CSCF Infrastructure Technology Group

CSI » Setup Recipes » Services » Networking » Static » iproute2

Static Network Setup for CS Internet VLans that have only IPv4 addresses

Although it is possible to specify "network" and "broadcast" configuration lines, they are not only unnecessary, they can be a source of configuration error that is hard to spot. You should allow the system to compute both these values from the "netmask" and "address" configuration.

Example Configuration

Using NIC dev eth0, vlan "cscfnet" for this example, you should end up with a file in "/etc/network/interfaces.d" or a section in the /etc/network/interfaces file that contains the lines:

auto eth0 iface eth0 inet static netmask 255.255.255.0 address 129.97.15.X gateway 129.97.15.1

Static Network Setup for CS Internet Vlans that have both IPv4 and IPv6 addresses.

The following CS Internet Vlans also have an IPv6 address range assigned to them.

Vlan Name	IPv4 subnet	IPv6 subnet
cscfnet	129.97.15.0/24	2620:101:f000:4805::64
cs-teaching-net	129.97.167.0/26	2620:101:f000:4804::64
cs-general-net	129.97.167.64/26	2620:101:f000:4803::64

which means we want to assign the IPv6 address as well.

The CSCF guideline for assigning this IPv6 address is to use the value of the right most octet of the IPv4 address as the right most hextet of the IPv6 address.

Example Configuration

Using NIC dev eno1, vlan "cs-general-net" for this example, you should end up with a file in "/etc/network/interfaced.d" or a section in the /etc/network/interfaces file that contains the lines:

  auto  eno1
  iface eno1    inet static
      netmask   255.255.255.192
      address   129.97.167.X
      gateway   129.97.167.65
  iface eno1    inet6 static
      netmask   64
      address   2620:101:f000:4803::X
      gateway   2620:101:f000:4803::1

Policy-Based Routing Network Setup for CS's UW Campus-Wide Intranet VLans

Page not found | Computer Science Computing Facility (CSCF) | University of Waterloo

Page not found

The requested page could not be found.

Example Configuration

# A UW Intranet based CS host network setup.
#
# Being able to reply to anyone that contact this host requires
# Policy-Base routing setup that also requires a that a routing
# table be defined in /etc/iproute2/rt_tables. ie append lines:
#
#   #
#   # Source Policy-Base Route Table
#   200    Policy-Based
 
#
# Update enp4s0f0 to the interface of your installation,
# set output of "sudo lshw -short -class network"

auto  enp4s0f0
iface enp4s0f0 inet static
      address  172.19.X.Y
      netmask  255.255.255.0
      # By default use a NAT service 
      gateway  172.19.X.254
      # except when
      #   communicating to another UW IPv4 hosts
      up       ip route add 10.0.0.0/8    via 172.19.X.1
      up       ip route add 172.16.0.0/12 via 172.19.X.1
      up       ip route add 129.97.0.0/16 via 172.19.X.1
      # or replying to someone who communicated directly to this host
      up       ip route add default       via 172.19.X.1  table  Policy-Based
      post-up  ip rule  add from              172.19.X.Y  lookup Policy-Based
      # remember to clean up if the interface is taken down
      down     ip route del 10.0.0.0/8    via 172.19.X.1
      down     ip route del 172.16.0.0/12 via 172.19.X.1
      down     ip route del 129.97.0.0/16 via 172.19.X.1
      down     ip rule  del from              172.19.X.Y 
      down     ip route flush                             table  Policy-Based

Policy-Based Routing Network Setup for CS Local-Area Intranet VLans

Page not found | Computer Science Computing Facility (CSCF) | University of Waterloo

Page not found

The requested page could not be found.

Example Configuration

Using NIC dev enp4s0f0, you should end up with a file in "/etc/network/interfaces.d" or a section in the /etc/network/interfaces file that contains at least these lines (replacing the X and Y labels as appropriate):

# A CS Only Intranet CS host network setup. # # Being able to reply to anyone that contact this host requires # Policy-Base routing setup that also requires a that a routing # table be defined in /etc/iproute2/rt_tables. ie append lines: # # # # # Source Policy-Base Route Table # 200 Custom # # Update enp4s0f0 to the interface of your installation, # set output of "sudo lshw -short -class network" auto enp4s0f0 iface enp4s0f0 inet static address 10.15.X.Y netmask 255.255.255.0 # By default use a NAT service gateway 10.15.X.254 # except the following exceptions use a custom routing table up ip route add default via 10.15.X.1 table Custom # for communicating to other Intranet addresses within the SCS network post-up ip rule add to 10.0.0.0/12 lookup Custom post-up ip rule add to 172.19.0.0/16 lookup Custom # or communicating to CS Server Room Internet addresses post-up ip rule add to 129.97.167.0/24 lookup Custom # IST name servers post-up ip rule add to 129.97.2.1/32 lookup Custom post-up ip rule add to 129.97.2.2/32 lookup Custom # mirror.csclub.uwaterloo.ca post-up ip rule add to 129.97.134.71/32 lookup Custom # or replying to someone who can communicate directly to this host post-up ip rule add from 10.15.X.Y lookup Custom # remember to clean up if the interface is taken down pre-down ip rule del to 10.0.0.0/12 lookup Custom pre-down ip rule del to 172.19.0.0/16 lookup Custom pre-down ip rule del to 129.97.167.0/24 lookup Custom pre-down ip rule del to 129.97.2.1/32 lookup Custom pre-down ip rule del to 129.97.2.2/32 lookup Custom pre-down ip rule del to 129.97.134.71/32 lookup Custom pre-down ip rule del from 10.15.X.Y lookup Custom down ip route flush table Custom

