[CCP14 Home: (Frames | No Frames)]
CCP14 Mirrors: [UK] | [CA] | [US] | [AU]

(This Webpage Page in No Frames Mode)

Collaborative Computational Project Number 14

for Single Crystal and Powder Diffraction

CCP14

Setting up a multiple IP address interface on an SGI O2 under IRIX 6.5.x

The CCP14 Homepage is at http://www.ccp14.ac.uk

[Back to CCP14 Web/Config Main Page]

[The Problem | The Solution]

The Problem

We wish to set up some optimised Linux and BSD download FTP, Web and NFS areas. And also get the option of setting up optimised general FTP mirrors at a later date. (Using Apache for the web-server and most likely using Proftpd for the FTP server)

FTP does not support virtual name based resolution and only IP addresses. Thus we need to configure the SGI O2 to have a number of IP addresses on the one network card/interface. The following addresses have been allocated and setup by the network support people in the site DNS. This has to occur.


The Solution

First thing to do is post to the relevant newsgroup and get some hints as a guide to minimize wasting of time.

From: trichter@ipk.fhg.de (Tobias Richter)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 21 Sep 1999 18:01:49 GMT
Organization: Technical University Berlin, Germany
Xref: daresbury comp.sys.sgi.admin:85178


Lachlan Cranswick  wrote:
>
>I am in the process of getting some IP addresses for
>an SGI O2 running IRIX 6.5.x so I can set up some
>FTP virtual servers with Proftpd (www.proftpd.org)
>on different names (but single interface).
>
>What man pages should I be looking at to understand
>how SGIs handle this and is there a canned setup
>to handle this in an easy way?  What nasty things
>can happen (as well as the FTP servers not working)

I'm not familiar with Proftpd, but from the IRIX side
you should be setup and ready when you edit 
/etc/config/ipaliases.options and follow the documentation
in there. This file also contains a SEE ALSO section
for further information.

Bye,
tobias

From: heiko@cis.fu-berlin.de (Heiko Schlichting)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 02:48:58 GMT
Organization: Freie Universitaet Berlin
Xref: daresbury comp.sys.sgi.admin:85183


l.cranswick@dl.ac.uk (Lachlan Cranswick) writes:
>I am in the process of getting some IP addresses for an SGI O2 running
>IRIX 6.5.x so I can set up some FTP virtual servers with Proftpd
>(www.proftpd.org) on different names (but single interface).

This works without problems. I use a Origin 200 with a Gigabit-Ethernet
interface running IRIX 6.5.5f for this purpose. The FTP daemon is proftpd
1.2.0pre6. Do not use version 1.2.0pre5 on IRIX, it has some Linux dependent
code in it and will not work. Older versions has security problems, so that
you should really start with proftpd 1.2.0pre6.

Proftpd is very flexible for configuring different virtual servers. You
can see two examples of the above mentioned configuration here:
        ftp://ftp.fu-berlin.de/
        ftp://ftp.individual.net/
There are additional servers on the same machine, but some are for
non-anonymous software distribution only.

>What man pages should I be looking at to understand how SGIs handle this
>and is there a canned setup to handle this in an easy way?  What nasty
>things can happen (as well as the FTP servers not working)

This is difficult to answer. In general, there is no special thing necessary
to configure virtual servers with IRIX. But setting up a FTP server requires
some knowledge about unix - especially security - or there are good
changes in opening big holes. The additional IP addresses are added via
/etc/config/ipaliases.options, as usual on IRIX. If the flag was changed
from the default, newer IRIX versions also require "chkconfig ipaliases on".

A related post of sorts

From: roberson@ibd.nrc.ca (Walter Roberson)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Disabling Ethernet Port
Date: 21 Sep 1999 18:00:58 GMT
Organization: National Research Council Canada
Xref: daresbury comp.sys.sgi.admin:85177


In article [7s8d6j$4sb$1@news.ececs.uc.edu], Zuke [johnzur@hotmail.com] wrote:
:We would like to be able to pull our ethernet cable out from the
:wall plug to disable internet access when it is not needed but
:if we do we continually get a system message that says "ethernet
:is not responding".   How would we go about disabling this message
:or disabling the network card when we do not want to use the 
:ethernet access.

ifconfig ec0 down

Replace 'ec0' with the name of your first ethernet port. You can
see this by doing   /usr/etc/netstat -ia


Mucking around using the above as a starting gives the following

In this case, we have 4 IP address to add with the following aliases for web and ftp aliases (the aliases are doing the same work and looking at the files)

Doing /usr/etc/ifconfig -v ec0

Gives the following interface, netmask and broadcast information.

