[Pkg-iscsi-maintainers] [SCM] Debian Open-iSCSI Packaging branch, upstream-mnc, updated. 2.0-872-101-g2616afb
michaelc at cs.wisc.edu
Mon May 2 18:56:32 UTC 2011
The following commit has been merged in the upstream-mnc branch:
Author: Mike Christie <michaelc at cs.wisc.edu>
Date: Mon Jan 31 06:27:19 2011 -0600
iscsi tools: document iface rp_filter use
The rp_filter behavior changed upstream and this affects the
iface iscsi session binding feature. When upgrading kernels
the session login may fail when using iface binding. To fix
this the sysctl rp_filter setting may need to be changed.
See the README's iface prep section for details.
diff --git a/README b/README
index 824a6c4..9a44f3c 100644
@@ -408,8 +408,9 @@ this the following is not needed for software iscsi.
This feature is experimental. The interface may change. When reporting
bugs, if you cannot do a "ping -I ethX target_portal", then check your
-network settings first. If you cannot ping the portal, then you will
-not be able to bind a session to a NIC.
+network settings first. Make sure the rp_filter setting is set to 0 or 2
+(see Prep section below for more info). If you cannot ping the portal,
+then you will not be able to bind a session to a NIC.
What is a scsi_host and iface for software, hardware and partial
@@ -427,6 +428,32 @@ structure. For each HBA port or for software iscsi for each network
device (ethX) or NIC, that you wish to bind sessions to you must create
a iface config /etc/iscsi/ifaces.
+The iface binding feature requires the sysctl setting
+net.ipv4.conf.default.rp_filter to be set to 0 or 2. This can be set
+in /etc/sysctl.conf by having the line:
+net.ipv4.conf.default.rp_filter = N
+where N is 0 or 2. Note that when setting this you may have to reboot
+the box for the value to take effect.
+rp_filter information from Documentation/networking/ip-sysctl.txt:
+rp_filter - INTEGER
+ 0 - No source validation.
+ 1 - Strict mode as defined in RFC3704 Strict Reverse Path
+ Each incoming packet is tested against the FIB and if the interface
+ is not the best reverse path the packet check will fail.
+ By default failed packets are discarded.
+ 2 - Loose mode as defined in RFC3704 Loose Reverse Path
+ Each incoming packet's source address is also tested against the FIB
+ and if the source address is not reachable via any interface
+ the packet check will fail.
# iscsiadm -m iface
Debian Open-iSCSI Packaging
More information about the Pkg-iscsi-maintainers