I have 1 MK with 3 Eth installed. 2 for ISP’s and 1 for my LAN. The gateways are set 0.0.0.0 GW ISP1, ISP2. The NAT rules are:
[Gaby@MladostLAN’s router] ip firewall src-nat> p
Flags: X - disabled, I - invalid, D - dynamic
0 src-address=192.168.0.0/16 dst-address=!192.168.0.0/16
out-interface=pppoe-out1 action=nat to-src-address=212.36.5.49
1 src-address=192.168.0.0/16 dst-address=!192.168.0.0/16
out-interface=cable.bg action=nat to-src-address=213.240.195.155
[Gaby@MladostLAN’s router] ip firewall src-nat>
It works fine but the problem is that ICQ and other messangers drops and reconnects, The online games too drops and reconnects. The hudge downloads too. When i traceroute from a machnine connected to my LAN interface i see that i am reaching for example http://www.yahoo.com through ISP1. When i trace after a 10 min i am reaching it via ISP2. I think that this is the problem. When GW switch ICQ and other things drops and reconnects. THE QUESTION IS :
How I can tell MK not to switch when there is built connection ?
Be healthy
Gaby !!!
this is because the Nat is changing the gateway the connections are going out
try to make all icq or msn messenger client traffic flow thru one gateway this should fix the issue
randy
Try adding these four rules. Your messengers won`t disconnect but the problem of VOIP will remain.
add dst-address=64.12.0.0/16 prefsrc=0.0.0.0 gateway=ISP1 distance=1 \
scope=255 target-scope=10 comment="icq1" disabled=no
add dst-address=65.54.0.0/16 prefsrc=0.0.0.0 gateway=ISP1 distance=1 \
scope=255 target-scope=10 comment="msn1" disabled=no
add dst-address=205.188.0.0/16 prefsrc=0.0.0.0 gateway=ISP1 distance=1 \
scope=255 target-scope=10 comment="icq2" disabled=no
add dst-address=207.46.0.0/16 prefsrc=0.0.0.0 gateway=ISP1 distance=1 \
scope=255 target-scope=10 comment="msn 2" disabled=no
Hi
I know that if I use special routes for messangers that will work, but my clients plays Starcraft and other games and tell me that and the games drops. I think that i have saw somewhere how to mangle all packets belonging to one connection and make them go through 1 ISP, But i haven’t remebber where i saw that.
Be healthy
Gaby !!!