Collaborative Computational Project Number 14
for Single Crystal and Powder Diffraction
CCP14
Setting up a multiple IP address interface on an SGI O2 under IRIX 6.5.x
The CCP14 Homepage is at http://www.ccp14.ac.uk
We wish to set up some optimised Linux and BSD download FTP, Web and NFS
areas. And also get the option of setting up optimised general FTP mirrors
at a later date. (Using Apache for the web-server and most likely
using Proftpd for the FTP server)
FTP does not support virtual name based resolution and only IP addresses. Thus
we need to configure the SGI O2 to have a number of IP addresses on the one network
card/interface. The following addresses have been allocated and setup by the
network support people in the site DNS. This has to occur.
First thing to do is post to the relevant newsgroup and get some hints as a
guide to minimize wasting of time.
From: trichter@ipk.fhg.de (Tobias Richter)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 21 Sep 1999 18:01:49 GMT
Organization: Technical University Berlin, Germany
Xref: daresbury comp.sys.sgi.admin:85178
Lachlan Cranswick wrote:
>
>I am in the process of getting some IP addresses for
>an SGI O2 running IRIX 6.5.x so I can set up some
>FTP virtual servers with Proftpd (www.proftpd.org)
>on different names (but single interface).
>
>What man pages should I be looking at to understand
>how SGIs handle this and is there a canned setup
>to handle this in an easy way? What nasty things
>can happen (as well as the FTP servers not working)
I'm not familiar with Proftpd, but from the IRIX side
you should be setup and ready when you edit
/etc/config/ipaliases.options and follow the documentation
in there. This file also contains a SEE ALSO section
for further information.
Bye,
tobias
|
From: heiko@cis.fu-berlin.de (Heiko Schlichting)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 02:48:58 GMT
Organization: Freie Universitaet Berlin
Xref: daresbury comp.sys.sgi.admin:85183
l.cranswick@dl.ac.uk (Lachlan Cranswick) writes:
>I am in the process of getting some IP addresses for an SGI O2 running
>IRIX 6.5.x so I can set up some FTP virtual servers with Proftpd
>(www.proftpd.org) on different names (but single interface).
This works without problems. I use a Origin 200 with a Gigabit-Ethernet
interface running IRIX 6.5.5f for this purpose. The FTP daemon is proftpd
1.2.0pre6. Do not use version 1.2.0pre5 on IRIX, it has some Linux dependent
code in it and will not work. Older versions has security problems, so that
you should really start with proftpd 1.2.0pre6.
Proftpd is very flexible for configuring different virtual servers. You
can see two examples of the above mentioned configuration here:
ftp://ftp.fu-berlin.de/
ftp://ftp.individual.net/
There are additional servers on the same machine, but some are for
non-anonymous software distribution only.
>What man pages should I be looking at to understand how SGIs handle this
>and is there a canned setup to handle this in an easy way? What nasty
>things can happen (as well as the FTP servers not working)
This is difficult to answer. In general, there is no special thing necessary
to configure virtual servers with IRIX. But setting up a FTP server requires
some knowledge about unix - especially security - or there are good
changes in opening big holes. The additional IP addresses are added via
/etc/config/ipaliases.options, as usual on IRIX. If the flag was changed
from the default, newer IRIX versions also require "chkconfig ipaliases on".
|
A related post of sorts
From: roberson@ibd.nrc.ca (Walter Roberson)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Disabling Ethernet Port
Date: 21 Sep 1999 18:00:58 GMT
Organization: National Research Council Canada
Xref: daresbury comp.sys.sgi.admin:85177
In article [7s8d6j$4sb$1@news.ececs.uc.edu], Zuke [johnzur@hotmail.com] wrote:
:We would like to be able to pull our ethernet cable out from the
:wall plug to disable internet access when it is not needed but
:if we do we continually get a system message that says "ethernet
:is not responding". How would we go about disabling this message
:or disabling the network card when we do not want to use the
:ethernet access.
ifconfig ec0 down
Replace 'ec0' with the name of your first ethernet port. You can
see this by doing /usr/etc/netstat -ia
|
Mucking around using the above as a starting gives the following
In this case, we have 4 IP address to add with the following aliases for web and
ftp aliases (the aliases are doing the same work and looking at the files)
- 193.62.124.195 - ftp.ccp14.ac.uk
- 193.62.124.196 - redhat.ccp14.ac.uk/redhat.dl.ac.uk
- 193.62.124.197 - debian.ccp14.ac.uk/debian.dl.ac.uk
- 193.62.124.198 - freebsd.ccp14.ac.uk/freebsd.dl.ac.uk
Doing /usr/etc/ifconfig -v ec0
Gives the following interface, netmask and broadcast information.
