Hi, i´ve several gateways to INET, all linux with NAT and adsl.

I need redundant way to INET.

Graph:

+--------+     +---------+   +----------+     +--------------+
| INET 1 |-----| LINUX 1 |-+-| switch 1 |--+--| master swtch |
+--------+     +---------+ | +----------+  |  +--------------+
|               |
+-------+                  |               |
| LAN 1 |------------------+               |
+-------+                                  |
|
+--------+     +---------+   +----------+  |
| INET 2 |-----| LINUX 2 |-+-| switch 2 |--+
+--------+     +---------+ | +----------+  |
|               |
+-------+                  |               |
| LAN 2 |------------------+               |
+-------+                                  |
|
+--------+     +---------+   +----------+  |
| INET 3 |-----| LINUX 3 |-+-| switch 3 |--+
+--------+     +---------+ | +----------+
|
+-------+                  |
| LAN 3 |------------------+
+-------+

Master switch (private segmens, with static route):

LAN 1:
switch:
  port 1 (master switch conection)
  port 2 1.1.2.200/24
LINUX 1:
  eth0 1.1.2.1/24 (to LAN swtich)(mascarade)
  eth1 10.1.1.1/24 (LAN)
  eth2 (dinamic) (to INET)(mascarade)
ROUTE:
  route add default dev eth2
  route add -net 11.0.0.0 netmask 255.0.0.0 gw 1.1.2.200
  route add -net 12.0.0.0 netmask 255.0.0.0 gw 1.1.2.200

LAN 2:
switch:
  port 1 (master switch conection)
  port 2 1.1.3.200/24
LINUX 1:
  eth0 1.1.3.1/24 (to swtich)(mascarade)
  eth1 11.1.1.1/24 (LAN)
  eth2 (dinamic) (to INET)(mascarade)
ROUTE:
  route add default dev eth2
  route add -net 10.0.0.0 netmask 255.0.0.0 gw 1.1.3.200
  route add -net 13.0.0.0 netmask 255.0.0.0 gw 1.1.3.200

LAN 3:
switch:
  port 1 (master switch conection)
  port 2 1.1.4.200/24
LINUX 1:
  eth0 1.1.4.1/24 (to swtich)(mascarade)
  eth1 12.1.1.1/24 (LAN)
  eth2 (dinamic) (to INET)(mascarade)
RUTEO:
  route add default dev eth2
  route add -net 11.0.0.0 netmask 255.0.0.0 gw 1.1.4.200
  route add -net 12.0.0.0 netmask 255.0.0.0 gw 1.1.4.200

NOTE: the ifaces ETH1 of the all LINUX´s have diferent segments, in order to
be able to communicate between the LAN´s.

I believe that this whole.

Any thing requests to me.

Thank very much.

Alejandro Sager
System Engineer
Goberment of Santa Fe
Argentina

_________________________________________________________________
Charla con tus amigos en línea mediante MSN Messenger:
http://messenger.yupimsn.com/