h******q
发帖数: 97 | 1 why sometimes we have to include the prefix length
e.g. 101::501/64 otherwise, the ip will not match.
/64 is to indicating subnet mask?
many thanks! |
|
b*******s
发帖数: 470 | 2 the fix ip allocated to my machine is like 10.67..., i mean it could be
avaiable only within the subnet of our school. now i wanna build a web server.
how to solve the problem?
many thx! |
|
w**2
发帖数: 724 | 3 【 以下文字转载自 EmergingNetworking 讨论区 】
发信人: wds2 (阿旺), 信区: EmergingNetworking
标 题: 一个pc只有一个NIC，能跟2个不同的subnet connect 吗?
发信站: BBS 未名空间站 (Sat Jan 10 12:18:18 2015, 美东)
我的意思是，从pc一开始
ping 192.168.1.10
ping 192.168.2.10
都可以，
tracert只分别看到别的一个next hop，
192.168.1.254
192.168.2.254
netmask 255.255.255.0,
然后把192.168.1.10 ethernet 线给拔了，
我的ping 192.168.2.10 也断了，为什么？
菜鸟一个，会提供更多信息，请各位大牛相助！ |
|
c**y
发帖数: 172 | 4 You need to figure out the following questions.
What is the IP of the NIC on your PC?
Where is the gateway of the subnet your PC belongs to?
What is the IP of the gateway?
Whose IP is 192.168.1.10? and the same question for 192.168.2.10. |
|
k****n
发帖数: 52 | 5 【 以下文字转载自 Linux 讨论区,原文如下 】
发信人: ketten (ketten), 信区: Linux
标 题: HELP!!! Questions on subnet IP config
发信站: Unknown Space - 未名空间 (Mon Nov 3 21:30:09 2003) WWW-POST
Hi, I wonder if any master can help me with this?
I have only one active ethernet port and I am using a router to make 5
machines be able to access the web using the port. Now I want to set up two
servers behind the router with the distinct IP addresses. Is that possible? If
so, how should I realize it?
Thanks a lot for your reading |
|
kb
发帖数: 73 | 6
two
possible?
You can use two machines for different services. Like one as FTP server and
one as HTTP server. These two machines will have different IP (192.168.*.*).
But they will have the same IP address if you want to access those services
from outside your subnet. |
|
k****n
发帖数: 52 | 7 【 以下文字转载自 Linux 讨论区,原文如下 】
发信人: ketten (ketten), 信区: Linux
标 题: HELP!!! Questions on subnet IP config
发信站: Unknown Space - 未名空间 (Mon Nov 3 21:30:09 2003) WWW-POST
Hi, I wonder if any master can help me with this?
I have only one active ethernet port and I am using a router to make 5
machines be able to access the web using the port. Now I want to set up two
servers behind the router with the distinct IP addresses. Is that possible? If
so, how should I realize it?
Thanks a lot for your reading |
|
d******n
发帖数: 88 | 8 2wire的2701hg-b 是 U-verse吧
http://www.dslreports.com/forum/r23982150-IPDSLAM-FAQ
Q. How do I know whether I am ordering U-Verse HSI or regular U-Verse
service [Internet, TV, VoIP]?
