[LARTC] 3 nic -s, 1 lan, 2 internet connections, ip based routing and

[Sysadmin <sysadmin@e-positive.ee>]

[-- Attachment #1: Type: text/plain, Size: 2007 bytes --]


Hello.

I have problem to solve, redhat 6.3 based linux router, 3 network cards,
eth1, 192.168.10.1 connected to switch, eth0 213.180.9.x connected to
one adsl bridge and eth0 213.34.9.x connected to another adsl bridge.

Group one ---|         |                                  | eth0 213.180.9.x
                   | HUB  | --- eth1 192.168.30.1 |
Group two ---|    |                               | eth2 213.34.9.x


So one internal subnet, users from group one 
(192.168.10.2,  192.168.10.3,  192.168.10.4,  192.168.10.5) are allowed use 
eth0 and users from group two 192.168.10.10,  192.168.10.11,
192.168.10.12,  192.168.10.13 are allowed to use eth2 for internet 
connection, no load balancing etc is needed, the idea is just one router 
for two separate companies. So i made iptables nat rules:

$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.2 -j SNAT --to-source 
213.180.9.x
$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.3 -j SNAT --to-source 
213.180.9.x
$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.4 -j SNAT --to-source 
213.180.9.x
$IPTABLES -A POSTROUTING -t nat -o eth0 -s 192.168.30.5 -j SNAT --to-source 
213.180.9.x

$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.10 -j SNAT 
--to-source 213.34.9.x
$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.11 -j SNAT 
--to-source 213.34.9.x
$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.12 -j SNAT 
--to-source 213.34.9.x
$IPTABLES -A POSTROUTING -t nat -o eth2 -s 192.168.30.13 -j SNAT 
--to-source 213.34.9.x

But now i have routing problems, as both internet connections are
default route and i can use only one settings in /etc/syscondig/network:

GATEWAY="213.180.9.x"
GATEWAYDEV="eth0"

Then i found http://lartc.org/howto/lartc.rpdb.multiple-links.html but 
seems this is not 100% what i need, as there is no internal network 
interface included and routing is possible to network, not ip based.

Is it possible to get it work at all, and if so, then how?



--

Mart Pirita
--

Mart Pirita 

[-- Attachment #2: Type: text/html, Size: 2833 bytes --]