topic Re: Load Sharing ISP redundancy in Firewall and Security Management

Load Sharing ISP redundancy

Carlos_Arzate — Fri, 09 Oct 2020 00:23:17 GMT

Hi,

We have configured my ISP Redundancy as 50-50 load sharing. My first link works fine, but when connecting to my second link some machines that go through link 2 have problems with the Internet. We run the traceroute and I can't see my default gateway on those machines.

The machines that go through link 1 do not have problems. We run the traceroute and they go through their default gateway without problems.

Re: Load Sharing ISP redundancy

PhoneBoy — Fri, 09 Oct 2020 02:39:07 GMT

I saw from the other message you tried to post this is R80.30.
When you say “I can’t see my default gateway” what precisely does it mean?
Do you see with a tcpdump on the relevant interface that traffic is going to the second ISP and that it is being NATted appropriately?

Re: Load Sharing ISP redundancy

Carlos_Arzate — Fri, 09 Oct 2020 18:50:04 GMT

We run an fw monitor and the nat is displayed correctly.

When we run a traceroute from the FW interface (link 2) from there you can't see the default gateway of the link. So we did a ping test to the default gateway and the answer is successful.
We removed the link completely for testing and were successful.
We connected again and the problem is still present, the machines behind link 2 do not have internet navigation.

Re: Load Sharing ISP redundancy

PhoneBoy — Sat, 10 Oct 2020 01:42:44 GMT

What precisely does fw monitor show when you do a traceroute?
What precisely does fw monitor show when you try and access something over the Internet?
The more details you can provide, the better.