Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 953 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro Uplink-Balancing Multipath

dr0n
Hi Guys, I hope someone can shed some light on this issue I am having.

I am running Astaro 7.510 and I have the following interfaces:

eth0        - Internal Network
eth1        - External DSL
eth2        - External T1
eth4.400 - Internal VLAN 400
eth4.500 - Internal VLAN 500
eth4.600 - Internal VLAN 600 (Private WiFi)
eth4.700 - Internal VLAN 700 (Public WiFi)

I have Uplink-Balancing enabled via Multipathing for eth1 and eth2, hierarchically T1 is set as the primary and DSL below it.

The problem I am experiencing is the following:

All nodes on the network is accessing the DSL first and disregarding the T1.
VLAN600 is the only network that can go out to the internet using the T1

Under Masquerading, I have all interfaces pointing to the Uplink interface and I pointed VLAN700 to use the External T1.

When I have this setting, the laptop connected on VLAN700 cannot access the internet at all. If i change the masquerading to the DSL, or Uplink the laptop goes out on the internet using the DSL.

I am new to Astaro so I don't know much about troubleshooting this issue. I would like to thank everyone in advance for your input as this is driving me insane.

Thank you,

Darren D


This thread was automatically locked due to age.
Parents
  • 0
    Hi Ulrich,

    Thank you for your response. There aren't any multipath rules configured. But I think my main concern is when I change the masquerading to point directly to the T1 interface and I cannot reach the internet.

    I did notice one thing since my post:


    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    10.122.149.0    *               255.255.255.0   U     0      0        0 eth3
    10.123.1.0      192.168.123.253 255.255.255.0   UG    0      0        0 eth0
    10.242.2.0      10.242.2.2      255.255.255.0   UG    0      0        0 tun0
    10.242.2.2      *               255.255.255.255 UH    0      0        0 tun0
    adsl-068-157-10 *               255.255.255.248 U     0      0        0 eth1
    loopback        *               255.0.0.0       U     0      0        0 lo
    192.168.5.0     *               255.255.255.0   U     0      0        0 ipsec0
    192.168.10.0    *               255.255.255.252 U     0      0        0 eth3
    192.168.123.0   *               255.255.255.0   U     0      0        0 eth0
    192.168.124.0   *               255.255.255.0   U     0      0        0 eth4.400
    192.168.125.0   *               255.255.255.0   U     0      0        0 eth4.500
    192.168.126.0   *               255.255.255.0   U     0      0        0 eth4.600
    192.168.127.0   *               255.255.255.0   U     0      0        0 eth4.700

    There isn't a route for the T1 Interface. Could this be the problem?
Reply
  • 0
    Hi Ulrich,

    Thank you for your response. There aren't any multipath rules configured. But I think my main concern is when I change the masquerading to point directly to the T1 interface and I cannot reach the internet.

    I did notice one thing since my post:


    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    10.122.149.0    *               255.255.255.0   U     0      0        0 eth3
    10.123.1.0      192.168.123.253 255.255.255.0   UG    0      0        0 eth0
    10.242.2.0      10.242.2.2      255.255.255.0   UG    0      0        0 tun0
    10.242.2.2      *               255.255.255.255 UH    0      0        0 tun0
    adsl-068-157-10 *               255.255.255.248 U     0      0        0 eth1
    loopback        *               255.0.0.0       U     0      0        0 lo
    192.168.5.0     *               255.255.255.0   U     0      0        0 ipsec0
    192.168.10.0    *               255.255.255.252 U     0      0        0 eth3
    192.168.123.0   *               255.255.255.0   U     0      0        0 eth0
    192.168.124.0   *               255.255.255.0   U     0      0        0 eth4.400
    192.168.125.0   *               255.255.255.0   U     0      0        0 eth4.500
    192.168.126.0   *               255.255.255.0   U     0      0        0 eth4.600
    192.168.127.0   *               255.255.255.0   U     0      0        0 eth4.700

    There isn't a route for the T1 Interface. Could this be the problem?
Children
No Data