Policy-Based Routing Network Setup having Multiple-Nics, Multiple-IPv4 and IPv6 Addresses

#
# Source policy route table names are defined in "/etc/iproute2/rt_tables"
#
# The IPv4 NAT address for CSCF Intranet (private) Vlans
# are always  one less than the broadcast address.
#

# The SCS DC Internet interface
auto	ens160
iface	ens160    inet static
	netmask   255.255.255.192
	address   129.97.167.Y
	gateway   129.97.167.65
	# Source Policy Routing for clients communicating to this interface
	up        ip route add default via 129.97.167.65 table  Internet
	post-up   ip rule  add from        129.97.167.Y  lookup Internet
        # Clean up when interface is taken down.
	pre-down  ip rule  del from        129.97.167.Y  lookup Internet
	down      ip route del default via 129.97.167.65 table  Internet
        post-down ip route flush           cache         table  Internet
        # Setup IPv6 address.
iface	ens160    inet6 static
	netmask   64
	gateway   2620:101:f000:4803::1
	address   2620:101:f000:4803::Y

# The SCS DC 3558 CS UW-Intranet interface
auto	ens192
iface	ens192	  inet static
	netmask   255.255.255.0
	address   172.19.152.X  
	# Source Policy Routing for clients communicating to this interface
	up        ip route add default via 172.19.152.1   table  UW_Intranet
	post-up   ip rule  add from        172.19.152.X   lookup UW_Intranet
        # Clean up when interface is taken down.
	pre-down  ip rule  del from        172.19.152.X   lookup UW_Intranet
	down      ip route del default via 172.19.152.1   table  UW_Intranet
        post-down ip route flush           cache          table  UW_Intranet

# The SCS DC 3558 CSCF UW-Intranet interface
auto	ens224
iface	ens224    inet static
	netmask   255.255.255.224	
	address   172.19.15.30
	# Source Policy Routing for clients communicating to this interface
	up        ip route add default via 172.19.15.1    table  CSCF_Intranet
	post-up   ip rule  add from        172.19.15.30   lookup CSCF_Intranet
        # Clean up when interface is taken down.
	pre-down  ip rule  del from        172.19.15.30   lookup CSCF_Intranet
	down      ip route del default via 172.19.15.1    table  CSCF_Intranet
        post-down ip route flush           cache          table  CSCF_Intranet

# The SCS DC 3558 DC 3558 Host Console Intranet interface
auto	enp2s0
iface	enp2s0    inet static
	netmask   255.255.255.0
	address   10.15.152.X  
	# Source Policy Routing for clients communicating to this interface
	up        ip route add default via 10.15.152.1    table  CS_Intranet
	post-up   ip rule  add from        10.15.152.X    lookup CS_Intranet
        # Clean up when interface is taken down.
	pre-down  ip rule  del from        10.15.152.X    lookup CS_Intranet
	down      ip route del default via 10.15.152.1    table  CS_Intranet
        post-down ip route flush           cache          table  CS_Intranet

# The SCS DC 3558 DC 3558 CS Storage Services Intranet interface
auto	enp2s1
iface	enp2s1    inet static
	mtu       9000
	netmask   255.255.255.0
	address   10.10.152.X
        # Use this interface for SCS network storage services. 
	post-up   ip route add 10.10.152.0/22 via 10.10.152.1
	# Source Policy Routing for clients communicating to this interface
	up        ip route add default via 10.10.152.1    table  Intranet-CS_NAS
	post-up   ip rule  add from        10.10.152.X    lookup Intranet-CS_NAS
        # Clean up when interface is taken down.
	pre-down  ip rule  del from        10.10.152.X    lookup Intranet-CS_NAS
	down      ip route del default via 10.10.152.1    table  Intranet-CS_NAS
        post-down ip route flush           cache          table  Intranet-CS_NAS

# The SCS DC 3558 LOM/Mgmt Intranet interface
auto	enp2s3
iface	enp2s3    inet static
	netmask   255.255.255.0
	address   10.0.152.X  
	# Source Policy Routing for clients communicating to this interface
	up        ip route add default via 10.0.152.1     table  CSCF_Mgmt
	post-up   ip rule  add from        10.0.152.X     lookup CSCF_Mgmt
        # Clean up when interface is taken down.
	pre-down  ip rule  del from        10.0.152.X     lookup CSCF_Mgmt
	down      ip route del default via 10.0.152.1     table  CSCF_Mgmt
        post-down ip route flush           cache          table  CSCF_Mgmt