | spectra has joined #ltsp | |
07:43 | elisboa has joined #ltsp | |
07:56 | cliebow has quit IRC | |
07:58 | Amaranth has quit IRC | |
08:05 | ltspbot has joined #ltsp | |
08:28 | ltspbot has joined #ltsp | |
08:42 | vykarian has joined #ltsp | |
08:42 | Q-FUNK has quit IRC | |
08:51 | Q-FUNK has joined #ltsp | |
08:52 | bobby_C has quit IRC | |
09:18 | ltspbot has joined #ltsp | |
09:20 | sbalneav has joined #ltsp | |
09:41 | tux_440volt has joined #ltsp | |
10:16 | topslakr is now known as Topslakr | |
10:20 | kernelfreak has quit IRC | |
10:33 | spectra has quit IRC | |
10:37 | plamengr has left #ltsp | |
10:41 | GiantPickle has joined #ltsp | |
10:43 | spectra has joined #ltsp | |
10:47 | tux_440volt has quit IRC | |
11:11 | vykarian has quit IRC | |
11:26 | cyberorg_ has joined #ltsp | |
11:26 | cyberorg_ is now known as cyberorg | |
11:27 | elisboa has quit IRC | |
11:27 | elisboa has joined #ltsp | |
11:33 | spectra has quit IRC | |
11:38 | Amaranth has joined #ltsp | |
11:50 | ogra has quit IRC | |
11:51 | ogra has joined #ltsp | |
12:06 | MagicStorm has joined #ltsp | |
12:30 | a_kr_dor has joined #ltsp | |
12:30 | <a_kr_dor> Hi, can somebody help me?
| |
12:32 | I need a zlilo rom for broadcom 5754 0x14e4:0x167a I can't find it at rom-o-matic
| |
12:32 | And i can't boot from my ltsp server
| |
12:45 | chad has joined #ltsp | |
12:51 | chad has left #ltsp | |
12:51 | MagicStorm has quit IRC | |
12:51 | chad has joined #ltsp | |
12:51 | MagicStorm has joined #ltsp | |
12:52 | chad has quit IRC | |
12:53 | booghotfoot has joined #ltsp | |
12:55 | muh2000 has quit IRC | |
12:57 | booghotfoot has quit IRC | |
13:04 | elisboa has quit IRC | |
13:08 | Topslakr has quit IRC | |
13:10 | topslakr has joined #ltsp | |
13:13 | cyberorg is now known as cyberorg_ | |
13:28 | MagicStorm has left #ltsp | |
13:34 | topslakr is now known as Topslakr | |
13:39 | K_O-Gnom has joined #ltsp | |
14:00 | bobby_C has joined #ltsp | |
14:31 | a_kr_dor has quit IRC | |
14:34 | zald has joined #ltsp | |
14:34 | zald has quit IRC | |
14:55 | ace_suares has quit IRC | |
14:55 | ace_suares has joined #ltsp | |
15:44 | cliebow has joined #ltsp | |
15:53 | vagrantc has joined #ltsp | |
15:54 | GodFather has joined #ltsp | |
16:52 | Q-FUNK has quit IRC | |
17:07 | bobby_C has quit IRC | |
17:35 | K_O-Gnom has quit IRC | |
18:00 | spectra has joined #ltsp | |
18:20 | GodFather has quit IRC | |
18:52 | ccherret3 has joined #ltsp | |
18:52 | ccherret4 has joined #ltsp | |
18:52 | ccherret5 has joined #ltsp | |
18:53 | ccherrett has quit IRC | |
19:03 | ccherret1 has quit IRC | |
19:03 | ccherret2 has quit IRC | |
20:01 | JayPerez1 has quit IRC | |
20:02 | ace_suares has quit IRC | |
20:08 | ace_suares has joined #ltsp | |
20:13 | Amaranth has quit IRC | |
20:19 | Amaranth has joined #ltsp | |
20:19 | McDutchie has joined #ltsp | |
20:56 | Amaranth_ has joined #ltsp | |
20:57 | Amaranth_ has left #ltsp | |
21:01 | <sbalneav> Evening all
| |
21:13 | muh2000 has joined #ltsp | |
21:14 | booghotfoot has joined #ltsp | |
21:19 | booghotfoot has quit IRC | |
21:20 | booghotfoot has joined #ltsp | |
21:43 | ace_suares has quit IRC | |
21:44 | ace_suares has joined #ltsp | |
21:51 | booghotfoot has quit IRC | |
22:00 | ace_suares has quit IRC | |
22:02 | ace_suares has joined #ltsp | |
22:14 | joebaker has quit IRC | |
22:16 | vagrantc has quit IRC | |
22:16 | joebaker has joined #ltsp | |
22:29 | ccherret4 has quit IRC | |
22:29 | ccherret3 has quit IRC | |
22:29 | ccherret5 has quit IRC | |
22:29 | ccherrett has joined #ltsp | |
22:55 | JayPerez1 has joined #ltsp | |
23:18 | spectra has quit IRC | |