Policy-Based-Routing is a more complex form of the ordinary routing table

learn more… | top users | synonyms

1
vote
2answers
39 views

Use OpenVPN tun device for specific request

I have setup an OpenVPN connection with the route-nopull configuration. So now no special routes have been added to the client's configuration and only a TUN device is created, like so: tun0 ...
0
votes
0answers
12 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
3
votes
1answer
97 views

Change source IP address based on the system user

I would like to make a certain user have a specific source IP address. For this purpose, I added a secondary IP address to the network interface and tried to enforce the source IP using ip6tables and ...
0
votes
0answers
93 views

Dual homed Linux host (Debian/Ubuntu) using DHCP

We have an Ubuntu server with 2 NICs. Each one is on a different subnet. Besides there's a third subnet. Clients sit on all three subnets. All clients should be able to talk to both server IPs so we ...
0
votes
1answer
59 views

load balancing multiple connections over multiple links

As I understand it (based on the kernel docs) the setting of "arp_filter=1" necessitates the use of a source based routing policy to allow multiple interfaces to route traffic, potentially (but not ...
1
vote
2answers
71 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
0
votes
0answers
76 views

puppetlabs/firewall nat policy issue

I'm using puppetlabs/firewall. I need to create following iptable rules: iptables -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443 My manifests is firewall { '001 default ...
0
votes
0answers
53 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 ...
0
votes
1answer
62 views

PBR with iptables

I know question was answered multiple times, but this situation a bit different. So here is what I have: All users must user default gateway on eth0, except one That one must only use gateway on ...
0
votes
0answers
107 views

routing based on source IP

I am trying to do source-based routing, following the question http://unix.stackexchange.com/questions/131527/routing-based-on-source-ip. The source IP floating one and assigned to a cluster ...
1
vote
0answers
78 views

Can I route traffic destined for a local interface out another interface?

I'm trying to set up a testbench for a transparent device (called TD from now on). The goal is to make sure it forwards and logs correctly. I need to use just 1 machine + the TD in the test bench. ...
0
votes
0answers
54 views

Identifying IPSec OIDs for Quagga routers

I'm trying to retrieve the IPSec Policy information (output of "setkey -D and setkey -DP" commands) from Quagga/Linux routers, and am unable to find them. Some notes from my attempts at finding it: ...
1
vote
2answers
1k views

Tap0 not receiving traffic

I have created a tap device tap0 address 10.2.1.4 and added it to a host bridge br1 with address 10.2.1.1 I have "nc 10.2.1.4 -l 1234" running on the host and from another machine I do a "nc ...
0
votes
1answer
197 views

Cisco IOS policy route for router originated VPN traffic

We have a Cisco IOS router with two DSL connections. One of them is intended for general traffic (ADSL), the other for VPN links (BDSL) and various other traffic. So the default route is the ADSL ...
1
vote
0answers
108 views

Linux as gateway with VLANs failing for local network

We have a private VLAN being routed out from a host connected both to it and to our public network. Hosts on the private VLAN have the private IP address of the gateway host (10.2.2.82) set as their ...
1
vote
0answers
368 views

Using ebtables to drop packets out of bridge and route via Tinc VPN

We have a bridge set up on Ubuntu to link our LAN to our gateway which is on the same subnet. We need this to be able to control the traffic and are not currently in a position to change subnets so we ...
2
votes
2answers
122 views

Simple Policy Based Routing for matching source packet to return packet

I have two ADSL modem-routers and a server all in the same statically-assigned IP address range (192.168.0.1/24). Internet 1 -- (1.1.1.1) Modem 1 (192.168.0.1) -- Switch -- (192.168.0.3) Server ...
-1
votes
1answer
242 views

Policy based routing on a bridge interface

I'm currently setting up an Ubuntu 12.04 with 2 net interfaces. eth0 is on LAN_USERS (192.168.5.0/24) intended for user and eth1 is on LAN_INFRA (10.0.4.0) intended for management. Additionally, I've ...
3
votes
1answer
214 views

Packets not entering FORWARD chain

first of all, this is not an every-day routing issue. The setup is fairly complex, so let me state it before. I got a router with, lets keep it simple, 3 interfaces. eth0, eth1, eth2. eth2 is used ...
1
vote
2answers
170 views

