Well, a few days and a couple of installs later, I have a successful configuration, but I am having an issue with my iptables setup.
As I am new to the routing scene, I wondered if there was someone who would be able to help point me in the right directions. I have a LAN router setup running CentOS 4.2, this box has 4 nics in it. Ips are as Follows. 192.168.19.1 (primariy WAN route) 192.168.20.1 (secondary WAN route) 192.168.21.1 (default PCLAN) 192.168.22.1 (VOIP LAN) 2 Firewalls (pfsense 9-18-06 release) IP FW1 192.168.19.2 IP FW2 192.168.20.2 It should flow as such LAN GW ROUTER GW IP OF FIREWALL 192.168.21.1 -> 192.168.19.1-> 192.168.19.2-> Internet 192.168.22.1 -> 192.168.19.1-> 192.168.19.2-> Internet If this fails it switches the gateway on the linux router to this LAN GW ROUTER GW IP OF FIREWALL 192.168.21.1 -> 192.168.20.1-> 192.168.20.2-> Internet 192.168.22.1 -> 192.168.20.1-> 192.168.20.2-> Internet But, my users need to access this type of setup from Internet SERVERs LAN GW ROUTER GW IP OF FIREWALL 192.168.21.10 <-192.168.21.1 <-192.168.19.1 <-192.168.19.2 <-Internet 192.168.22.10 <-192.168.21.1 <-192.168.19.1 <-192.168.19.2 <-Internet SERVERs LAN GW ROUTER GW IP OF FIREWALL 192.168.21.10 <-192.168.21.1 <-192.168.20.1 <-192.168.20.2 <-Internet 192.168.22.10 <-192.168.21.1 <-192.168.20.1 <-192.168.20.2 <-Internet Without switching the Router's default gateway. Currently I have a Firewall sitting on the Primary WAN connection as well as one on the secondary Wan connection (2 physical Firewalls). There are a few problems which I have not been able to overcome. I have been successful in getting ipfwd working, but now have noticed a new issue. The goal internally was to allow the primary link to fail and then have our internet connection switch to the secondary wan route. (I have to do this through a script since I technically have a network between my primary fw and my secondary fw. (this doesn't usually go down!). This I think is easy enough, my Script will adjust the default route internally for this to be routed out. HOWEVER,,,,,, Our office uses a report server they have to be able to hit from the outside of our network when on the road. We have a Port forward setup on the firewalls to forward into the internal port on the server they need to access. But, the problem is, from the outside, users can only hit and access the firewall which is currently the default route for the internal network to get out. The firewall can ping from its internal interface all of the internal networks, but we can't seem to get through otherwise. I would be happy to detail more information if needed, but I wondered if there was someone who would be able to lead me to a configuration which might allow this setup to work. -- Heath Henderson [EMAIL PROTECTED] 1800 288 7750 -- --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
