This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Multipath - multiple WAN's for multiple LAN's

Hello,

I am trying to configure a second WAN port so I can view my traffic based on LAN/WLAN, giving me a little more control and visibility into my wireless traffic.

Currently I have:

eth 0 - WLAN 10.10.10.x
eth 1 - WAN ***.***.***.2
eth 2 - LAN 192.168.0.1

Both LAN and WLAN use masquerading to WAN to get out to internet.

I added eth 3 as a 2nd WAN port, configured as ***.***.***.15 and initially thought that changing the masquerading rule to point to the new WAN (named WWAN) would work... and of course it didn't as apparently Multipath rules is the way to achieve this.

Well configuring Multipath rules is less than intuitive for me so I am unsure what rules I need, and also unsure if there is any changes needed in my masquerading rules.

config should be pretty straight forward as WLAN (eth 0) traffic should be routed out on my WWAN port (eth 3) and LAN (eth 2) traffic should continue to be routed out on the original WAN (eth 1) port.

Thanks in advance for any help.

Chris

This thread was automatically locked due to age.

0 BarryG over 12 years ago

I'm not sure what happened to the nice multipath articles which were in the Knowledgebase, does anyone know?

Anyways, there are still a couple articles there, but they don't have the pictures that the others had, and seem shorter:
Balancing specific traffic such as HTTP over all WAN Links with Multilink on Astaro Security Gateway - Knowledgebase - Support - Sophos
Article - Knowledgebase - Support - Sophos

Maybe posting pictures of your multipath configuration would help.

iirc, the Masquerading should be to the (virtual) Multipath link.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 sd48tech over 12 years ago in reply to BarryG

I'm not sure what happened to the nice multipath articles which were in the Knowledgebase, does anyone know?

Anyways, there are still a couple articles there, but they don't have the pictures that the others had, and seem shorter:
Balancing specific traffic such as HTTP over all WAN Links with Multilink on Astaro Security Gateway - Knowledgebase - Support - Sophos
Article - Knowledgebase - Support - Sophos

Maybe posting pictures of your multipath configuration would help.

iirc, the Masquerading should be to the (virtual) Multipath link.

Barry

I don't actually have any MP rules in place because nothing I was trying made much sense... I will read those kb articles and see how I make out from there.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 sd48tech over 12 years ago in reply to BarryG

I'm not sure what happened to the nice multipath articles which were in the Knowledgebase, does anyone know?

Anyways, there are still a couple articles there, but they don't have the pictures that the others had, and seem shorter:
Balancing specific traffic such as HTTP over all WAN Links with Multilink on Astaro Security Gateway - Knowledgebase - Support - Sophos
Article - Knowledgebase - Support - Sophos

Maybe posting pictures of your multipath configuration would help.

iirc, the Masquerading should be to the (virtual) Multipath link.

Barry

Thanks BarryG, the article didn't exactly answer my problem but it did give me a hint that allowed me to solve it. I needed to enable Uplink balancing and add the 2 WAN interfaces to the Active Interfaces. doing this made the WAN interfaces selectable as options on the Multipath rules when using Itf. Persistance: by Interface.

Settings/Steps used were as follows:

Enable Uplink balancing
Add both WAN ports to Active Interfaces

Multipath Rule 1:
LAN/WAN
Source: Internal LAN
Protocol: Any
Destination: Any
ltf. Persistance: by Interface
Bind Interface: External WAN

Multipath Rule 2:
WLAN/WWAN
Source: WLAN
Protocol: Any
Destination: Any
ltf. Persistance: by Interface
Bind Interface: WWAN

As I thought, it was a pretty simple config, but it needed that first step to make the Multipath rules work by Interface.

Thanks again for pointing me to KB article.

Chris

PS. running ver. 8.305 and the masquerading rule changed all on its own from WAN to Uplink interfaces... thats a nice touch.
Cancel
Vote Up 0 Vote Down

Cancel