Hi Stephen,

Back on May 19 2010, I sent to the Shorewall-users group:

...when we upgraded our internet to dual providers I made a minimum change
in that I added the second provider as a sub interface of the interface with
the primary provider and this has been working for over six months.

Our Environment: We utilise DNAT and conntrack 
        Internet traffic could be in via provider A or B and out via
provider A or B. (Asymmetric routing)
        Provider B is a layer two peering point so the Quagga routing table
contains ~50 different next hops.

Should I stay with this setup or do you recommend following
http://www.shorewall.net/MultiISP.html ?

After reading " Shorewall includes limited support for multiple Internet
connections. Limitations of this support are as follows:

    * It utilizes static routing configuration. If there is a change in the
routing topology, Shorewall must be restarted."

I prefer staying with my current setup.


To which Tom Eastep replied "So long as it is working to your satisfaction,
I see no reason to change."


Maybe the way I have gone about solving this may assist your situation. 

More Detail: all providers via the one router/firewall interface as
sub-interfaces and each ISP connection cabled to a switch port in the same
VLAN as the external interface. (a little messy but has been doing the job
for 6 months without issues)

Regards,
Trent O'Callaghan


-----Original Message-----
From: Stephen Brown [mailto:[email protected]] 
Sent: Tuesday, 20 July 2010 8:35 AM
To: Shorewall Users
Subject: Re: [Shorewall-users] Multiple internet connections help

Well I'm not really getting anywhere. I've read through the multi-isp
documentation at least 5 or 6 times now and I can't seem to get things to
work no matter what.



------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to