Hello,
I have connected two ISP providers on Astaro ASG120 V8.312 and I have trouble accessing interface connected to first internet provider from second internet provider network.
Interface config:
Eth0 - internal network 192.168.0.0/24
Eth1 - ISP1 provider x.x.x.x/30 with default GW
Eth2 - internal guest network 192.168.1.0/24
Eth3 - ISP2 provider x.x.x.x/16 !!!
Currently ISP2 is used only for site-to-site VPN, but maybe it will be used for dial-in VPN in future.
All other traffic goes thru ISP1. On ISP1 I have published web and mail server...
The problem is that nobody can ping (or send mail to) from directly attached ISP2 network to IP address defined on ISP1 connected interface.
The ISP2 network is big - /16. And I suspect that when somebody tries to access from this network the ISP1 interface, Astaro sends answer from ISP2 connected interface. If I disable ISP2 interface, then everything is working fine.
There is configured no uplink balancing, no multipath rules, no policy routes. There is only one additional static route for site-to-site VPN (Interface route, remote internal network, ISP2 interface, metric 5)
Do you have any idea, how I can solve this problem?
Thank you very much!
Best regards
Davorin
This thread was automatically locked due to age.
