Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Management, Networking, Logging and Reporting

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-23-2009, 02:18 PM
Junior Member
 
Join Date: Jul 2003
Posts: 16
Default [7.403][ASG220] Multipath Rules have no effect

Hello there

i've read the whole forum to find a solution for my problem but i'm not getting out where i did a mistake.

I have two lines for outgoing traffic. one adsl line and one vdsl line. adsl is configured as bridge with pppoe. vdsl is currently configured as ethernet (router after astaro) because i have crazy problems if i configure it as dhcp (vdsl in CH is no more pppoe, we have to use dhcp in bridged mode). anyway... the lines are working so far.

i activated uplink balancing in multipath mode and added both interfaces. the adsl is on top.

i also created two multipath rules with the following settings:

1.
Uplink Primary Addresses→HTTP→Any→Ext VDSL 20mbit (Persistence by interace)

2.
Any→ Any→Any→ Ext ADSL 6mbit (Persistence by interace)

as i understand it, this configuration should send all http traffic trough the 20mbit line and all other trough the 6mbit line.... but all traffic goes always to the 6mbit linel.

if i change the order of the interaces (under uplink balancing) and take the 20mbit as first interface, the traffic goes all trough the 20mbit line.

it seems to me like the system just don't care about the rulez :-/

in the dashboard i have an error with the uplink of the 20mbit line... but it works!

i'm thankfull for every idea

best regards
mike
Reply With Quote
  #2 (permalink)  
Old 06-23-2009, 10:59 PM
RFCat_vk's Avatar
Wizard
 
Join Date: Aug 2005
Location: Victoria, Australia
Posts: 2,520
Default

Hi,
which link is your default gateway?
For this version of ASG I don't remember seeing the ability to change the proxies from the default gateway. For your non proxied traffic NAT rules and routing rules can be used..

Change your default gateway to the VDSL link and create routes and NAT rules for the other traffic pointing at the ADSL service.

Ian M
__________________
Home Power User unlimited licence - v7.50x - AMD X2 5050e with 2gb,1 intel NIC, the onboard NIC and netgear gs108t with vlans.
Reply With Quote
  #3 (permalink)  
Old 06-24-2009, 12:54 AM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,252
Default

This might work. I'd be interested to know if it does.

The classic way to get HTTP traffic to go out a secondary WAN interface is:
Traffic Source: [Ext ADSL 6mbit]
Traffic Service: HTTP
Traffic Destination: Any
NAT mode: SNAT (Source)
Source: [Ext VDSL 20mbit]
Source Service: [leave blank]
Automatic packet filter rule: [checked]
With that, you don't need the second rule, because that's the default anyway.

Your first rule becomes: 'Any→HTTP→Any : Persistence by Source/Destination'

If the 20mb cable is disconnected, I think HTTP traffic will fail over to the 6mb connection.

Does that work?

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #4 (permalink)  
Old 06-24-2009, 01:09 PM
Junior Member
 
Join Date: Jul 2003
Posts: 16
Default

Thanks for your help so far!

the default gateway is the 6mbit line - but with uplink balancing enabled, they both have default gateway checked.

i tried your solution with the SNAT but it's still not working. the effect is, that traffic which goes directly over http is sent over the 6mbit line. traffic over http proxy hangs, i can get no connection out so far. if i change the SNAT service to http-proxy, the proxy works but also over the 6mbit line.
Reply With Quote
  #5 (permalink)  
Old 06-24-2009, 03:32 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,252
Default

Interesting. Let's hope Gert or another Astaro guru comes by and comments.

Thanks - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 06:35 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.