Route Table Question
Quick question. I am having an issue with some interconnectivity with devices on the same overlay subnet. SSH'ing from between hosts on the same subnet receives an error, but connecting with origin host outside the overlay subnet works. My question is: Is this route table correct on the Firewalla?
*** DHCP Mode
*** 32 is the router subnet
*** 218 is the Firewalla subnet ( should Firewalla be sending overlay subnet traffic back to the internet/router?
pi@Firewalla:/etc/network (Firewalla) $ netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.32.1 0.0.0.0 UG 0 0 0 eth0
192.168.32.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.218.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
-
I do have a static route defined on the Synology to route 192.168.218.0 to 192.168.32.117 ( firewalla ).
I have no issues ssh'ing from .32 or WAN to the 218 network. My problem occurs when I try to ssh between two devices where both are inside of the 218 subnet. I was wondering if the route table above where 218 was being sent to the WAN was the culprit?
-
The overlay network is not visible to the Synology. The route table posted above is from the Firewalla. The static route I put on the Synlology is external to this issue, and I probably should not have mentioned it other than to show I have a few devices still on the .32 that can ssh back to devices on the .218 with no issues. The route was added because the Synology would have sent that traffic to the WAN otherwise. The issue here is communication between two devices on the .218.
The initial question is regarding the route table posted in the first post from the Firewalla. Why is .218 traffic being routed to the WAN, and could that be an issue that is keeping two devices that are both .218 from completing a handshake. I am not a network guy, so I understand it is likely there for a reason I do not understand, but am bringing it up based on my case.
-
After more testing, not a routing issue.
The PI that I was having issues with was connected via "wlan0" to the router's AP. I changed to a SSID of an AP that is connected to a switch that is connected to a LAN port on the router. The Firewalla is connected to the same switch as the remote AP. Now I my connection issues are gone. Nothing changes with the subnet, and the Pi's IP does not change.
If I move back to the router's AP, they return. I can ping, but ssh turns an ssh_exchange_identification: read: connection reset by peer.
Please sign in to leave a comment.
Comments
5 comments