From owner-freebsd-isp  Mon Jan 28  4:16: 6 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from web20109.mail.yahoo.com (web20109.mail.yahoo.com [216.136.226.46])
	by hub.freebsd.org (Postfix) with SMTP id 4CDAD37B42A
	for <freebsd-isp@freebsd.org>; Mon, 28 Jan 2002 04:15:47 -0800 (PST)
Message-ID: <20020128121544.33045.qmail@web20109.mail.yahoo.com>
Received: from [193.227.212.161] by web20109.mail.yahoo.com via HTTP; Mon, 28 Jan 2002 13:15:44 CET
Date: Mon, 28 Jan 2002 13:15:44 +0100 (CET)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: Lan between two network links
To: freebsd-isp@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello all, a question about splitting a lan between
two different network links.
At this moment we connect the Dmz & Lan of our network
to a 2 Mbit link isp via a
FreeBSD bridge/Firewall & Nat/Firewall:

      190.20.20.1
Isp--------Router---FBSD 
    2Mbit     |     Bridge----DMZ 
              |            (190.20.20/128)
              |
              |____ FBSD 
                    NAT--Linux 
                         Proxy---LAN 
                                (192.168.1.x)

The 2Mbit link is free since reaced some amount of
traffic, then we pay
for the exceeding traffic.
Our managers wants to buy a second link, adsl, slower
but cheaper to use in addition to
the 2Mbit link to reduce the costs when the 2Mbit
reaces the traffic limit.
Some users can still use the 2 Mbit and the others
goes on the adsl based on something
like acl.
And if the 2Mbit goes down, there is the adsl who can
take care of the Dmz as a backup.
So to have this setup:

      190.20.20.1
Isp1--------RouterA---FBSD 
    2Mbit     |       Bridge----DMZ 
              |              (190.20.20/128)
              |
              |____ FBSD 
                    NAT--Linux 
                         Proxy---LAN 
                                (192.168.1.x)

        212.20.20.1
Isp2-----RouterB--------?????

Is there a way to do such a thing?
We thought about proxy(squid on Linux) to give
different gateways at the Lan based on acls.
Then we thought about building a router between th two
networks, but how to decide to use a link
instead of another?
Traffic shaping? is dummynet or others on FreeBSD good
to do such a thing? or Iproute on Linux?
Any suggestion would be appreciated.
Thanks

______________________________________________________________________

Dillo con una cartolina!
http://it.greetings.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message