ec0: flags=c43
inet 193.62.124.194 netmask 0xffffffe0 broadcast 193.62.124.223
speed 100.00 Mbit/s half-duplex
Put the following into: /etc/config/ipaliases.options
ec0 193.62.124.195 netmask 0xffffffe0 broadcast 193.62.124.223
ec0 193.62.124.196 netmask 0xffffffe0 broadcast 193.62.124.223
ec0 193.62.124.197 netmask 0xffffffe0 broadcast 193.62.124.223
ec0 193.62.124.198 netmask 0xffffffe0 broadcast 193.62.124.223
Put the following into: /etc/hosts
193.62.124.195 ftp
193.62.124.196 redhat
193.62.124.197 debian
193.62.124.198 freebsd
Do chkconfig to check the status of the deamons and then
chkconfig ipaliases on to turn on the above IP aliasing.
From: trichter@ipk.fhg.de (Tobias Richter)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 17:43:40 GMT
Organization: Technical University Berlin, Germany
Xref: daresbury comp.sys.sgi.admin:85201
Lachlan Cranswick [l.cranswick@dl.ac.uk] wrote:
>>This is difficult to answer. In general, there is no special thing necessary
>>to configure virtual servers with IRIX. But setting up a FTP server requires
>>some knowledge about unix - especially security - or there are good
>>changes in opening big holes. The additional IP addresses are added via
>>/etc/config/ipaliases.options, as usual on IRIX. If the flag was changed
>>from the default, newer IRIX versions also require "chkconfig ipaliases on".
>
>Doing this, I found it did not work until I manually. Should the above have
>worked without doing this?
>
>I had to also manually add in the IP addresses via the following style
>of command:
>
>/usr/etc/ifconfig -v ec0 alias 193.62.124.196 netmask 0xffffffe0 broadcast 193.62.124.223
There is no such thing as a daemon checking those files for changes, so editing
/etc/config/ipaliases.options or issuing 'chkconfig ipaliases on' of course
either needs a reboot or a '/etc/init.d/network stop; /etc/init.d/network start'
for the changes to take effect.
Keep in mind: Stopping your networking with '/etc/init.d/network stop'
usually disturbs most of your users nearly as much as a reboot.
Bye,
tobias
|
From: heiko@cis.fu-berlin.de (Heiko Schlichting)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 19:47:06 GMT
Organization: Freie Universitaet Berlin
Xref: daresbury comp.sys.sgi.admin:85209
trichter@ipk.fhg.de (Tobias Richter) writes:
>[...] needs a reboot or a '/etc/init.d/network stop; /etc/init.d/network
>start' for the changes to take effect. Keep in mind: Stopping your
>networking with '/etc/init.d/network stop' usually disturbs most of your
>users nearly as much as a reboot.
For adding just an IP alias this is overkill. In most cases
/etc/init.d/aliases-ip start
is sufficient. If some special and unusual bindings to the new address are
also configured, this might not be enough but try this first before
stopping all network services or rebooting a server.
|
Date: Wed, 22 Sep 1999 18:00:38 GMT
Newsgroups: comp.sys.sgi.admin
From: Mike O'Connor
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Organization: Fugue State University
Xref: daresbury comp.sys.sgi.admin:85212
In article [slrn7ui5ac.1ajj7.trichter@kuerbis.ipk.fhg.de],
Tobias Richter [trichter@ipk.fhg.de] wrote:
:Keep in mind: Stopping your networking with '/etc/init.d/network stop'
:usually disturbs most of your users nearly as much as a reboot.
If your remote users use something like ssh to connect in and sshd
isn't started/stopped in the context of /etc/init.d/network, you can
get away with doing something like:
# at now
/etc/init.d/network stop ; /etc/init.d/network start
to restart the network, and have only a brief interruption of your
shell session while the interface is down-ed/up-ed.