A. If you are placing an order online you will be directed to »uverse.
att.com and when you put you address you will only be able to order Internet
Service; The TV and Voice services will show not available. If you are
speaking with an agent on the phone, the sales agent will identify your are
qualified for U-Vers... 阅读全帖 |
|
T**r
发帖数: 7016 | 9 老大，不好意思，这个贴比较长。
我把NAT搞定了，现在MSVPC guest也能上internet，即使host在公司的VPN上。但是
host
不能看到guest，guest却可以看到host（公司IP）。我需要host能看到guest，因为
guest上
有一些web application需要demo。
whatismyip.com显示两个是同一个IP，而且应该是我VPN的IP，我ISP的IP是75开头，公
司是
144开头。
下面是host 和guest的ipconfig 和route print，其中host里有一些vitualbox和
vmware的遗留下来的一些设置，以前装过，没有搞出来，现在用的是MS VPC。
******************
host ipconfig: *
******************
C:\Documents and Settings\ga2334>ipconfig
Windows IP Configuration
Ethernet adapter VMware Network Adapter VMnet8:
Co... 阅读全帖 |
|
p*******m
发帖数: 20761 | 10 Steve Gibson's Three Router Solution to IOT Insecurity
Author: Nicolae Crisan
Date: August 15, 2016
Subject: General Tech
Manufacturer: Various
Tagged: networking, network, iot
Introduction
Even before the formulation of the term "Internet of things", Steve Gibson
proposed home networking topology changes designed to deal with this new
looming security threat. Unfortunately, little or no thought is given to the
security aspects of the devices in this rapidly growing market.
One of Steve's propos... 阅读全帖 |
|
m*****n
发帖数: 760 | 11 是不是这个版本的不支持啊？
在Administration页面有下面一段Notes:
请版上的各路大仙出手解惑。
IP Traffic is about monitoring IPv4 network traffic flowing through the
router.
Check your LAN Settings before enabling this feature: any/all LAN interfaces
must have a netmask with at least 16 bits set (255.255.0.0).
Monitoring of larger subnets is not supported.
Other relevant notes/hints:
Before enabling this feature, please check your LAN Settings and make sure
the netmask on any/all of your LAN bridges has been configured properly (i.... 阅读全帖 |
|
t****t
发帖数: 6806 | 12 errrrr... looks like you have no idea at all.
put it this way: router will direct traffic across subnet. within the same
subnet (remember the "subnet mask"? if (ip&mask) is the same then it's in
the same subnet), it will send packet directly to some MAC address. IP->MAC
translation is done by ARP protocol. your switch knows which port has which
MAC connected so it doesn't have to broadcast. it has a MAC table with N
entry (check newegg, the # of entry is an important parameter).
as for IP assign... 阅读全帖 |
|
t**d
发帖数: 6474 | 13 为了防止记忆错误出现偏差，我昨天又重新试验了一下：
实验一：
母router，pppoe，ip 192.168.1.1，subnet mask 255.255.255.0
子router，dhcp client，van ip 192.168.10.1，subnet mask 255.255.255.0
试验结果：子router上的电脑能access母router及其上面的设备（比如NAS），但是母
router上的电脑不能access子router上的设备。
实验二
母router，pppoe，ip 192.168.1.1，subnet mask 255.255.255.0
子router，dhcp client，van ip 192.168.10.1，subnet mask 255.255.0.0
试验结果：子router上的电脑不能能access母router及其上面的任何设备，母router上
的电脑也不能access子router上的任何设备。 |
|
S*A
发帖数: 7142 | 14 If the wire and wireless has the same subnet. That shouldn't
happen. Packet go through either interface should arrive the
router.
If the wire and wireless has different subnet. That means
you are likely doing some thing dangerous (connecting the
internal network with the public network, in some company
that is a big offense).
If you insist, set a separate route table for wifi and
lan. e.g. your lan default gw overwrite the wifi one,
but both wifi and lan using different subnet and default
gw fo... 阅读全帖 |
|
|
l********g
发帖数: 400 | 16 Thank you for your response.
Built in card
Are you using soft ware to control or windows xp built in to control.
Window xp bilt in to control
Your problem is software, not hard ware.
Are you using DHCP? Does it get a IP address? Can you ping another computer
on the same subnet?
Yes, I used DHCP. But I cannot get IP address. Other PC on the same subnet
work fine.
Check IP, subnet mask setting first if you assign it yourself.
Are you using any encryption?
No.
