Larry,
: 192.168.100.0/24 LAN1---eth1 LINUX eth0------ISP1
: | |
: 192.168.200.0/24 LAN2---eth3 eth2------ISP2
:
: eth0 192.168.10.2
: eth2 192.168.20.2
:
: Is this enough if I want all traffic from LAN1 go to ISP1 & LAN2 to ISP2?
: Or do I have to do packet marking? Problems with SNAT?
Yes, indeed.
: echo 100 LAN1 >> /etc/iproute2/rt_tables
: ip rule add from 192.168.100.0/24 table LAN1
: ip route add default via 192.168.10.2 dev eth0 table LAN1
:
: echo 200 LAN2 >> /etc/iproute2/rt_tables
: ip rule add from 192.168.200.0/24 table LAN2
: ip route add default via 192.168.20.2 dev eth0 table LAN2
: ip route flush cache
I think you meant to add the following default route:
ip route add default via 192.168.20.2 dev eth2 table LAN2
Right?
: # SNAT LANs 1 & 2
: iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.10.2
: iptables -t nat -A POSTROUTING -o eth2 -j SNAT --to-source 192.168.20.2
: iptables -A FORWARD -i eth1 -j ACCEPT
: iptables -A FORWARD -i eth3 -j ACCEPT
:
: echo 1 > /proc/sys/net/ipv4/ip_forward
Looks like it should work just fine.
-Martin
--
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com