--
Michael J. O'Connor | WWW: http://dojo.mi.org/~mjo/ | Email: mjo@dojo.mi.org
InterNIC WHOIS: MJO | (has my PGP & Geek Code info) | Phone: +1 248-848-4481
|
From: heiko@cis.fu-berlin.de (Heiko Schlichting)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 19:22:56 GMT
Organization: Freie Universitaet Berlin
Xref: daresbury comp.sys.sgi.admin:85215
l.cranswick@dl.ac.uk (Lachlan Cranswick) writes:
>>This is difficult to answer. In general, there is no special thing necessary
>>to configure virtual servers with IRIX. But setting up a FTP server requires
>>some knowledge about unix - especially security - or there are good
>>changes in opening big holes. The additional IP addresses are added via
>>/etc/config/ipaliases.options, as usual on IRIX. If the flag was changed
>>from the default, newer IRIX versions also require "chkconfig ipaliases on".
>
>Doing this, I found it did not work until I manually. Should the above have
>worked without doing this?
(1) Add the ip-addresses in /etc/config/ipaliases.options.
Example:
[root@Hefe] 107 (/etc/config): tail -4 ipaliases.options
eg1 130.133.1.101 netmask 0xffffff00 broadcast 130.133.1.255
eg1 130.133.1.102 netmask 0xffffff00 broadcast 130.133.1.255
eg1 130.133.1.103 netmask 0xffffff00 broadcast 130.133.1.255
eg1 130.133.1.104 netmask 0xffffff00 broadcast 130.133.1.255
(2) Switch on 'ipaliases' Flag, if someone turned it off (on is SGIs default):
chkconfig ipaliases on
(3) Activate it (this is done while booting automatically):
/etc/init.d/aliases-ip start
An manual 'ifconfig' is not necessary but is possible if you do not want
to make step (3) for some reason.
|
Now to enable this, do /etc/init.d/aliases-ip start
(An old method that was quite kludgy was:
At this point (as per the above) things are still not working as you would normally have to reboot
for the above IP address aliasing to take affect. Thus you have to add the
addresses into ifconfig with the following commands. Be wary that you may have
to manually input the netmast and broadcast address as it may use a wrong default.
/usr/etc/ifconfig -v ec0 alias 193.62.124.195 netmask 0xffffffe0 broadcast 193.62.124.223
/usr/etc/ifconfig -v ec0 alias 193.62.124.196 netmask 0xffffffe0 broadcast 193.62.124.223
/usr/etc/ifconfig -v ec0 alias 193.62.124.197 netmask 0xffffffe0 broadcast 193.62.124.223
/usr/etc/ifconfig -v ec0 alias 193.62.124.198 netmask 0xffffffe0 broadcast 193.62.124.223
You should now be able to /etc/bin/ping the above addresses, get a
positive response and now setup the web server and ftp server.
Hints for the Apache web-server
As a hint for Apache webserver (v1.3.9), don't forget to
turn on the Listen command if you are using this option.
Listen 193.62.124.195:80
Listen 193.62.124.196:80
Listen 193.62.124.197:80
Listen 193.62.124.198:80
|
Then putting in the following for web-access:
NameVirtualHost 193.62.124.196
<VirtualHost 193.62.124.196>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/redhat
ServerName redhat.ccp14.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*) http://www.redhat.com/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/redhat/
ErrorLog logs/redhat_error_log
CustomLog logs/redhat_access_log combined
</VirtualHost>
<VirtualHost 193.62.124.196>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/redhat
ServerName redhat.dl.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*) http://www.redhat.com/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/redhat/
ErrorLog logs/redhat_dl_error_log
CustomLog logs/redhat_dl_access_log combined
</VirtualHost>
NameVirtualHost 193.62.124.197
<VirtualHost 193.62.124.197>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/debian
ServerName debian.ccp14.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*) http://www.debian.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/debian/
ErrorLog logs/debian_error_log
CustomLog logs/debian_access_log combined
</VirtualHost>
<VirtualHost 193.62.124.197>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/debian
ServerName debian.dl.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*) http://www.debian.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/debian/
ErrorLog logs/debian_dl_error_log
CustomLog logs/debian_dl_access_log combined
</VirtualHost>
NameVirtualHost 193.62.124.198
<VirtualHost 193.62.124.198>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/freebsd
ServerName freebsd.ccp14.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*) http://www.freebsd.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/freebsd/
ErrorLog logs/freebsd_error_log
CustomLog logs/freebsd_access_log combined
</VirtualHost>
<VirtualHost 193.62.124.198>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/freebsd
ServerName freebsd.dl.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*) http://www.freebsd.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/freebsd/
ErrorLog logs/freebsd_dl_error_log
CustomLog logs/freebsd_dl_access_log combined
</VirtualHost>
|