Problem sa dva gateway-a

Poštovani.

Imam slijedeci problem imam ruter MikroTik RB 1100 i na njemu postavljene dvije ip adresa od dva razlicita provajdera na gateway 1 imam izrutiran samo nat i samo 1 javnu ip adresu a na gateway 2 imaM izrutiranih 64 javne ip adrese alio kako god podesim ruter on mi mijesa gateway kako da rijesim ovaj problem.

A kako hoces da radis loadbalancing ? Najlakse je recimo da podelis korisnike u dve grupe na dva linka i radis nat na oba linka...

U Mangle PREROUTING kazes: src adrese recimo 172.29.10.0/24 mark-routing link1, src addrese 172.29.20.0/24 mark-routing link2
U NAT kazes: routing-mark link1 nat-to adrese od provajedera 1, routing-mark link2 nat-to-adreses-range provajdera2
U routes kazes: mark-routing link1 to-table link1, mark-routing link2 to-table link2
U table link1 stavi kao default rutu gateway ISP1, u table link2 stavi kao default rutu gateway ISP2

//end :)

Ovakva konfiguracija nema failover i slicne stvari vec samo rutira korisnike. Prebacivanje korisnika sa jednog linka u drugi radis u mangle-u i nista vise ne menjas.

Okvirni konf:

/ ip firewall mangle
chain=prerouting src-address=172.29.10.0/24 dst-address=0.0.0.0/0 action=mark-routing new-routing-mark=link1 passthrough=no
chain=prerouting src-address=172.29.20.0/24 dst-address=0.0.0.0/0 action=mark-routing new-routing-mark=link2 passthrough=no

/ ip firewall nat
add chain=srcnat routing-mark=isp1 action=src-nat to-addresses=192.168.1.20 to-ports=0-6553 disabled=no
add chain=srcnat routing-mark=isp2 action=src-nat to-addresses=192.168.2.20 to-ports=0-65535 disabled=no

/ ip route rule
add routing-mark=isp1 action=lookup table=isp1 comment="" disabled=no
add routing-mark=isp2 action=lookup table=isp2 comment="" disabled=no

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 routing-mark=isp1 disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=255 target-scope=10 routing-mark=isp2 disabled=no

:)

E sad... ako hoces neki failover dzabulevodesnoperverzije moze i to da se napravi :)
Samo trebas da budes precizan sta hoces :)

Poz

Potpis

::www.kladovo.net ::

Pozdrav

Pokusao sam sa ovakvom konfiguraciom ali nisam uspio :( jel imate neki kontakt da mi malo pomognete oko ovog platicu.

Hm... mora da radi ovaj konf. Proveri jos jednom da li si sve prekucao kako treba.
Vidim da mi nedostaje broj 5 u port-range za prvi ISP (65535 treba da bude).

Izmangluj tvoj IP prvo u grupu ISP1, a posle u grupu ISP2 i poshalji traceroute da vidimo gde zapinje.

poz

Trebao bi izlaziti na internet kroz dva razlicita linka:

#1:
traceroute to 212.124.160.1 (212.124.160.1), 30 hops max, 212 byte packets
1 172.29.203.254 0.259 ms 0.327 ms 0.320 ms
2 212.200.113.129 2.177 ms 2.623 ms 2.866 ms
3 79.101.99.157 3.944 ms 4.019 ms 4.009 ms
4 212.200.233.41 10.316 ms 10.268 ms 10.255 ms
5 212.200.232.69 9.734 ms 9.806 ms 9.788 ms
6 212.200.6.98 9.824 ms 10.603 ms 212.200.227.253 10.327 ms
7 212.200.227.245 9.724 ms 195.178.34.22 10.466 ms 212.200.227.245 10.152 ms
8 195.178.34.22 10.252 ms 9.764 ms 9.773 ms
9 212.124.160.1 10.216 ms 10.133 ms 11.110 ms

#2
traceroute to 212.124.160.1 (212.124.160.1), 30 hops max, 60 byte packets
1 212.200.113.249 0.187 ms 0.235 ms 0.224 ms
2 212.200.113.129 3.163 ms 3.328 ms 3.579 ms
3 212.200.236.93 18.940 ms 18.962 ms 18.947 ms
4 212.200.232.49 11.379 ms 11.531 ms 11.506 ms
5 212.200.227.226 10.187 ms 212.200.227.238 11.451 ms 11.440 ms
6 195.178.34.22 11.379 ms 11.128 ms 212.200.227.245 10.894 ms
7 195.178.34.22 10.981 ms 10.510 ms 212.124.160.1 10.629 ms


_{[Ovu poruku je menjao zivanicd dana 15.03.2011. u 14:11 GMT+1]}

Potpis

::www.kladovo.net ::