Red Hat CLUSTER SUITE 4.7 DM MULTIPATH Guide d'installation télécharger pdf (Page 117)

Chapter 8. Initial LVS Conﬁguration 101

You can also allow speciﬁc hosts or subnets as seen in this example:

Order deny,allow

Deny from all

Allow from 192.168.1.100

Allow from 172.16.57

In this example, only Web browsers from the machine with the IP address of 192.168.1.100

and machines on the 172.16.57/24 network can access the Piranha Conﬁguration Tool.

Caution

Editing the Piranha Conﬁguration Tool .htaccess ﬁle limits access to the conﬁgura-

tion pages in the /etc/sysconfig/ha/web/secure/ directory but not to the login and

the help pages in /etc/sysconfig/ha/web/. To limit access to this directory, create a

.htaccess ﬁle in the /etc/sysconfig/ha/web/ directory with order, allow, and deny

lines identical to /etc/sysconfig/ha/web/secure/.htaccess.

8.5. Turning on Packet Forwarding

In order for the LVS router to forward network packets properly to the real servers, each

LVS router node must have IP forwarding turned on in the kernel. Log in as root and

change the line which reads net.ipv4.ip_forward = 0 in /etc/sysctl.conf to the

following:

net.ipv4.ip_forward = 1

The changes take effect when you reboot the system.

To check if IP forwarding is turned on, issue the following command as root:

/sbin/sysctl net.ipv4.ip_forward

If the above command returns a 1, then IP forwarding is enabled. If it returns a 0, then you

can turn it on manually using the following command:

/sbin/sysctl -w net.ipv4.ip_forward=1

1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 187 188

Pas de commentaire

Red Hat CLUSTER SUITE 4.7 DM MULTIPATH Guide d'installation Page 117