is server acting as a router ?

[praveen..]

i got a request of my client that:

our server is acting as a router .he is finding this server is acting as some router when he is polling the network.

please let me know how to check it and confirm?

[Arunvijai_4]

Hi Praveen,

Check this out http://www.cyberciti.biz/nixcraft/vivek/blogger/2005/10/hp-ux-how-do-i-configure-routing-or.php

-Arun

[Steven E. Protter · Accepted solution]

Shalom,

To be a router, a server must have two NIC cards, configured on two networks and act as a gateway between the networks.

If you take a windows box, set its gateway to the server in question and try and ping or do legitimate traffic the second NIC on the server, then its a router.

It takes some degree of work to do this, but its possible with any HP-UX server meeting the specifications above.

SEP

[Delrish]

by default HP-UX is ip_forwarding enabled. so it acts as a router. you can check your box with the follwoing command:
# ndd -get /dev/ip ip_forwarding
If forwarding is enabled, then output wiil be "2".

[Delrish]

for disabling the ip_Forwarding you can use ndd.
ndd -set /dev/ip ip_forwarding 0

For static change add to /etc/rc.config.d/nddconf file the following lines:
TRANSPORT_NAME[2]=ip
NDD_NAME[2]=ip_forwarding
NDD_VALUE[2]=0

[spex]

# netstat -in

Check for two lan devices on two different networks. Ipkts and Opkts report network activity for each device.

[Darrel Louis]

Praveen

Can you post the netstat -rn output and the ndd output requested.

Based on what your client is saying the server is acting as a router.
When they perform a traceroute to a server in the same segment, is your server one of the hops it is passing?
Can you also post the following info, from /etc/rc.config.d/netconf :
ROUTE_DESTINATION[0]="default"
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]=""
ROUTE_COUNT[0]="1"
ROUTE_ARGS[0]=""

Darrel

[praveen..]

# netstat -rn
Routing tables
Destination Gateway Flags Refs Interface Pmtu
127.0.0.1 127.0.0.1 UH 0 lo0 4136
170.120.6.68 170.120.6.68 UH 0 lan2 4136
170.120.6.69 170.120.6.69 UH 0 lan1 4136
170.120.6.0 170.120.6.68 U 2 lan2 1500
170.120.6.0 170.120.6.69 U 2 lan1 1500
127.0.0.0 127.0.0.1 U 0 lo0 0
default 170.120.6.6 UG 0 lan2 0

# ndd -get /dev/ip ip_forwarding
2

please suggest

[Darrel Louis]

Praveen change the following:
Add the following to your /etc/rc.config.d/nddconf
# Donâ t act as a router
TRANSPORT_NAME[8]=ip
NDD_NAME[8]=ip_forwarding
NDD_VALUE[8]=0
TRANSPORT_NAME[9]=ip
NDD_NAME[9]=ip_send_redirects
NDD_VALUE[9]=0

These parameters can be set online, but will disappear after a reboot if you don't add it to the nddconf file.
ndd -set /dev/ip ip_forwarding 0
ndd -set /dev/ip ip_send_redirects 0



The actions above will result in a machine that cannot forward TCP/IP packets
between multiple networks, even if the machine has multiple network adapters
connected to multiple networks.

Darrel