Re: [Astlinux-users] WAN Bridge interface

2022-02-03 Thread Michael Knill
Thanks David Regards Michael Knill From: David Kerr Reply to: AstLinux List Date: Thursday, 3 February 2022 at 7:51 pm To: AstLinux List Subject: Re: [Astlinux-users] WAN Bridge interface If you are looking for redundancy on the WAN uplink then the way to do it is with bonded interfaces not

Re: [Astlinux-users] WAN Bridge interface

2022-02-03 Thread David Kerr
If you are looking for redundancy on the WAN uplink then the way to do it is with bonded interfaces not bridged interfaces, assuming the other end supports bonds (also known as Link Aggregation) then the network layer will take care of it all. Astlinux out-of-the-box does not support bonded interf

Re: [Astlinux-users] WAN Bridge interface

2022-02-02 Thread Michael Knill
Hi Lonnie It's the firewalls that are configured for failover using FireCluster. They use VRRP as I just found out: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/ha/cluster_ap_cluster_id_wsm.html?Highlight=firecluster%20mac%20address Regards Michael Knill On 3/2

Re: [Astlinux-users] WAN Bridge interface

2022-02-02 Thread Lonnie Abelbeck
Interesting, but I don't quite understand how the upstream multihomed link works. If the AstLinux WAN bridge interface has a static IP and gateway, how is this a failover situation ... unless like you mentioned a VRRP (keepalived) setup. Is the AstLinux static gateway IP ARP'ing to different MA

Re: [Astlinux-users] WAN Bridge interface

2022-02-02 Thread Michael Knill
It's a static address with the gateway address shared on the firewalls as active and standby. Not sure if they have a virtual address like VRRP but doesn't make any difference from Astlinux's perspective. I did some testing and all seemed to work. Its on a Qotom box so I assume performance shoul

Re: [Astlinux-users] WAN Bridge interface

2022-02-02 Thread Lonnie Abelbeck
Hi Michael, It would be a special case where you would want the WAN to be a bridge interface. How is the WAN interface's IP address defined? I'm not sure how your two WAN trunks are routed to your bridge interface. But, if a 2-port ethernet switch would work, so should a 2-interface linux bri

[Astlinux-users] WAN Bridge interface

2022-02-02 Thread Michael Knill
Hi Group I have set up two ports on my Astlinux box into a bridge and allocated to the WAN interface. These ports are connected behind a primary and failover Watchguard firewall as a DMZ interface. The LAN interface connects to the Voice VLAN making this system a VPN router only for about 70 ph