It might be cheaper to just disable |
|
w*****r
发帖数: 89 | 17 哈哈，你还记得挺清楚
还有就是把不同作用的traffic分开
html带flash image的网页和xml feed分开，不同的apache设置
降低apache的keepalive，默认300减到10
fine tune apache，
取消ns1, ns2,建立ns vip，降低ns server load
清理mess
原来俺们一团糟，把switch当hub用
不同的subnet混合，现在严格subnet，一个vlan就一个subnet
（cisco也只允许这样，之前dell的switch竟然不管，哈哈）
抛弃capped bandwidth from datacenter， 直接连isp
严格user管理，控制root （之前大家都用root, haha ）
加强health check from server Iron
引入global loadbalance between data center
还有就是authorative ns做成非recursive的，减少被别人abuse
还有就是改进server farm 的synchronization，消灭不同的slave |
|
t****t
发帖数: 6806 | 18 exactly, 所以如果不同的subnet, 子网的设备还是可以访问母网的设备. 注意你方法一
和你贴的是一样的(which can not block guest to access your device). 方法二是通
过故意搞错subnet mask来搞错路由, 但是这是不可靠的, 因为客人如果注意到的话, 是
可以人工修正subnet mask的. |
|
g*****9
发帖数: 4125 | 19 What wireless card do you have? built in?
Are you using soft ware to control or windows xp built in to control.
Your problem is software, not hard ware.
Are you using DHCP? Does it get a IP address? Can you ping another computer on the same subnet?
Check IP, subnet mask setting first if you assign it yourself.
Are you using any encryption?
It might be cheaper to just disable this card and buy another cheap usb or
pcmcia card for a few bucks if you already spend hours on this. |
|
l****n
发帖数: 6896 | 20 老天，我开始害怕了。。。。连 sky 称呼我玻璃心你都知道！
是不是有人暗中监视我？。。。
哆嗦。。。。哆嗦。。。。发抖。。。。
Chloe: "Jack, we've been infiltrated."
Hack: "What do you mean infiltrated?"
Chloe: "Someone's been watching our communication from Division's subnet."
Jack: "That's why they know our every move and every conversation. Can you
try and flush them out of the subnet?"
Chloe: "I can't. They are using Blowfish encryption algorithm, this is a
strong encryption, it can take years to decode it, if ever."
Jack: "OK, I promise I will find ou... 阅读全帖 |
|
t****g
发帖数: 35582 | 21 your e3000's ip must be 192.168.1.x, otherwise e3000 and 2701 will not be
in the same subnet, given your subnet mask is 255.255.255.0 by default
.x |
|
i*****o
发帖数: 1714 | 22 wifi和你的cable是不同的subnet，要用不同的subnet address. 建议ethernet用10.1.
1.1和10.1.1.2。 |
|
w****2
发帖数: 20 | 23 办理了time warner cable的网络，用国内带过来的TP-Link无法连接到Internet（
Local only）。但电脑可以无线连接到TP-link， 电脑与time warner cable提供的盒
子(UBEE)连出来的网线直接连接也直接能上Internet，另外，家里固话也可以正常往外
打电话。
所以，time warner cable应该没有问题，怀疑是TP-Link设置存在问题，但昨天试了各
种设置，都没有效果，请大家帮忙解决，如何设置TP-Link？多谢！
以下供参考：
用了WAN setting里面的Release及Renew，也没有用。现用192.168.1.1打开设置页面主
要参数如下：
LAN: IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
WAN：IP Address: 192.168.0.4
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.0.1 |
|
w*****r
发帖数: 89 | 24 这个俺倒是也知道，加secondary ip address就能混合subnet
但是俺理解这样的话会大幅降低switch的效率
俺发现你是数学证明题高手，哈哈，喜欢比较严格定义
俺喜欢讲个大概，哈哈
dellswitch不用设置就允许subnet混合，呵呵 |
|
w**********s
发帖数: 179 | 25 来自主题: EmergingNetworking版 - 请教VLAN Not sure what you want to ask. VLAN, just like its name, Virtual LAN, has
