ipfw route to multigateways

[Julian Elischer]

Rosli Sukri wrote:
> hi
> 
> scenario:
> users---->[lan]freebsdipfw[wan]----->{gw1,gw2}
> where gw1 goes to isp1, and gw2 goes to isp2.

easily done but how do you ensure the return packets come back the 
same way?

> 
> 
> requirements:
> ftp, http, https traffic goes to gw1
> telnet, ssh, mail and pop goes to gw2

in -current there are several ways to do this
including:
* multiple routing tables
   use a firewall rule to assign incoming packets to different routing
   tables for forwarding (setfib) (-current only)
* Forward rule
   ipfw add 100 fwd tablearg ip from IP1 to table 1 in xx0
   ipfw add 101 fwd tablearg ip from IP2 to table 2 in xx0
   and add routing entries into each table
   * or just use a single address if you don't need a table:
     ipfw add 100 fwd ISP1 ip from IP1 to any in xx0
     ipfw add 101 fwd ISP2 ip from IP2 to any in xx0

* natd..
   I'm not an expert in this but it can do some of this

* a combination of the above
   Natd can be used to NAT your outgoing packets so that the return
   packets come back the same way.. either only NAT the packets to one
   ISP or Nat them both with different NAT instances. use a fwd rule or
   setfib rule to decide which ISP to use and limit the NAT to
   processing  packets in or out of that interface.

> 
> can freebsd ipfw do this?
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"