I have a script for dual internet connections that does this:
-------------------------
#!/bin/bash
IF1=eth1
IP1=203.219.190.106
P1=203.219.190.105
P1_NET=203.219.190.104
IF2=eth2
IP2=220.245.224.46
P2=220.245.224.45
P2_NET=220.245.224.44
IF0=eth0
P0_net=192.168.0.0
TABLE1=inet1
TABLE2=inet2
ip route add $P1_NET dev $IF1 src $IP1 table $TABLE1
ip route add default via $P1 table $TABLE1
ip route add $P2_NET dev $IF2 src $IP2 table $TABLE2
ip route add default via $P2 table $TABLE2
ip route add $P1_NET dev $IF1 src $IP1
ip route add $P2_NET dev $IF2 src $IP2
# preference for default route
ip route add default via $P1
# route out a given table choose what table to route with
ip rule add from $IP1 table $TABLE1
ip rule add from $IP2 table $TABLE2
ip route add $P0_NET dev $IF0 table $TABLE1
ip route add $P2_NET dev $IF2 table $TABLE1
ip route add 127.0.0.0/8 dev lo table $TABLE1
ip route add $P0_NET dev $IF0 table $TABLE2
ip route add $P1_NET dev $IF1 table $TABLE2
ip route add 127.0.0.0/8 dev lo table $TABLE2
#route balancing
ip route add default scope global nexthop via $P1 dev $IF1 weight 1
nexthop via $P2 dev $IF2 weight 1
-----------------------
its taken straight from the lartc howto.
however, it doesn''t appear to be route balancing at all. I have kernel
2.4.27 with the extra route balancing patches from this page:
http://www.ssi.bg/~ja/#routes
Traffic into the second interface (IF2) works fine, even portforwards
through that interface work fine. You can ping it from out side etc.
However, no traffic from inside the network ever appears to be nated
out from it, nor does traffic originating from the router box ever go
out over that interface.
Is there some weight better than 1 that I need to adjust? What are
useful values to balance the routes evenly over the two interfaces? Or
is there something I am missing.
btw, the network diagram looks exactly like this one:
http://www.lartc.org/howto/lartc.rpdb.multiple-links.html
is there some proc magic I can query to check the kernel has all the right bits?
Here is the iptables stuff:
iptables -L -n -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
net_dnat all -- 0.0.0.0/0 0.0.0.0/0
net_dnat all -- 0.0.0.0/0 0.0.0.0/0
loc_dnat all -- 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
eth1_masq all -- 0.0.0.0/0 0.0.0.0/0
eth2_masq all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain eth1_masq (1 references)
target prot opt source destination
MASQUERADE all -- 192.168.0.0/24 0.0.0.0/0
Chain eth2_masq (1 references)
target prot opt source destination
MASQUERADE all -- 192.168.0.0/24 0.0.0.0/0
(its shorewall)
thanks
Dave
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
