Hi, I have the following setup. Two linux systems with two [test] external interfaces encrypted with ipsec [transport].
Two gre tunnels that pass 10.200.0.0/24 and 10.200.1.0/24 network traffic.
Testing the balanced tunnels I would setup iptraf on one and ping from the other. The results would be as expected; traffic would be split between the two interfaces.
 
Testing with an ftp transfer of 300MB I would get various results:
1. one interface would be transfering at 36Mbit/s the other would be at 1.5Mbits/s [a -> b]
    or one interface would be transfering at 29Mbit/s and the other a 0.
2. I would get the same results from [b->a]
 
Is there something I missed or did not configure properly? Any help or suggestions would be appreciated.
 
jason
 
 
                    192.168.0.1     [ipsec tunnel]             192.168.0.2
             [A]      -------------------------------------------------------------        [B]
                    172.16.0.1       [ipsec tunnel]             172.16.0.2
                       -------------------------------------------------------------
 
 
[A] linux 2.6.13
internal 10.200.1.2/24
ext 192.168.0.1
ext 172.16.0.1
 
[gre tunnels]
netb 10.200.1.2
netb2 10.200.1.2
 
[B] linux 2.6.13
internal 10.200.0.2
ext 192.168.0.2
ext 172.16.0.2
 
[gre tunnels]
neta 10.200.0.2
neta2 10.200.0.2
 
 
a.
ip tunnel add netb mode gre remote 172.16.0.2 local 172.16.0.1 ttl 255
ip link set netb up
ip addr add 10.200.1.2 deb netb
 
ip tunnel add netb2 mode gre remote 192.168.0.2 local 192.168.0.1 ttl 255
ip link set netb2 up
ip addr add 10.200.1.2 dev netb2
ip route add equalize 10.200.0.0/24 nexthop via 10.200.1.2 dev netb nexthop via 10.200.1.2 dev netb2
 
b.
ip tunnel add neta mode gre remote 172.16.0.1 local 172.16.0.2 ttl 255
ip link set neta up
ip addr add 10.200.0.2 deb netb
 
ip tunnel add neta2 mode gre remote 192.168.0.1 local 192.168.0.2 ttl 255
ip link set neta2 up
ip addr add 10.200.0.2 dev neta2
ip route add equalize 10.200.1.0/24 nexthop via 10.200.0.2 dev neta nexthop via 10.200.0.2 dev neta2
 
 
 
 
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Reply via email to