ec0: flags=c43
        inet 193.62.124.194 netmask 0xffffffe0 broadcast 193.62.124.223
        speed 100.00 Mbit/s half-duplex

Put the following into: /etc/config/ipaliases.options

ec0 193.62.124.195 netmask 0xffffffe0 broadcast 193.62.124.223
ec0 193.62.124.196 netmask 0xffffffe0 broadcast 193.62.124.223
ec0 193.62.124.197 netmask 0xffffffe0 broadcast 193.62.124.223
ec0 193.62.124.198 netmask 0xffffffe0 broadcast 193.62.124.223

Put the following into: /etc/hosts

193.62.124.195  ftp
193.62.124.196  redhat
193.62.124.197  debian
193.62.124.198  freebsd

Do chkconfig to check the status of the deamons and then chkconfig ipaliases on to turn on the above IP aliasing.

From: trichter@ipk.fhg.de (Tobias Richter)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 17:43:40 GMT
Organization: Technical University Berlin, Germany
Xref: daresbury comp.sys.sgi.admin:85201


Lachlan Cranswick [l.cranswick@dl.ac.uk] wrote:
>>This is difficult to answer. In general, there is no special thing necessary
>>to configure virtual servers with IRIX. But setting up a FTP server requires
>>some knowledge about unix - especially security - or there are good
>>changes in opening big holes. The additional IP addresses are added via
>>/etc/config/ipaliases.options, as usual on IRIX. If the flag was changed
>>from the default, newer IRIX versions also require "chkconfig ipaliases on".
>
>Doing this, I found it did not work until I manually.  Should the above have
>worked without doing this?
>
>I had to also manually add in the IP addresses via the following style 
>of command:
>
>/usr/etc/ifconfig -v ec0 alias 193.62.124.196 netmask 0xffffffe0 broadcast 193.62.124.223

There is no such thing as a daemon checking those files for changes, so editing 
/etc/config/ipaliases.options or issuing 'chkconfig ipaliases on' of course
either needs a reboot or a '/etc/init.d/network stop; /etc/init.d/network start'
for the changes to take effect. 
Keep in mind: Stopping your networking with '/etc/init.d/network stop'
usually disturbs most of your users nearly as much as a reboot.

Bye,
tobias

From: heiko@cis.fu-berlin.de (Heiko Schlichting)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 19:47:06 GMT
Organization: Freie Universitaet Berlin
Xref: daresbury comp.sys.sgi.admin:85209


trichter@ipk.fhg.de (Tobias Richter) writes:
>[...] needs a reboot or a '/etc/init.d/network stop; /etc/init.d/network
>start' for the changes to take effect.  Keep in mind: Stopping your
>networking with '/etc/init.d/network stop' usually disturbs most of your
>users nearly as much as a reboot.

For adding just an IP alias this is overkill. In most cases 

        /etc/init.d/aliases-ip start

is sufficient. If some special and unusual bindings to the new address are
also configured, this might not be enough but try this first before
stopping all network services or rebooting a server.

Date: Wed, 22 Sep 1999 18:00:38 GMT
Newsgroups: comp.sys.sgi.admin
From: Mike O'Connor 
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Organization: Fugue State University
Xref: daresbury comp.sys.sgi.admin:85212

In article [slrn7ui5ac.1ajj7.trichter@kuerbis.ipk.fhg.de],
Tobias Richter [trichter@ipk.fhg.de] wrote:
:Keep in mind: Stopping your networking with '/etc/init.d/network stop'
:usually disturbs most of your users nearly as much as a reboot.

If your remote users use something like ssh to connect in and sshd
isn't started/stopped in the context of /etc/init.d/network, you can
get away with doing something like:

# at now
/etc/init.d/network stop ; /etc/init.d/network start

to restart the network, and have only a brief interruption of your
shell session while the interface is down-ed/up-ed.  
 
--
 Michael J. O'Connor | WWW: http://dojo.mi.org/~mjo/ | Email: mjo@dojo.mi.org
 InterNIC WHOIS: MJO | (has my PGP & Geek Code info) | Phone: +1 248-848-4481

From: heiko@cis.fu-berlin.de (Heiko Schlichting)
Newsgroups: comp.sys.sgi.admin
Subject: Re: Multiple IP address on SGI O2 for virtual FTP sites?
Date: 22 Sep 1999 19:22:56 GMT
Organization: Freie Universitaet Berlin
Xref: daresbury comp.sys.sgi.admin:85215


l.cranswick@dl.ac.uk (Lachlan Cranswick) writes:
>>This is difficult to answer. In general, there is no special thing necessary
>>to configure virtual servers with IRIX. But setting up a FTP server requires
>>some knowledge about unix - especially security - or there are good
>>changes in opening big holes. The additional IP addresses are added via
>>/etc/config/ipaliases.options, as usual on IRIX. If the flag was changed
>>from the default, newer IRIX versions also require "chkconfig ipaliases on".
>
>Doing this, I found it did not work until I manually.  Should the above have
>worked without doing this?

