Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Jun 2004 19:47:19 +0200
From:      Rene de Vries <rene@canyon.xs4all.nl>
To:        "Mitch (bitblock)" <mitch@bitblock.com>
Cc:        'Joe Hamelin' <joe@nethead.com>
Subject:   Re: 2 adsl connections load balancing with natd/ipfw
Message-ID:  <8EBC1C3A-B7E1-11D8-BD82-00039357FA7A@canyon.xs4all.nl>
In-Reply-To: <GMEEINAOJAINFLGLEJNFKEHJCIAA.mitch@bitblock.com>
References:  <GMEEINAOJAINFLGLEJNFKEHJCIAA.mitch@bitblock.com>

index | next in thread | previous in thread | raw e-mail

Mitch,

Why so complicated.

Simply start two different natd instances one for each ADSL line. Make 
one of the ADSL lines the default route. Then based on the source 
address (just modified by natd) fast-route traffic which tries to leave 
via the default route over the wrong interface to the other interface's 
next hop (using ipfw).

You could apply various methods of determining over which ADSL line the 
traffic will leave, e.g. source port, source address, dest address 
etc...

This solution doesn't require provider assistance and would even work 
when you have two different providers.

René

On May 26, 2004, at 2:59, Mitch (bitblock) wrote:

> Hey David - didn't see your reply before I replied to Joe there - any 
> more
> info appreciated - I have both ends of the solution (I think) - just 
> need to
> know the best way to config!
>
> Consider these ip's and interfaces... what do I do? Is ISPF lighter 
> weight
> than BGP (considering the limited deployment?)
>
> Client A <-----\
>     X.X.X.2     \
>                  ----------> Router <------------->
>                  / / X.X.X.1         X.X.Y.2
>       X.X.X.3   / /
> Client B <-----/ /
>          <------/
>       X.X.X.4
>
> Router is FreeBSD based, and Client A and Client B are also FreeBSD 
> based,
> and have a second interface to the internal networks at Client A and 
> Client
> B.
>
> I'm wondering if my other problem (the fact that Client A can't see 
> Client B
> as there is an ATM path for it to Router, but as Client B's addresses 
> are on
> the same subnet, and not bounced off the Router (and there is no 
> direct ATM
> path) there is no connection...
>
> Any help or advice greatly appreciated.
>
> Thanks.
>
> m/
>
>> -----Original Message-----
>> From: owner-freebsd-isp@freebsd.org
>> [mailto:owner-freebsd-isp@freebsd.org]On Behalf Of David J. Hughes
>> Sent: Tuesday, May 25, 2004 4:08 PM
>> To: 'Joe Hamelin'; freebsd-isp@freebsd.org
>> Subject: RE: 2 adsl connections load balancing with natd/ipfw
>>
>>
>>
>> Actually, that isn't quite correct.  You do not need a virtual IP
>> address (such as an HSRP or VRRP setup).  You just need equal cost
>> paths from the ISP to you.
>>
>> To achieve this you will need to route an address range from your
>> ISP to your network.  It can be your address space, a small piece
>> of ISP provided space, or even a chunk of private space.  Just as
>> long as it's routed from the ISP to you via the DSL tails.  The
>> ISP just needs to see equal cost paths to your prefix via BOTH
>> your DSL tails.  That way they will use both.
>>
>> There are several ways to do this (inc running eBGP or OSPF to them
>> from your equipment).  Have a chat with your ISP to see what options
>> they would consider.
>>
>>
>> David
>
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
>
-- 
René de Vries <rene@tunix.nl>
Tunix Internet Security & Training


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8EBC1C3A-B7E1-11D8-BD82-00039357FA7A>