Re: Advice on multiple interfaces

Jerry Vonau
2006-02-18T02:25:45Z

Chris Mason (Lists) wrote:
>
>> Why don''t you start with posting what you propose to run in
the
>> configuration files and some clearly stated objectives?
>
>
> I''m really looking for more general observations and experiences
on the
> kind of installation I am attempting and listed at the start of the post
> before I get into specific configurations. If  I don''t know which
> approach is the right one there''s little point editing the
configuration
> files.
> I will elaborate below.
>
>>
>> Just a heads up, having more that one dynamic ip address could be
>> problematic.
>
> Although the CATV feed ip is dynamic once the IP has been obtained via
> dhcp the techs at Cable TV are reserving it for me and binding it to the
> MAC address, so I am treating is as static. This is because their system
> does not allow them to provision a static IP.

Like I said, 2 or more dhcp assigned addresses are a problem, have look
at this thread in the email archives "Shorewall with multiple providers
- basically three-in-one" started by Russel, who replied to you also. In
short dhcp replaces the default gateway. I have some patches that work
around that, based on fedora''s init layout. I submitted them to
fedora''s
bugzilla as an enhancement.
>
>
> The Setup
> LAN - 192.168.0.0/24 - guest and office worker computers, servers.
> ISP1: Static IP, Fixed guaranteed bandwidth, expensive, want to keep for
> VOIP.
> ISP2: ADSL, dhcp, cheap, want to route outgoing browsing traffic so
> guests and staff do not load ISP1.
> ISP3: Cable internet, reserved IP, cheap, lousy quality, want to serve
> internal webcam on it.
>
> The Objectives:
> Incorporate three ISP feeds to the firewall.
> Allow no browsing traffic over ISP1 to conserve the bandwidth
> Install Squid proxy and route Squid traffic through ISP2
> Traffic shape or QOS
>
> Note:  dynamic load balancing is not an objective, static load balancing
> is preferred.
>
> The issues
> Should I use the providers configuration options or is that for load
> balancing similar feeds?

You''ll need to use the providers file, to setup the advanced routing
tables and "ip rules", or do it in your own script.

> Can I have a default route through ISP1 then route specific traffic,
> i.e. http, out specific interfaces, is that a better approach than the
> providers file?
>
How did you plan on doing that without the advanced routing tables?
No, from experence you''ll need to have a multi-hop gateway anyway, and
then use fwmarks to tag the traffic as needed. The tcrules file will
setup the fwmarks for you.

> General approach questions.
>
General answers.

Jerry