This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

V5 builds the Routing Table not correct

I have installed ASL 5.001 with 3 public interfaces which all are connected with a Cable modem.
All 3 public interfaces are set to "Assign by DHCP" and on the first public interface I've also set the Gateway to "Assign by DHCP".
After a reboot or when ASL rebuilds the Routing Table at all I can't connect to the internet because my ASL hast the following Routing Table:
Code:


Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.2.0     *               255.255.255.0   U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
217.162.104.0   *               255.255.254.0   U     0      0        0 eth4
loopback        *               255.0.0.0       U     0      0        0 lo

Then when I type this commands on the console (where the eth2 is the public interface with the Gateway and eth4 is the third public interface):

Code:


1. route del -net 217.162.104.0/23 eth4
2. route add -net 217.162.104.0/23 eth2
3. route add -net 0.0.0.0 gw 217.162.104.1

Then the Routing Table shows right and I can connect to the Internet with out any problems until ASL rebuild the Routing Table again automatically:
Code:


Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.2.0     *               255.255.255.0   U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
217.162.104.0   *               255.255.254.0   U     0      0        0 eth2
loopback        *               255.0.0.0       U     0      0        0 lo
default         217.162.104.1   0.0.0.0         UG    0      0        0 eth2

I think this is a Bug in the V5...!

jfeller

This thread was automatically locked due to age.

Parents

0 jfeller over 21 years ago

nobody a suggestion ?!

please help me !...
Cancel
Vote Up 0 Vote Down

Cancel
0 gnujuba over 21 years ago in reply to jfeller

try to explain your setup for us:
three "external" nics and one cable modem ? how are they connected ?
is it possible to get more than one public ip from your provider?
asuming you get three public ips on all external nics from your provider, what should the routing table look like ? three different default gws or the same gw for all ?
what about nat, what interface should be used ...
greets,
gnjb
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to gnujuba

Ok I would try it...

My Setup is the following:


                                                                                     |------eth2-
   ISP------------------------Cablemodem-------HUB-------|------eth3- ASL with a 4 Port NIC
(Provides me 4                                                              |------eth4-
public dynamic IP's)

The Interface configuration of ALS:

eth2 (WAN1):
IP Address and Netmask: Assign by DHCP
Gateway: Assign by DHCP

eth3  (WAN2):
IP Address and Netmask: Assign by DHCP
Gateway: None

eth4  (WAN3):
IP Address and Netmask: Assign by DHCP
Gateway: None

There is also the same Gateway for all three interfaces.

When Astaro obtain the public IP's via DHCP on eth2, eth3, eth4 the routing table is like this:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.2.0     *               255.255.255.0   U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
217.162.104.0   *               255.255.254.0   U     0      0        0 eth4
loopback        *               255.0.0.0       U     0      0        0 lo

there is no default gateway so I can't access on the internet.
After I set the default Gateway manually all just work fine and the routing table looks like this:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.2.0     *               255.255.255.0   U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
217.162.104.0   *               255.255.254.0   U     0      0        0 eth2
loopback        *               255.0.0.0       U     0      0        0 lo
default         217.162.104.1   0.0.0.0         UG    0      0        0 eth2

I've configured different NAT rules for forwarding  ports to three different  Servers in the DMZ.
(1 Server = 1 Public IP, that’s means: WAN1 -> Server 1, WAN2 -> Server 2, WAN3 -> Server3)

I hope you can understand my bad English...  [:$]

jfeller
Cancel
Vote Up 0 Vote Down

Cancel
0 ref over 21 years ago in reply to jfeller

hmm... is there a specific reason why you want to use dhcp on the internal interfaces? i guess you have a range excluded from dhcp that is used for servers and routers or switches. couldnt you use fixed ip-addresses belonging to this range? theoretically your attempt should work, but it is very uncommon.

btw... how do you handle the default gateway for internal computers that should use this firewall to acces internet? how do you assign them the dynamic address the firewall currently uses?
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to ref

I don't use DHCP on the internal interface.
The internal interface has a static IP Address but I use DHCP on three external interfaces...
Cancel
Vote Up 0 Vote Down

Cancel
0 Manctastic over 21 years ago in reply to jfeller

I get the same problem using dhcp on an external interface.

Repeatedly bringing the interface up and down fixes the problem eventually.
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to Manctastic

Eventually yes but when Astaro obtains automatically a new IP then my Server are offline until I have time to fix the problem and I really don't like that...
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to jfeller

What say the Astaro Guys to that problem?!
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to jfeller

I've just updated to Version 5.003 and I've still the same problems.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 jfeller over 21 years ago in reply to jfeller

I've just updated to Version 5.003 and I've still the same problems.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 jfeller over 21 years ago in reply to jfeller

Hey!!!!
The Problem with the routing table is still there!!

But I still don't became an explanation for this Problem (first of all from Astaro)!
So I see not really a support for my problem!!
In this case I can absolutely not recommend Astaro to the Clients of the company where I work and I will be forced to use a other Firewall!!!

When there is really no solution or workaround for my configuration then I'll used Astaro today for the last time!!!!!!!
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 21 years ago in reply to jfeller

Have you tried emailing support ?
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to Simon Shaw

No, not yet
How is the E-Mail address for support ?
I don't think its sales@astaro.com or is it?
Cancel
Vote Up 0 Vote Down

Cancel
0 Mike_H over 21 years ago in reply to jfeller

Hey, don't have a go at us on the board if you don't want to use the proper support procedure. We will try and help you if we can.

for support from Astaro you can got to their website:
http://www.astaro.com/php/support.php?lang=gb

have you also checked out the manual?
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 21 years ago in reply to Mike_H

Hi,
maybe my question sounds stupid in the first look but :

are you shure that the right lines are connected to the configured Interfaces?

And by the way this is a forum where user helps user if you have problems in evaluating the product you can try to get help here but the right way should be to contact astaro there are people to help you for shure.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 jfeller over 21 years ago in reply to Mike_H

OK! I've send now a support request to Astaro...
Sorry about my reaction...!
Cancel
Vote Up 0 Vote Down

Cancel