Re: [LARTC] Multiple internet providers

From: "Martin A. Brown" <mabrown-lartc@securepipe.com>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Multiple internet providers
Date: Tue, 18 Mar 2003 16:47:40 +0000	[thread overview]
Message-ID: <marc-lartc-104800613324060@msgid-missing> (raw)
In-Reply-To: <marc-lartc-104798747003702@msgid-missing>

Kim,

 : I'm having a problem with multiple internet providers. According to all
 : the things I have found so far it should not be that uncomplicated to
 : set it up - however, I'm having some problems getting it to work.

You are correct.  It is not uncomplicated.  It is also not difficult.  :)

 : Firsth the scenario - I'm having 2 Internet providers, one fast with 32
 : static IP's and one slow with dynamic IP's. Internally we are using a
 : private net which is set up for 32 ip's. Now, we have to map all 32
 : static ip's to the private IP's so all machines can be reached
 : externally through the static net. The default route is suppose to be
 : the slow ISP.
 :
 : So far, I have found that I need to set up the routing using marking,
 : and then set up the rules so it work accordingly.

That's one approach, documented here:

  http://linux-ip.net/html/adv-multi-internet.html

This only works if you are not trying to perform link load balancing.  If
that is your intended goal, you'll need to check out the Nano-HOWTO (Hey
Julian--this appears to be missing right now):

  http://www.linuxvirtualserver.org/~julian/nano.txt

 : But this appears to just work with static routing, not when one of the
 : providers is dynamic!

It doesn't matter that the IPs are dynamic, just that you can alter the
affected routing table when you get a new dynamic IP.  If you are using
rp-pppoe, you'll want to perform your additional routing table
manipulations in ip-up.local.

And also, unless you have a routing daemon, you are using static routing.
A dynamic IP address is simply that--your network-connected machine is
still performing static routing, though it has a dynamic address.

Since you have a dynamic IP on one interface, you may wish to use the -j
MASQUERADE target instead of the -j SNAT target.

 : Does anyone have some suggestions for what to do?

Do the above suggestions help?

-Martin

-- 
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/