Hi!
We have Astaro v 7.402.
We have a pool of public IP addresses, xx.xx.xx.66-67-68-69, and gateway is xx.xx.xx.65.
I want to use the primary external interface configured with the ip xx.xx.xx.67 and with the default gateway (xx.xx.xx.65) to exit the LAN traffic and another external interface with the ip xx.xx.xx.66 for the DMZ.
The Astaro is configuring acording the article of the knowledge base second to Route Policy WAN Connection (236926), but it does not work correctly.

The configuration is:
WAN INTERFACE
Address: xx.xx.xx.67
Netmask: / 29
Default GW: enabled
Default GW IP: xx.xx.xx.65

WAN 2 INTERFACE
Address: XX.XX.XX.66
Netmask: / 29
Default GW: Disabled

Definitions>>Networks
Definition for the WAN gateway address: xx.xx.xx.65

Create the policy route:
Route Type: Gateway Route
Source Interface: DMZ
Source Network: DMZ(network)
Service: Any
Destination: Any
Gateway: Gateway (xx.xx.xx.65)

NAT masq for second network:
Masquerading Rule
Network: DMZ(network)
Interface: WAN2

Any idea?

I'm confused by the overlapping definitions in DMZ (Network) and External (Network); I think that would cause routing problems.

I suggest you use the "standard" approach of creating a DMZ with private IPs. Then, put Public-IP 'Additional Addresses' on your WAN interface and create DNAT rules to connect them to the private IPs of the servers in your DMZ.

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!