the same feature as LAN. All broadcasts are limited in one subnet. So the
packet will be broadcast only among its own subnet(cuz the router did not
forward broadcast). The communication between two VLANs needs the support of
a router. |
|
n*****y
发帖数: 71 | 26 1. ping to each other to verify network connectivity first
2. if ping results are Ok, try to access the folder via run rather than
network browser in windows, type in \\remote host ip\share folder name in
the run window. if it fails, check windows firewall or any client based
firewall setting
3. if ping failes, and both PCs are in the same subnet, check windows or any
client based firewall setting; if in two different two subnet, try to
access the shared folder via Run, if it fails again, check |
|
s******v
发帖数: 4495 | 27 试着回答一下问题，
1)对于e2e backhaul nework (中间有多个独立carrier network), 和多个cell site
cluster (可以看成是VPN 或VLAN clusters）， 我们如何支持高效traffic routing
和 VLAN management? 用什么方法或协议？
vpls l2vpn应该可以，不过inter AS l2vpn vpls目前，应该只有option C，option B
应该刚出来，而且不是所有的ISP都支持。
2）carrier 数量有限，并且是WAN结构，我感觉MPLS labeling 可以用在两个carrier
之间fast switching, 但我不能确定如何cell cluster中routing traffic, 比如从
hub
cell 到
a end cell site. 用IP subnet? or still MPLS label (但是有overhead
cost), 还
是其他好方法？
我觉得ip subnet最简单，still mpls label什么意思，难道你自己也要跑mpls?
3... 阅读全帖 |
|
d*****s
发帖数: 173 | 28 T1给了5个ip 50.20.38.106-50.20.38.110
asa5510 0/0口绑定了地址50.20.38.110，0/1接内部网络
想要从外部通过50.20.38.106访问内部web server 192.168.1.110
我参考cisco文档配置了static nat，但是还是无法访问，请问哪里出了问题，谢谢！
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_objects.html#wp1119793
asa版本是8.3
附上我的配置
ASA Version 8.3(1)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password b4RZzua6LpNOeJCF encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
dns-guard
!
interface Ethernet0/0
nameif outside
security-... 阅读全帖 |
|
a***n
发帖数: 262 | 29 I did not see the static nat.
apply access-group 100 in outside
then try to use packet-tracer utility
T1给了5个ip 50.20.38.106-50.20.38.110
asa5510 0/0口绑定了地址50.20.38.110，0/1接内部网络
想要从外部通过50.20.38.106访问内部web server 192.168.1.110
我参考cisco文档配置了static nat，但是还是无法访问，请问哪里出了问题，谢谢！
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_objects.html#wp1119793
asa版本是8.3
附上我的配置
ASA Version 8.3(1)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password b4RZzua6LpNOeJCF encry... 阅读全帖 |
|
a***n
发帖数: 262 | 30 This is routed subinterfaces
native routed interface
int fa0/0
ip address 172.26.50.1 255.255.255.0
Traffic on this interface is untagged or native VLAN. This is like
int fa0/0
ip address 172.26.50.1 255.255.255.0
no switchport
on multi layer switches.
interface FastEthernet0/0.2
encapsulation dot1Q 51
ip address 172.26.51.1 255.255.255.0
This traffic is tagged with vlan id 51. This set up is the same thing of int
vlan 51 on multi layer switches.
