Wissen >> Astaro Firewall


Policy Route zu einem zweiten Internet Anschluss


Product Version: 7.000 or later


Task:


What is the benefit of policy-based-routing? When your company has two different connections to the internet, e.g. one dedicated line with unlimited traffic and one DSL with a traffic limitation, you can split your traffic by definition of the used protocol, source or destination. For example, all http traffic over the dedicated line - normally the biggest part of whole traffic - and the other traffic (SMTP, pop3) over DSL.
The following step-by-step instruction describes the configuration of policy-based-routing on using the proxy-functionality on ASL


Steps:


- Create your secondary internet-access, e.g. DSL. When this line is established by a router in front of Astaro, create additionally the gateway-IP as a host definition.
Webadmin -> Network -> Routing -> policy based routing, for example HTTP
Source: External Address (that one currently with the default gateway on)
 Source Interface: Any
 Destination: Any
 Service: HTTP
Target: Gateway-IP of your secondary Interface (even if this has none itself, since you can only define one gateway), or PPPOE-Interface-Address

- Additionally you need SNAT-rule to replace the external IP to the new target interface.
 Webadmin -> Network -> NAT/Masquerading
 Source: external address of the primary line
 Destination: any
 Service: http
 Change source to: external address of the secondary interface

The same is for SMTP or SMTP-Proxy but also take care you have your MX-record set on the right external IP also for incoming traffic.

Ähnliche Artikel

Tags: fw   astaro  
Erstellt: 20.03.09

Kommentare

Noch keine Kommentare für diesen Eintrag vorhanden

Bitte Melden Sie sich an um ein Kommentar zu schreiben

comment_rank Kommentar-AddOn für RedaxoCMS von franz007