On 07/25/2013 02:09 AM, John Doe wrote:
> From: John Doe <[email protected]>
>
>> From: Tom Eastep <[email protected]>
>>>  On 07/24/2013 09:14 AM, Tom Eastep wrote:
>>>>   You must install and configure LSM (Link Status Monitor).
>>>  And configure all provider interfaces as 'optional'.
> I did configure lsm; but not tried it yet.
> Just wondering about the /etc/lsm/shorewall.conf file.
> It seems that the checkips are set to the ISP gateaways.
> Is that so?
> When we have network issues, the gateway is fine; but the traffic behind is 
> not.
> So can I put something like the IP of google in the 3 ISP sections and it 
> will use the device= to test the correct path?
>
No.

- Each provider must check a separate address.
- For each provider interface, there must be a route to the associated
checked address out of that interface in your main routing table.

One of my providers supplies an on-premises router, so the default
gateway for that provider sits right above my firewall. For that
provider, the address I define to LSM is that of the next hop router for
that provider.

-Tom


-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________


Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to