Routing problem



  • Right now I have 2 VDSL2 connections with a fixed ip:

    At that last ISP I also have a routed subnet : 85.234.197.zzz/26.

    The first connection (WeePee/Openweb) is used for normal internet traffic, the second one (edpNET) is for my servers).  So normaly all my traffic goes tru weepee/openweb, and all server traffic goes tru the edpnet connection.

    Everything works great…everything that i connect to the internet uses the openweb gateway and every server is reachable using the edpnet interface, BUT : when i do a traceroute to an IP of my routed subnet (eg 85.234.197.1 or hostname "s01.be.it2go.eu) i got this:

    C:\Documents and Settings\Krisken>tracert 85.234.197.1

    Bezig met het traceren van de route naar s01.be.it2go.eu [85.234.197.1]
    via maximaal 30 hops:

    1     1 ms     1 ms     1 ms  172.17.95.251
     2     1 ms     1 ms     1 ms  192.168.99.1
     3     1 ms     1 ms     1 ms  193.191.170.28
     4     1 ms     1 ms     1 ms  ge.ar1.gntste.belnet.net [193.191.7.89]
     5     5 ms     4 ms     4 ms  10ge.cr1.brueve.belnet.net [193.191.17.49]
     6     6 ms     5 ms     5 ms  edpnet.bnix.net [194.53.172.89]
     7     6 ms     6 ms     6 ms  router01.sn.edpnet.net [212.71.1.61]
     8     6 ms     6 ms     6 ms  212.71.17.2.res.static.edpnet.net [212.71.17.2]

    9    37 ms    26 ms    40 ms  openweb.gw.be.it2go.eu [217.145.41.147]
    10    38 ms    53 ms    52 ms  s01.be.it2go.eu [85.234.197.1]

    De trace is voltooid.

    See the 9th hop : it is my first ISP (for normal internet connectivity), not my EDPnet line!

    Does someone has an idea how i can fix this?



  • you might want to change your public ip's to xx's and yy's.

    I didn't get the idea, what is the problem?



  • See hop number 9 in the traceroute.  That should be "edpnet.gw.be.it2go.eu" (my connection with the routed /26) and not "openweb.gw.be.it2go.eu".

    I don't know if that is possible but it seems that pfsense receives the request using the edpnet connection, and send the answer using the openweb connection?



  • What rules you have concerning to that routed location. Asymmetric routing shouldn't work with SPI, meaning that sending traffic from GW-A and receiving to GW-B should not be working


Log in to reply