> On 20 Jul 2017, at 18:15, Tom Eastep <teas...@shorewall.net> wrote:
> 
> On 07/20/2017 03:59 AM, andreil1 wrote:
>> 
>> 
>>> On 20 Jul 2017, at 13:33, Simon Hobson <li...@thehobsons.co.uk> wrote:
>>> 
>>> andreil1 <andre...@starlett.lv> wrote:
>>> 
>>>> shorewall disable LTC1  <— Doesn’t work
>>>> 
>>>> ERROR: LTC1 is not an optional provider interface: Firewall state not 
>>>> changed
>>>> /usr/share/shorewall/lib.common: line 93: 28414 Terminated              
>>>> $SHOREWALL_SHELL $script $options $@
>>>> 
>>>> Should I mark both providers (main LTC1 and failover backup BTC2) as 
>>>> optional ?
>>> 
>>> 
>>> Possibly, but looking at http://shorewall.org/MultiISP.html it says that 
>>> option has been deprecated and moved to the interfaces file.
>> 
>> Added to interfaces, now I can disable LTC1.
>> However, no traffic go through BTC2 in any case.
>> 
>> What could be the problem ?
>> 
> 
> You need the 'fallback' option on BTC2. I also suggest that you set the
> 'persistent' option on both interfaces.
> 

Thanks for help, Tom.
Only this config work, removing “balance=1” for whatever reason stopping 
traffic on 5.1.4.3.
I can’t find any explanation...

LTC1    1   0x1         -       eth0            xx.xx.xx.xx   
track,persistent,balance=1                -
BTC2    2   0x2         -       eth1            yy.yy.yy.yy     
track,persistent,fallback       -


> Finally, I wonder why you don't just use FOOLSM. It is well tested and
> does exactly what you want.
> 
> -Tom
> -- 
> Tom Eastep        \   Q: What do you get when you cross a mobster with
> Shoreline,         \     an international standard?
> Washington, USA     \ A: Someone who makes you an offer you can't
> http://shorewall.org \   understand
>                      \_______________________________________________
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot_______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to