ASA is similar to a router
int fa0/0
... 阅读全帖 |
|
x*********n
发帖数: 28013 | 31 R1和R2，建立site to site VPN，
图一design，每一次customer要加新的private iP range，就要create IP accesslist。
现在我设计成图2.加了一个router，然后每一次加新的subnet，加到新的router上，然
后tunnel呢，仍然在原来的地方，只是每一个subnet都points to IPA 或者B上。
同事说这样不行，因为packet的source IP还是DEF。。。
我也不太确定，我觉得router A至少learn到了新的IP吧。 |
|
r***o
发帖数: 1526 | 32 架了个OpenVPN，在client端route table出了点问题，
Windows IP configuration:
Local LAN Adapter
IPv4 Address. . . . . . . . . . . : 10.40.104.11
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.40.104.1
VPN Adapter
IPv4 Address. . . . . . . . . . . : 192.168.66.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
VPN断开时的route table：
IPv4 Route Table
===========================================================================
Active Route... 阅读全帖 |
|
t****g
发帖数: 35582 | 33 刷ddwrt或者tomato，把router设置成wireless bridge用就行了,也可以设成wireless
client。
区别是前者的话你的路由器以及上面连的机器和他在一个sub net里面，后者你是他的
subnet的subnet，你的路由器同时也是一个网关。 |
|
m**v
发帖数: 373 | 34 我把router的ip subnet改了就可以了，一定是上次dsl的tech support来捣鼓的时候吧
modem的ip的subnet改了。
给包子，我一共2个包子，给你一个。 |
|
a*o
发帖数: 19981 | 35 两颗西红柿在不同的subnet，搭了个VPN bridge，西红柿号称给我自动default成
routing with NAT，结果ping都不通，我一看它老人家连个interface IP都没给哥弄一
个过来，更别提route了。手动加好IP和route之后倒是通了server那头的subnet，但是
稍微大点的数据包貌似就有问题，不是丢包就是卡，反正看个PAP2的config页面都困难
，勉强打开而已。PC直连那边的VPN server就好得很，速度飞快也很流畅。 |
|
m**********e
发帖数: 12525 | 36 你如果只想开个ftp service,你直接在sexsex.com安装ftp server就成,
不需要单独开设ftp.sexsex.com,对方ftp://sexsex.com直接连接21端口,
http://sexsex.com直接连接80端口,如果再安装mail server的话对方直接
连接25端口...
如果你需要出现一台单独的ftp.sexsex.com,则你申请的DNS必须是一个网段,
比如,你的sexsex.com不可以是192.192.122.122,必须是192.192.122.xx,比如,
分配给你16个subnet,你自己定义相应的mask,然后把192.192.122.122分配给
子网根服务器sexsex.com.
如果你申请到的ip真是这样,则可以在sexsex.com下安装DNS server,在/var/named/
zone.下定义自己的子网ip对应的域名,用户首先访问你的网段注册dns,然后再被指
到你的sexsex.com上的dns获得域名的最终解析.
我估计你就获得了一个IP,根本没有subnet,估计你也没那个钱,所以按照我最前面的
办法做吧... 阅读全帖 |
|
a*o
发帖数: 19981 | 37 玩了玩open vpn，client里错误地选了个same subnet，结果连上之后ping不通，我意
识到不应该选same subnet，结果uncheck-》save就始终抱怨invalid IP，我想reset一
下没准就好了，结果起不来了，30-30-30也不好使了，奶奶的。 |
|
d****n
发帖数: 12461 | 38 ☆─────────────────────────────────────☆
amo (牛肉炖熊掌) 于 (Wed May 2 21:34:45 2012, 美东) 提到:
玩了玩open vpn，client里错误地选了个same subnet，结果连上之后ping不通，我意
识到不应该选same subnet，结果uncheck-》save就始终抱怨invalid IP，我想reset一
下没准就好了，结果起不来了，30-30-30也不好使了，奶奶的。
☆─────────────────────────────────────☆
htw (hello the world) 于 (Wed May 2 21:57:54 2012, 美东) 提到:
软件设置错误不应该死呀
☆─────────────────────────────────────☆
amo (牛肉炖熊掌) 于 (Wed May 2 22:09:43 2012, 美东) 提到:
不知道怎么回事，反正现在reboot10分钟都ping不了，30-30-30也没动静。
直接插上让它bo... 阅读全帖 |
|
d******i
发帖数: 7160 | 39 西红柿的status如下：
偶用西红柿router搭了个桥，来有线接我的PC。
貌似只能选wireless client才work（wireless ethernet bridge不行），
而wireless client又要求在"wan"选项不能disable，至少dhcp。
结果成了这个样子。其实我记得wan可以disable的。
结果网上邻居们看不到了。自然打印机啊都不灵了。
咋回事呢？请指教。谢了。
下面是status,主router是192.168.1.1
WAN
MAC Address XXX
Connection Type DHCP
IP Address 192.168.1.25
Subnet Mask 255.255.255.128
