[LARTC] 3 nic -s, 1 lan, 2 internet connections, ip based routing andgateway problems.

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Hello.

I have problem to solve, redhat 6.3 based linux router, 3 network
cards,
eth1, 192.168.10.1 connected to switch, eth0 213.180.9.x connected to
one adsl bridge and eth0 213.34.9.x connected to another adsl bridge.

Group one ---|        
|        
        
         
      | eth0 213.180.9.x
                 
| HUB  | --- eth1 192.168.30.1 |
Group two ---|   
|     
                        
| eth2 213.34.9.x


So one internal subnet, users from group one (192.168.10.2, 
192.168.10.3,  192.168.10.4,  192.168.10.5) are allowed use
eth0 and users from group two 192.168.10.10,  192.168.10.11, 
192.168.10.12,  192.168.10.13 are allowed to use eth2 for internet
connection, no load balancing etc is needed, the idea is just one router
for two separate companies. So i made iptables nat rules:

$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.2 -j SNAT
--to-source 213.180.9.x
$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.3 -j SNAT
--to-source 213.180.9.x
$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.4 -j SNAT
--to-source 213.180.9.x
$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.5 -j SNAT
--to-source 213.180.9.x

$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.10 -j SNAT
--to-source 213.34.9.x
$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.11 -j SNAT
--to-source 213.34.9.x
$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.12 -j SNAT
--to-source 213.34.9.x
$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.13 -j SNAT
--to-source 213.34.9.x

But now i have routing problems, as both internet connections are
default route and i can use only one settings in 
/etc/syscondig/network:

GATEWAY="213.180.9.x"
GATEWAYDEV="eth0"

Then i found
http://lartc.org/howto/lartc.rpdb.multiple-links.html
but seems this is not 100% what i need, as there is no internal network interface included and routing is possible to network, not ip based. 

Is it possible to get it work at all, and if so, then how?


--

Mart Pirita

--

Mart Pirita

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux