After endless tries the only way that I have managed to feed zebra routes into kernel is .. #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY OPTIONS COPY ISP1 1 0x100 main vlan10 10.0.11.1 track,loose - ISP2 2 0x200 main vlan11 10.0.12.1 track,loose -

and
in shorewall.conf
USE_DEFAULT_RT=No

In particular when the duplicate column is empty thus '-' causes a lot of problems

Final Question is ... Is SHOREWALL compatible with networking suites like quagga - ZEBRA ... Or it completely ignores the other partners in the system and bosses - messes around things ??
Regards Thanks

On 12/09/2013 10:28 μμ, johnny bowen wrote:
Does vlan11 go down down when you stop zebra? If it does try adding "optional" to the interface:
vlan11        eth?        detect        optional




On Thu, Sep 12, 2013 at 8:11 AM, HL <[email protected] <mailto:[email protected]>> wrote:

    Hey all,

    I am setting up a new Firewall with

    Shorewall Version 4.5.20
    iptables v1.4.18
    Kernel 3.10.10
    perl  v5.16.3
    v6.19, protocol version: 6
    quagga 0.99.22.3

    providers file is
    ISP1    1    0x100    -        vlan10        10.0.11.1 track,loose
        -
    ISP2    2    0x200    -        vlan11        10.0.12.1 track,loose
        -

    in shorewall.conf

    USE_DEFAULT_RT=Yes
    MULTICAST=Yes

    On the same host zebra is running and I've just inserted some default
    static routes like

    ip route 3.3.3.3/32 <http://3.3.3.3/32> 10.0.12.1

    After shorewall is started  *and* zebra is restarted
    zebra cannot inject static routes into the kernel anymore ..
    vtysh -c "show ip route" shows

    S 3.3.3.3/32 <http://3.3.3.3/32> [1/0] via 10.0.12.1 inactive

    and linux ip route command does not show the route at all ..

    I have another Firewall with shorewall 4.4.27.3
    running bgp and zebra
    with no such problems

    Please Advise
    Regards
    Harry



    
------------------------------------------------------------------------------
    How ServiceNow helps IT people transform IT departments:
    1. Consolidate legacy IT systems to a single system of record for IT
    2. Standardize and globalize service processes across IT
    3. Implement zero-touch automation to replace manual, redundant tasks
    http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
    _______________________________________________
    Shorewall-users mailing list
    [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/shorewall-users




------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk


_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to