Jails unable to connect with rest of network.

[Niel Archer]

A few days ago most of my jails stopped responding on their normal ip address/port combos. If I use a normal shell (using GUI version or ssh) networking works as expected i.e. I can ping sites on the internet without problem, but I cannot ping the jails. When I iocage console into a jail they are running but ping etc. fail to connect with anything - cannot even resolve a site name.

root@transmission:~ # ifconfig -a
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.0.0.1 netmask 0xff000000
groups: lo
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
pflog0: flags=0<> metric 0 mtu 33160
groups: pflog
epair0b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:ff:60:bb:2e:02
hwaddr 02:c0:3c:1d:8c:0b
inet 172.16.0.2 netmask 0xfffffffc broadcast 172.16.0.3
inet6 fe80::ff:60ff:febb:2e02%epair0b prefixlen 64 scopeid 0x3
groups: epair
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active
nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>

In the above output the inet ip is shown as 172.16.0.2/30 when it is supposed to be 192.168.0.11/24. If I try to set it back to 192.168.0.11 and save, the jail now fails to start with a "Error: [EFAULT] Stopped transmission due to VNET failure" message.

I desperately need help with where to look for more info/how to fix this.

 

[Jurgen Segaert]

The 172.16.0.2/30 IP suggests that you have the NAT option checked for your jail.

 

[Niel Archer]

The 172.16.0.2/30 IP suggests that you have the NAT option checked for your jail.

I don't. As I said, I was able to manually change that to 192.168.0.11/24 and save it, but then the jail will not successfully start.