Gateway 192.168.1.1
DNS XX.XX.XX.XX:XX, XX.XX.XX.XX:XX
MTU 1500
Status Connected
Connection Uptime 1 day, 01:02:01
Remaining Lease Time 0 day... 阅读全帖 |
|
t**d
发帖数: 6474 | 40 跟你们讲过了，不需要这么链接（这个链接方案适合你们这些不懂的人），在子router
上设guest wifi是完全可以的，你们不会不等于没这个方法。真服了你们了，不懂装懂
，对懂的人还冷嘲热讽。
在子router设guest wifi的关键是，再跟你们重复一遍，要在不同的subnet上！再看不
懂就回头好好学习一下什么是不同的subnet，怎么设。 |
|
S*A
发帖数: 7142 | 41 你把 client mode 和 WDS 的区别搞清楚了再来说把。
使用 subnet 和 NAT 的是 routed client mode， 不是 WDS。
你用过 WDS 吗？ 你的 WDS 需要配独立的 subnet？
上次说 TP-LINK 使用国产倾销 CPU 的是不是你？ |
|
z*********e
发帖数: 10149 | 42 设置两个vNIC，一个跟router同一subnet，一个跟本地host同一subnet，把nas共享给
两个networks
理论上应该可行，没有实际弄过 |
|
d*b
发帖数: 21830 | 43 一看就知道你是业余的，没有poe可以用injector, 丫这种nested router最大的问题是
subnet不一致和由此带来的ip分布，很多ipc的server side不是scaleable的，subnet
一多人就handle不了了，ipc是security device,不是网上直播让人看你跳脱衣舞的，
可靠性和鲁棒性永远比价格优先 |
|
r*****e
发帖数: 52 | 44
don't worry, 224.* is multicast address, 224.0.0.2 is used
to address all routers on your subnet. you machine, or someone
on your subnet is trying to use multicast.
usually your machine should filter out packets for this address
unless you configure your machine as a router, or you have put
your interface in promiscous mode.
it is okay if you don't know what i am talking about, you only
need to know that basically your machien is okay, not being hacked. |
|
a***t
发帖数: 39 | 45
when
Clarifying some concepts first:
1. Switch operats on the layer 2, data link layer (of course, the regular
switch, not the layer-3 or layer-4 switch)
2. Router operates on the IP layer, layer 3
So, to answer you question:
Switches don't know the routing. If they are connected to the same subnet,
nothing needs to be done. If they are connected to the different subnet, you
need to put a router between them. Switch isn't counted as a hop, router is.
Same applies to the second question, if no s |
|
ez
发帖数: 19 | 46 what could be the problem?
Both in the same subnet, subnet mask: 255.255.255.0 |
|
b********e
发帖数: 10 | 47 If you can ping the server, you don't need any extra hardware - the
connection is already there. You can browse from the same subnet but
cannot from a different one - that means either there's a firewall
or your server setting prevents access from different subnets. You
just need to modify these settings.
so
as
switch
of
any |
|
g***s
发帖数: 80 | 48 1. How are the PCs connected? All to the router? with DHCP?
2. are they using the same subnet mask? (255.255.255.0)
3. What IP did you use to ping? It should be like 192.168.1.xxx (same subnet
mask as in 2 and same first three numbers in IP), so they are in the same
local network. you can use type "ipconfig" in the command window(run-"cmd") to
find out. First ping your local PC its self(not other PCs), if that fails it
means you have to reinstall the TCP/IP protocol
4. if you use simple file |
|
w**z
发帖数: 8232 | 49 现在的标准做法是设vpc, 和subnet. 把rds ，webserver啥的放在不同的subnet， 安
全控制有保障。aws有很好的文档解释。 |
|
