Shorewall users - Aug 2005 - Two ISP Configuration

----- Original Message ----- 
  From: KERNEL-Edgardo Pannunzio 
  To: Andrés Segovia 
  Sent: Wednesday, August 03, 2005 5:28 PM
  Subject: [Fwd: Fw: Router]




  Hi

  I have two Internet connections from two different ISPs. Connection
"A" is ADSL, connection "B" is another kind of broadband
connection (LMDS). In the ADSL link I have 1 public ip which changes
dynamically, and in the "B" connection I have 28 fixed public
IP''s that I can use. Each of them come into my network through a
standard Ethernet 10BaseT connection.

  I would like to have the following configuration:


   1. A few users will be assigned public IPs (belonging to the "B"
connection).

  2. The rest of the users will be assigned private IPs, and their traffic will
go out using NAT
  3. I want to route some of the users which have private IPs through conection
"A" (ADSL) and other users having private IPs through the
"B" connection (kind of static balance of the traffic).

  4. If there is no Internet connectivity through the "B" connection,
I want that all the users with private IPs, be automatically routed through the
"A" (ADSL) link.

  Is it possible to carry out this configuration using Shorewall ?
  If it is  possible, please give me a hint on how to accomplish each point ?


  Thanks and best regards,

  Andrés

>  Hi
>
>  I have two Internet connections from two different ISPs. Connection
"A" is ADSL, connection "B" is another kind of broadband
>connection (LMDS). In the ADSL link I have 1 public ip which changes
dynamically, and in the "B" connection I have 28 fixed >public
IP''s that I can use. Each of them come into my network through a
standard Ethernet 10BaseT connection.
>
>  I would like to have the following configuration:
>
Start here:
http://www.shorewall.net/shorewall_setup_guide.htm
>   1. A few users will be assigned public IPs (belonging to the
"B" connection).
You have your choice of 1 to1 nat or proxyarp
http://www.shorewall.net/ProxyARP.htm
http://www.shorewall.net/NAT.htm
>  2. The rest of the users will be assigned private IPs, and their traffic
will go out using NAT
That would be masq (many to 1 nat) in the docs.
>  3. I want to route some of the users which have private IPs through
conection "A" (ADSL) and other users having private IPs
> through the "B" connection (kind of static balance of the
traffic).
http://www.shorewall.net/Shorewall_and_Routing.html
Use the tcrules file to mark the traffic as required.
>  4. If there is no Internet connectivity through the "B"
connection, I want that all the users with private IPs, be automatically routed
>through the "A" (ADSL) link.
That is do-able, need to do some scripting on your part, as you would need to
un-do what you have done above in the tcrules file.
>  Is it possible to carry out this configuration using Shorewall ?
yes.  
> If it is  possible, please give me a hint on how to accomplish each point ?
Read the links, then all the docs, get shorewall setup and then you can work on
part 4.
There is a couple of ways to do this, but that is for another day, OK?

Jerry 






-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing
& QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf