EFW Support

Support => General Support => Topic started by: sseitz on Sunday 07 June 2009, 04:27:33 am



Title: Different Outbound IPs on multiple IPs in main uplink
Post by: sseitz on Sunday 07 June 2009, 04:27:33 am
Hi,

i've recently  introduced a new server in ORANGE which is also reachable via RED (main uplink) by using a ALL:ALL Portforwarding Rule.
RED holds 6 IP's via "main uplink". I configured one IP as usual and five "additional". All of these IP's are in the same subnet.
If I connect via RED to this new server in ORANGE, everythink works as expected. If the server starts an outbound connection by itself,
it's always routed via the first IP of the "main uplink".
I'ld like to ask if it's possible to have this machine routed via on of the additional IP's?

I did some tweaking on console with eth3:1 eth3:2 and static routes which seemed to work, but I'ld like to configure it persistent (and always visible) via the web configurator.

I've also tried to add an additional uplink to the same interface, but it looks like every uplink wants its own interface ...


Title: Re: Different Outbound IPs on multiple IPs in main uplink
Post by: sseitz on Sunday 07 June 2009, 07:50:26 pm
SOLVED.

Adding a SNAT Rule solved this issue.


Title: Re: Different Outbound IPs on multiple IPs in main uplink
Post by: itguy12 on Friday 21 August 2009, 11:54:57 pm
Can you be more specific? I have the same issue (multiple IPs on RED, all traffic is going out the primary). How did you setup your SNAT rules?


Title: Re: Different Outbound IPs on multiple IPs in main uplink
Post by: sseitz on Saturday 22 August 2009, 06:03:23 pm
1. Firewall -> Portforwarding/NAT -> [Portforwarding]

add RED[your_Special_RED_IP]:ALL -> Your_local_Server:ALL

2. Firewall -> Portforwarding/NAT -> [Source NAT]

add :

Source [Net/IP] -> You_local_Server
Target [Zone/VPN/Uplink] -> Uplink main [ RED ]

Service/Port left as it is.

NAT [NAT] to Sourceaddress [Uplink main - IP: your_Special_RED_IP  Position: As First Rule


add:
Source [Net/IP] -> Network/IP Field left blank
Target [Zone/VPN/Uplink] -> Uplink main [ RED ]
Service/Port left as it is.

NAT [NAT] to Sourceaddress [Uplink main - IP: your_DEFAULT_RED_IP  Position: As LAST Rule



Apply Rules ;)