OpenVPN Endpoint to endpoint using the real IPs

I want to connect two servers to eachother over the internet. For various reasons I cannot use IPSec for this. I would like traffic to be transparently encrypted as if I was using IPSec transport ...
0
votes
0answers
469 views

Policy-based routing with openvpn

I just want to check with you if the config i have made is correct. I have my goflex with archlinux installed on it. The NAS is connected to the router (router IP is 192.168.100.1)- the NAS IP is ...
1
vote
0answers
1k views

How to enable source-based policy routing with pfsense

I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2. On the firewall rules, I set a LAN rule ...
3
votes
2answers
2k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
1
vote
3answers
2k views

Linux policy routing - packets not coming back [closed]

i am trying to set up policy routing on my home server. My network looks like this: Host routed VPN gateway Internet link through VPN 192.168.0.35/24 ---> 192.168.0.5/24 ...
2
votes
1answer
803 views

Two NICs, one with static ip and one DHCP. IP Policy routing

I have trouble configuring a server that I own. It has Linux Ubuntu Server Edition 10.04 LTS as OS, two NICs (eth0 and eth1) and uses OpenVPN. eth0 is connected to a switch which is connected to a 3G ...
2
votes
0answers
348 views

Forward IP packets to tunnel device

I have created an tunnel device using ip tuntap add dev tun0 mode tun user 0 group 0 I then assign it an ip address 192.168.0.1/22 ifconfig tun0 192.168.0.1 netmask 255.255.252.0 On my ...
2
votes
1answer
635 views

Cisco Catalyst 4500 Policy Based Routing

In order to test a new firewall I just set up I'm trying to implement policy based routing on our core switch. I want traffic from certain vlans to be routed to the new firewall while everything else ...
2
votes
2answers
4k views

pfSense with two WANs, routing Skype traffic over a specific WAN

I have a pfSense setup with two WANs (WAN1 and WAN2) and one LAN network. The two WANs are setup for failover. However, QoS has recently been an issue for Skype calls in our office (about 30 people) ...
4
votes
1answer
297 views

How to prevent default route from propagating into iBGP?

I have 2 Foundry FESX448 switches which have external BGP connections. Each of them receive a default route. These 2 switches also have a BGP session configured between themselves and advertise routes ...
0
votes
1answer
2k views

I can't access my public IP from local network

I use a linux machine with two different internet connections as the default gateway of local network. Each internet conncetion has its own public ip address. I've used source routing with "ip rule" ...
0
votes
1answer
121 views

Policy routing script for linux

I am looking for some policy routing script for linux that isn't a part of a firewall, there are tools like shorewall and others but I prefer something more simple. I only need a script that can set ...
1
vote
0answers
484 views

How can you route DHCP requests through a non-default gateway?

I'm hosting some KVM virtual machines on a server with two NICs, eth0 and eth1. I have two networks 192.168.100/24 and 192.168.200/24. I have set up bridges as per ...
4
votes
2answers
2k views

3 WAN and a Cisco Router - PBR, QOS, Load-Balancing

I have a cisco router with 4 ethernet interfaces, scenario is as follows : 2 x Dedicated Leased Lines (2MB and 4MB) 1 x Business Class DSL 10MB 4 3COM L2, Switches, connected to a Core Switch (3COM ...
0
votes
3answers
766 views

Ubuntu server (VM) with two interfaces. Can only pass traffic on one or the other interface at a time

Let me start with a crude network diagram. Internal Layer 3 switch (Multiple VLANS, including 172.16.220.0 network) --> Internal network (172.16.220.0/24) --> eth1(172.16.220.100)-Ubuntu 10.04 ...
1
vote
0answers
1k views

Choose gateway based on UID (Linux)

I have two NICs and two IPs. How do I set up routing in a way where everything is sent through the first IP, except the traffic of a given (local) user, whose traffic is sent through the second IP? I ...
0
votes
1answer
299 views

Trying to figure out ssl over a reverse proxy with multiple backends/infrastructure

I'm having a hard time wrapping my mind around ssl with multiple backends. I might just need advice on infrastructure in general. Here is my scenario/question: I have three servers: main website ...
2
votes
1answer
477 views

IPv6 policy routing on Linux

My organisation currently has two active IPv6 ranges available to it, and we're cutting over from one to the other. I would like to have them both working at once, but it appears that Linux does not ...