This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

static routing between different interfaces

Trying to add a static route between 2 different interfaces but doesnt work.

I mean what can Im do if I have 2 different internet connections (say ISP1 and ISP2) placed on 2 different interfaces of the firewall and I want to drive the normal web traffic on my preferred internet connection ISP1, but for a specific host (H1) I want to use my secondary internet connection.
I simply added the network routing static route with network H1 with target the gateway of ISP2, I also tried with the interface instead of the gateway...
No way.
I also checked that no packet filter rules are clear for that routing.

Am I missing something ?
Thanks
Gaplus

This thread was automatically locked due to age.

0 Xeno over 21 years ago

That should work.
Maybe you forgot masquerading?

Xeno
Cancel
Vote Up 0 Vote Down

Cancel
0 pablito over 21 years ago

For each internet connection you want MASQ/NAT/rules. If you have a default gateway for each ISP and an inbound DNAT rule on each line then it should work.
Cancel
Vote Up 0 Vote Down

Cancel
0 cyclops over 21 years ago in reply to pablito

too bad that Astaro supports only one default gateway.

Greetings
cyclops
Cancel
Vote Up 0 Vote Down

Cancel
0 AJo over 21 years ago

Perhaps the document about policy routing may help you.

http://docs.astaro.org/older_versions/ASL-V3.2/docs_v3/hacking/policy_routing.txt
Cancel
Vote Up 0 Vote Down

Cancel
0 Gaplus over 21 years ago in reply to Xeno

Why should I add masquerading since the IP of my eth2 is a public internet IP?
I also studied policy routing for the latest kernel version of linux, using different routing tables and rules to catch the packets.
Even with basic tests I still cant pass trhrough different interfaces whereas it's possible if the interface is the same and I have 2 difefrent gateway in the same network.....

Gaplus
Cancel
Vote Up 0 Vote Down

Cancel
0 Gaplus over 21 years ago in reply to Xeno

I didn't check the NAT rule carefully, now adding a static route as I did before to the routing table + the NAT rule that specify that from the inner network, to the specified host the SOURCE address has to be changed to the new interface (no matter about services) it worked !!
Thank you all !
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasFoster over 5 years ago

Have you looked at this feature, which applies to Web Filtering only?

https://community.sophos.com/kb/en-us/126892
Cancel
Vote Up 0 Vote Down

Cancel