So I have this challenge, and I've searched the internet high and low. Learned a lot - but Im still having some issues regarding my two gateway setup, which I really want to accomplish.
I have two gateways, for various reasons and I am trying to get the two NICs to behave. My problem is with the secondary Gateway (Gateway2), since everything works with Gateway1 and eth0, default route and everything.
So first off, my setup looks somewhat like this:
NAT (in) = Cisco ASA NAT (out)= Zyxel whatever
NAT (in) - - - - - - - - - - Ubuntu Box 12.04 - - - - - - - - - - - - NAT (out)
10.0.0.1 <-> 10.0.0.50 (eth0) || (eth1) 192.168.0.50 <-> 192.168.0.1
. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gateway2
So I went to:
1. Create new table : "1 zyxelwan"
2. Create routing policy for table (zyxelwan)
ip route add 192.168.0.0/24 dev eth1 src 192.168.0.50 table zyxelwan ip route add default via 192.168.0.1 dev eth1 table zyxelwan
3. Set the IP rules which makes use of the newly-created routing table:
ip rule add from 192.168.0.50 table zyxelwan ip rule add to 192.168.0.50 table zyxelwan
I have left out other configurations (for now) to ensure that I was running lighest-possible-config. And it is as if my ip rules are being completely ignored, see here some of the outputs I get after the above mentioned steps.
route -n Kernel IP routing table Destination Gateway Genmask Flag Metric Ref Use Iface 0.0.0.0 10.0.0.1 0.0.0.0 UG 100 0 0 eth0 10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
Cannot see the table Ive configured, but if I try to apply the routing commands to the table again, I get "file already exists". So the config should be there somewhere.
But when I try to tracepath i.e. 220.127.116.11, I get this result:
tracepath 18.104.22.168 1: 10.0.0.50 0.161ms pmtu 1500
So I tried to delete the gateway, from which it tried to send the traffic (10.0.0.1) - with this result (This should seems to be regardless my ip rules & table).:
tracepath 22.214.171.124 1: send failed Resume: pmtu 65535
And if I write the route, ommiting the table, and replace the previous default route with:
route add default via 192.168.0.1 dev eth1
It will ofc work,but id really like being able to SSH/VPN into the Ubuntubox from my Cisco Gateway and then access the network on my Zyxel Gateway - Am I missing something dreadfully obvious, or are you smart ppl out there able to point me in the right direction?
I was thinking according my ip rules, it could be as if it only "listens" for traffic, and will direct it out the same interface - according to the table/ip rules - and the solution might just have been "switching the cables around"?
Anyhow, thank you in advance for any suggestions :)