(1) Add the ip-addresses in /etc/config/ipaliases.options.

        Example:
        [root@Hefe] 107 (/etc/config): tail -4 ipaliases.options
        eg1     130.133.1.101   netmask 0xffffff00 broadcast 130.133.1.255
        eg1     130.133.1.102   netmask 0xffffff00 broadcast 130.133.1.255
        eg1     130.133.1.103   netmask 0xffffff00 broadcast 130.133.1.255
        eg1     130.133.1.104   netmask 0xffffff00 broadcast 130.133.1.255

(2) Switch on 'ipaliases' Flag, if someone turned it off (on is SGIs default):

        chkconfig ipaliases on

(3) Activate it (this is done while booting automatically):

        /etc/init.d/aliases-ip start

An manual 'ifconfig' is not necessary but is possible if you do not want
to make step (3) for some reason.

Now to enable this, do /etc/init.d/aliases-ip start

(An old method that was quite kludgy was:
At this point (as per the above) things are still not working as you would normally have to reboot for the above IP address aliasing to take affect. Thus you have to add the addresses into ifconfig with the following commands. Be wary that you may have to manually input the netmast and broadcast address as it may use a wrong default.

/usr/etc/ifconfig -v ec0 alias 193.62.124.195 netmask 0xffffffe0 broadcast 193.62.124.223
/usr/etc/ifconfig -v ec0 alias 193.62.124.196 netmask 0xffffffe0 broadcast 193.62.124.223
/usr/etc/ifconfig -v ec0 alias 193.62.124.197 netmask 0xffffffe0 broadcast 193.62.124.223
/usr/etc/ifconfig -v ec0 alias 193.62.124.198 netmask 0xffffffe0 broadcast 193.62.124.223

You should now be able to /etc/bin/ping the above addresses, get a positive response and now setup the web server and ftp server.


Hints for the Apache web-server

As a hint for Apache webserver (v1.3.9), don't forget to turn on the Listen command if you are using this option.

Listen 193.62.124.195:80
Listen 193.62.124.196:80
Listen 193.62.124.197:80
Listen 193.62.124.198:80

Then putting in the following for web-access:

NameVirtualHost 193.62.124.196

<VirtualHost 193.62.124.196>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/redhat
ServerName redhat.ccp14.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*)  http://www.redhat.com/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/redhat/
ErrorLog logs/redhat_error_log
CustomLog logs/redhat_access_log combined
</VirtualHost>

<VirtualHost 193.62.124.196>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/redhat
ServerName redhat.dl.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*)  http://www.redhat.com/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/redhat/
ErrorLog logs/redhat_dl_error_log
CustomLog logs/redhat_dl_access_log combined
</VirtualHost>


NameVirtualHost 193.62.124.197

<VirtualHost 193.62.124.197>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/debian
ServerName debian.ccp14.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*)  http://www.debian.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/debian/
ErrorLog logs/debian_error_log
CustomLog logs/debian_access_log combined
</VirtualHost>

<VirtualHost 193.62.124.197>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/debian
ServerName debian.dl.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*)  http://www.debian.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/debian/
ErrorLog logs/debian_dl_error_log
CustomLog logs/debian_dl_access_log combined
</VirtualHost>

NameVirtualHost 193.62.124.198

<VirtualHost 193.62.124.198>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/freebsd
ServerName freebsd.ccp14.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*)  http://www.freebsd.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/freebsd/
ErrorLog logs/freebsd_error_log
CustomLog logs/freebsd_access_log combined
</VirtualHost>

<VirtualHost 193.62.124.198>
ServerAdmin ccp14@ccp14.ac.uk
DocumentRoot /web_disc/ccp14/web_area/freebsd
ServerName freebsd.dl.ac.uk
RewriteEngine on
RewriteRule ^/cgi-bin/(.*)  http://www.freebsd.org/cgi-bin/$1 [R,L]
ScriptAlias /cgi-bin/ /usr/local/apache/share/cgi-bin/freebsd/
ErrorLog logs/freebsd_dl_error_log
CustomLog logs/freebsd_dl_access_log combined
</VirtualHost>


[CCP14 Home: (Frames | No Frames)]
CCP14 Mirrors: [UK] | [CA] | [US] | [AU]

(This Webpage Page in No Frames Mode)

If you have any queries or comments, please feel free to contact the CCP14