121 lines
7.7 KiB
HTML
121 lines
7.7 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="task" />
|
|
<meta name="DC.Title" content="Proxy ARP" />
|
|
<meta name="abstract" content="The Proxy ARP methods uses a technique commonly known as transparent subnetting." />
|
|
<meta name="description" content="The Proxy ARP methods uses a technique commonly known as transparent subnetting." />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="rzalmproxyarp" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Proxy ARP</title>
|
|
</head>
|
|
<body id="rzalmproxyarp"><a name="rzalmproxyarp"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Proxy ARP</h1>
|
|
<div><p>The Proxy ARP methods uses a technique commonly known as transparent
|
|
subnetting. </p>
|
|
<div class="p"><p>While the following information will provide a procedure to create
|
|
connectivity between your virtual and external networks, you might want to
|
|
learn more information about transparent subnetting. Here are some useful
|
|
links:</p>
|
|
<blockquote><dl><dt class="dlterm"><a href="http://www.redbooks.ibm.com/abstracts/sg245190.html" target="_blank">V4 TCP/IP for AS/400(R): More Cool Things Than Ever</a> <img src="www.gif" alt="Link outside Information Center" /></dt>
|
|
<dd>This pre-V5R3 redbook provides sample scenarios that demonstrate common
|
|
solutions with example configurations. It also helps you plan, install, tailor,
|
|
configure, and troubleshoot TCP/IP on your iSeries™ server.</dd>
|
|
</dl>
|
|
<dl><dt class="dlterm"><a href="../rzajw/rzajwkickoff.htm">TCP/IP
|
|
routing and workload balancing</a></dt>
|
|
<dd>This topic provides techniques and instructions for routing and workload
|
|
balancing.</dd>
|
|
</dl>
|
|
</blockquote>
|
|
</div>
|
|
<div class="section"><p>If you choose to use the Proxy ARP method, you must have a firm
|
|
understanding of subnetting and TCP/IP. You will need to obtain a contiguous
|
|
block of IP addresses that are routable by your network. You subnet this block
|
|
of IP addresses and assign one to the virtual TCP/IP interface and one to
|
|
the TCP/IP connection in your logical partition as described in the following
|
|
pre-V5R3 figure.</p>
|
|
<br /><img src="rzalm503.gif" alt="Illustrated example of Proxy ARP." /><br /><p>In this example, a contiguous
|
|
block of four IP addresses is used, which is 10.1.1.12 - 10.1.1.15. Since
|
|
it is a block of four IP address, the subnet mask for these addresses is 255.255.255.252.
|
|
To configure a setup similar to this, use the following instructions:</p>
|
|
</div>
|
|
<ol><li class="stepexpand"><span>Obtain a contiguous block of IP addresses that are routable by
|
|
your network. Since there is only one logical partition, you only need four
|
|
IP addresses. The fourth segment of the first IP address in the block must
|
|
be divisible by four. The first and last IP addresses of this block are the
|
|
Subnet and broadcast IP addresses and are unusable. The second and third IP
|
|
can be used for a virtual TCP/IP interface and a TCP/IP connection in your
|
|
logical partition. For this example, the IP address block is 10.1.1.12 - 10.1.1.15
|
|
with a subnet mask of 255.255.255.252.</span> <p>You also need a single
|
|
IP address for your external TCP/IP address. This IP addresses does not have
|
|
to belong to your block of contiguous addresses, but it must be within the
|
|
same original subnet of addresses as your block. In the example, the external
|
|
IP address is 10.1.1.5 with a subnet mask of 255.255.255.0.</p>
|
|
</li>
|
|
<li class="stepexpand"><span>Create an i5/OS<sup>®</sup> TCP/IP interface for your server. In this example,
|
|
you would assign the 10.1.1.5 as an IP address and the subnet mask would be
|
|
255.255.255.0.</span></li>
|
|
<li class="stepexpand"><span><a href="rzalmconfigvirtuallan.htm">Create an Ethernet line description for virtual Ethernet</a>. </span> Note the port of the hardware resource, because you will need it when
|
|
you set up TCP/IP in your logical partition. In the case of the above example,
|
|
assume the hardware resource is CMN05 with a port of 0 and although arbitrary,
|
|
the line description name is VETH0. <var class="varname">CRTLINETH LIND(VETH0) RSRCNAME(CMN05)
|
|
LINESPEED(1G) DUPLEX(*FULL)</var></li>
|
|
<li class="stepexpand"><span>Add a TCP/IP Interface for your Ethernet line description. Following
|
|
the example, you could use:</span> <p><var class="varname">ADDTCPIFC INTNETADR('10.1.1.13')
|
|
LIND('VETH0') SUBNETMASK ('255.255.255.252') LCLIFC('10.1.1.5')</var></p>
|
|
<div class="attention"><span class="attentiontitle">Attention:</span> If the fourth segment of your virtual TCP/IP interface is
|
|
greater than the fourth segment of your Proxy ARP IP address, then you need
|
|
to set AUTOSTART to *NO on this interface.</div>
|
|
<p>i5/OS starts its TCP/IP interfaces in
|
|
numerical order and you must start the proxy ARP interface before you start
|
|
any virtual TCP/IP interfaces.</p>
|
|
</li>
|
|
<li class="stepexpand"><span>Turn on IP datagram forwarding. This allows the i5/OS TCP/IP
|
|
interfaces to pass IP packets between each other. <var class="varname">CHGTCPA IPDTGFWD(*YES)</var></span></li>
|
|
<li class="stepexpand"><span>Start your TCP/IP interfaces. You can use a command like <var class="varname">STRTCPIFC
|
|
INTNETADR(yourIPaddress)</var>. For the example, you would issue the commands
|
|
like:</span><ul><li><var class="varname">STRTCPIFC INETADDR('10.1.1.5') </var>// starts the external
|
|
proxy ARP interface</li>
|
|
<li><var class="varname">STRTCPIFC INETADDR('10.1.1.13')</var> // starts the virtual
|
|
Ethernet interface</li>
|
|
</ul>
|
|
</li>
|
|
<li class="stepexpand"><span>On your logical partition, set up networking using the instructions
|
|
or tools provided by your Linux distribution. Be sure to use the correct IP
|
|
address, subnet mask, port, and router IP address.</span> <p>During the
|
|
TCP/IP setup in Linux, you will need to know your net or network device. If
|
|
you are running a 32-bit kernel version of 2.4.9 or less, the network device
|
|
is VETH plus the port number from when you configured an Ethernet line description.
|
|
If you are running a 64-bit kernel or a 32-bit kernel greater than or equal
|
|
to 2.4.10, the network device is ETH plus the port number. See <a href="rzalmconfigvirtuallan.htm">Create an Ethernet line description for virtual Ethernet</a> for more information. In the example:</p>
|
|
<ul><li>the interface IP address is 10.1.1.14</li>
|
|
<li>the subnet mask is 255.255.255.252</li>
|
|
<li>the gateway IP address is 10.1.1.13</li>
|
|
<li>the network device is VETH0 or ETH0 depending on the kernel version.</li>
|
|
</ul>
|
|
</li>
|
|
<li class="stepexpand"><span>To verify network communications, ping the virtual Ethernet interface
|
|
and a host on the external network from your logical partition. Then from i5/OS ping
|
|
the virtual Ethernet interface and the Linux interface.</span></li>
|
|
</ol>
|
|
</div>
|
|
|
|
</body>
|
|
</html> |