Hello together,
I'm trying to set up a second GW for a secong ISP.
Maybe it's not usefull to do this over Static Routing, so I need a little help here.
First of all a little overview:
We are using the Sophos UTM9 (Software-Appliance) on a computer with 5 network interfaces.
Interfaces: (IPs are changed by editorial staff)
eth0 - with a own subnet for maintenance connection
eth1 - External WAN (ISP_A) - 192.168.10.2/24, Default GW 192.168.1.1 [that's the modem ip]
eth2 - Internal A(Trusted) - 190.0.11.1/16
eth3 - External WAN (ISP_B) - 95.96.97.2/29
eth4 - Squid-Proxy - 192.168.20.1/24 [this is only for testing a Squid Proxy]
--Additional Addresses:
--Internal B(Trusted) - 190.0.12.1/16 on Interface "Internal A (Trusted)" [eth2]
Network Protection >> NAT:
Internal A(Trusted) (Network) -> eth1 External WAN (ISP_A)
Internal B(Trusted) (Network) -> eth3 External WAN (ISP_B)
Squid-Proxy -> eth1 External WAN (ISP_A)
Network Protection >> Firewall:
Internal A(Trusted) (Network) -> Any / Websurfing
Squid Proxy(Trusted) (Network) -> Any / Websurfing
Internal B(Trusted) (Network) -> Any / Websurfing
...and some more
###############
The users have 190.0.11.1 [Internal A(Trusted)] as their GW on their workstations and there is no problem to surf in the internet.
Some test users have 190.0.10.1 (which is the Squid Server which is using the External WAN (ISP_A)) as their GW and everything works fine.
Ok, now I want to add my second ISP (ISP_B), so I set up eth3 and the "Additional Adress" on eth2 you see listed above.
After that I recognized that it isn't possible to give eth3 another (needed) GW for the ISP_B.
So I decided to use Interfaces & Routing >> Static Routing:
Route Type: Gateway route
Network: Internal B(Trusted) (Network)
Interface: External WAN (ISP_B) [eth3]
Gateway: ISP_B-Host (95.96.97.1) [Type:Host]
This seems all right to me. Weird thing: If I click Edit the Interface has changed to External WAN (ISP_A) [eth1]! [:S]
Why? What is this about? Is this an error or is my setup not possible in this way?
It would be great to hear some ideas and/or solutions to this. Maybe Static Routing is not the best way to add an second ISP or my Internal B should be in another subnet.
Oh, by the way: I'm not sure how clever it is to have the same (automatic) Network Definition with (Network) [190.0.0.0/16] and (Brocast) [190.0.255.255] for Internal A(Trusted) [190.0.11.1] and Internal B(Trusted) [190.0.12.1]...
Cheers
This thread was automatically locked due to age.
