User Tools

Site Tools


hardware:shimtunnel

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
hardware:shimtunnel [2019/01/11 14:57] – [To delete a rule with id 2] veerahardware:shimtunnel [2019/01/11 18:16] (current) veera
Line 16: Line 16:
  
  
 +
 +<note warning>
 +**Pre-check**
 +  * ensure IP Forwarding is disabled ''echo 0 > /proc/sys/net/ipv4/ip_forward''  
 +  * local iptables firewall rules allow the UDP port ''iptables -A INPUT -p udp -m udp --dport 5111 -j ACCEPT''
 +</note> 
 ===== Download the Shim software ===== ===== Download the Shim software =====
  
Line 67: Line 73:
  
  
-===== Optional : Use Source NAT ===== +===== Extra reference : Use Source NAT =====
- +
-If the above steps still do not work and a different source IP address is seen for the Shim tunnel use iptables to create a SNAT.+
  
-This example NATs the source IP for udp packets to 5111 (custom netflow)  to be the Shim end point.+In the very unlikely scenario the above steps dont work and the desired source IP is not seen on the outgoing packets, use SNAT (Source NAT).This example NATs the source IP for udp packets to 5111 (custom netflow)  to be the Shim end point.
  
 <code> <code>
hardware/shimtunnel.1547198829.txt.gz · Last modified: 2019/01/11 14:57 by veera